Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
File: vOyMcyqkPvCzm9NNFA_dOnOu23k.mft (raw, json)
Hash identifier: M7myCLUTELkImLiaFoHfsN0v4MdOjmgZHy7hi7EjjZ0=
Subject key identifier: 52:6A:1F:F7:70:16:E8:66:16:4F:20:12:05:CA:13:D8:2F:6A:FB:CF
Authority key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
Certificate issuer: /CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Certificate serial: 01A0DBA8DA3FB871AC1DB42152592B9D1CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 03:01:11 +0000
Manifest this update: Sat 26 Sep 2026 03:01:11 +0000
Manifest next update: Sun 27 Sep 2026 03:01:11 +0000
Files and hashes: 1: jKPNglZB_9C1hd8ca4Jw_cWOzOY.roa (hash: AEoYWv6ZL0b6nATDt55iE0kgXS9whL4s6zBc29DhB/I=)
2: vOyMcyqkPvCzm9NNFA_dOnOu23k.crl (hash: Nk0kpSKjbTmFwZ4GfBM5fwn+Ime1n+tcGgKjtRu1RAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:da:3f:b8:71:ac:1d:b4:21:52:59:2b:9d:1c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Validity
Not Before: Sep 26 03:01:11 2026 GMT
Not After : Sep 27 03:01:11 2026 GMT
Subject: CN=526a1ff77016e866164f201205ca13d82f6afbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:cb:49:d1:58:c2:23:5d:6d:20:97:66:f3:
6c:8b:00:be:d1:d8:60:c9:43:36:eb:66:61:d2:57:
b8:f1:b7:f5:d2:73:96:9f:a3:8d:4c:fa:cf:7e:22:
29:6d:a3:ae:26:3f:9b:1b:ae:54:37:f0:9f:3a:89:
6a:9a:03:1b:e7:b3:f3:b0:6a:e4:c0:b0:c6:f2:2d:
75:96:69:ff:55:64:4b:d3:d8:c0:fb:c5:c4:58:ed:
0b:79:14:0d:2a:1f:90:1a:25:e5:7d:e3:c7:81:af:
0b:0d:4a:0e:ec:1d:f1:81:f4:93:69:c3:a2:7f:a7:
c1:df:d0:13:62:8a:2b:a5:b3:8b:d9:dc:e6:47:4b:
02:61:14:dc:94:0c:d8:8d:70:19:29:06:d5:a3:e9:
68:4d:ca:fe:16:02:a6:66:66:ff:55:61:d9:69:9a:
3d:94:79:92:75:a2:55:74:21:da:e2:e3:38:ca:41:
6e:e6:5b:4d:c0:00:28:cd:c7:a0:93:29:ec:d5:9b:
44:4b:c0:05:6d:06:2b:73:be:f8:9c:45:96:79:2d:
e8:54:7d:22:40:1d:13:e4:0d:70:98:4c:66:3c:03:
f4:11:26:d1:eb:60:66:f7:5a:5f:ea:f4:09:22:d2:
84:7b:75:f7:a0:dd:92:d2:58:e1:82:b8:d5:17:6f:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6A:1F:F7:70:16:E8:66:16:4F:20:12:05:CA:13:D8:2F:6A:FB:CF
X509v3 Authority Key Identifier:
keyid:BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ec:39:54:2d:ff:30:37:ca:e3:12:a5:36:7f:bb:5c:cf:d9:
d0:fe:b1:b0:a3:ed:86:63:c9:38:ea:ff:d4:85:75:53:82:5e:
de:9d:1c:49:c9:8f:ff:1c:5c:21:18:79:2c:9e:be:29:22:4c:
09:fd:5a:22:db:71:ed:4f:68:b4:54:1a:a0:c9:26:c1:5e:0e:
27:d6:da:dd:db:e6:55:a4:b6:7f:c8:b4:25:04:d0:92:32:99:
b8:ed:cf:63:40:67:8f:26:6d:7d:72:57:b5:f7:e6:a8:d4:f2:
df:80:8f:01:65:28:ea:08:20:2c:d4:a0:ab:4b:17:4f:47:69:
2d:30:dc:b9:06:98:62:16:64:ee:71:e1:9f:59:e5:5a:a7:23:
2e:d3:7c:50:cc:3f:36:dd:5b:41:98:92:77:62:c3:81:0f:9c:
07:87:dc:09:19:c5:88:09:0b:9b:46:c9:11:73:4f:07:94:ec:
35:4f:16:a1:ea:93:c6:3f:f7:9e:08:8c:ae:d9:da:e8:0d:9b:
bf:bb:c1:89:05:3f:7d:f4:13:eb:37:78:03:cb:3d:c8:dd:ca:
38:a3:16:49:76:a1:74:1b:b9:49:20:8c:0e:42:45:60:95:60:
04:c5:b2:07:f7:b9:b5:0c:0f:db:75:2c:f8:ec:81:f8:ad:ba:
77:b3:93:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:38:10 2026 by rpki-client