Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
File: vYUnKkCAkE914jWkevC0EmbipgM.mft (raw, json)
Hash identifier: ip2aITLnmwgAXPrHVe5niYEpE+BOrn4j0ILiU0rfxRs=
Subject key identifier: DB:DD:31:BF:9A:BF:47:10:09:61:4E:41:CB:95:0C:4F:4D:F4:D7:7C
Authority key identifier: BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
Certificate issuer: /CN=bd85272a4080904f75e235a47af0b41266e2a603
Certificate serial: 01A0D64C490C8783CDC22B9ED71E5DA3C4FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
Manifest number: 0D99
Signing time: Fri 25 Sep 2026 02:01:58 +0000
Manifest this update: Fri 25 Sep 2026 02:01:58 +0000
Manifest next update: Sat 26 Sep 2026 02:01:58 +0000
Files and hashes: 1: 5TQ-JqFgF-IFdipnnBO-T6tTIiI.roa (hash: jvG5fPveO3vEmUkVM2g5EIXNmfe8tIUO+ydnKHanIQ8=)
2: vYUnKkCAkE914jWkevC0EmbipgM.crl (hash: IOkhhMlFFUnNEc/RXgd7y4nGfoXcUkEhwcHlj1imtuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4c:49:0c:87:83:cd:c2:2b:9e:d7:1e:5d:a3:c4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd85272a4080904f75e235a47af0b41266e2a603
Validity
Not Before: Sep 25 02:01:58 2026 GMT
Not After : Sep 26 02:01:58 2026 GMT
Subject: CN=dbdd31bf9abf471009614e41cb950c4f4df4d77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:22:bc:3b:c5:12:6a:46:86:bb:d5:fe:a5:
68:4d:f9:32:2f:b1:44:81:73:17:04:ac:a9:27:25:
15:ed:19:5b:72:35:02:ae:3d:4e:03:43:02:c0:a8:
eb:d0:9e:01:d8:52:ae:63:11:82:4a:ad:42:98:a2:
1a:73:d1:6a:00:dd:4d:76:b3:28:b6:39:aa:2a:a3:
af:9c:40:72:82:4b:da:f8:d8:c5:eb:11:52:bc:a1:
04:70:d5:a0:6f:9a:38:5a:47:79:74:a2:41:9f:4e:
14:68:c8:89:d0:a3:c7:c0:ea:48:6e:f2:6a:85:bb:
99:2d:36:9e:cd:72:8c:f6:13:69:f5:73:2a:a3:27:
64:b9:93:58:e0:a2:27:77:3a:36:4a:49:b9:1f:14:
c8:c7:4f:da:36:21:24:43:62:73:27:d3:83:a0:94:
98:65:b3:ea:97:f5:28:a8:59:11:d2:85:64:30:cf:
5f:37:d3:7d:4f:56:c8:41:73:1d:29:36:a0:31:74:
cb:fc:a7:d4:6d:37:d9:89:0b:f5:7b:b8:c8:c1:6a:
14:99:06:70:ee:28:9f:03:8e:3c:58:91:62:a4:31:
86:70:ba:34:42:7a:79:c8:93:96:c3:8f:11:c6:13:
83:61:9d:d2:38:58:14:21:42:6b:1f:b9:70:18:d9:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DD:31:BF:9A:BF:47:10:09:61:4E:41:CB:95:0C:4F:4D:F4:D7:7C
X509v3 Authority Key Identifier:
keyid:BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:75:c4:29:ca:7f:18:e2:7c:e9:10:8b:4b:26:b2:5b:17:7c:
1b:1e:45:95:c9:cc:8b:ba:b3:99:ea:ff:b8:08:9d:3b:24:19:
2e:f2:5b:3e:c4:2d:76:72:39:98:75:d1:43:7b:ea:53:0e:85:
5f:02:f3:c9:f8:64:6a:d6:eb:6c:d1:35:ed:63:d7:95:e8:b7:
ad:6b:86:8f:5a:f5:2e:8b:4c:81:37:d0:40:90:2d:ee:3c:9d:
54:ed:38:13:57:47:5a:18:34:f5:ab:99:d5:88:c7:a8:34:e0:
1c:c9:51:89:ec:20:41:be:2b:dc:58:d0:21:f8:57:ed:02:b1:
6b:fd:7a:d8:d8:6f:85:78:d5:f6:ab:d4:ff:97:fe:5d:56:26:
bc:ac:b6:9f:08:e7:5d:59:63:7d:4d:e8:be:a2:f6:33:37:3d:
e3:a5:33:37:79:b8:0f:cf:ae:55:43:8f:a8:89:43:24:16:2f:
01:dd:ed:16:f0:39:8a:4d:23:39:07:32:53:01:cd:8d:e5:ef:
22:72:67:ef:c4:cb:96:c4:3a:2b:fe:1e:2a:f1:90:67:48:ca:
ba:0c:6a:41:5b:7a:fe:d0:e3:10:7a:5f:4e:3b:f5:ca:ad:43:
cc:db:56:65:c2:57:0f:d8:5e:16:d2:d3:db:67:03:77:50:fc:
08:eb:68:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:34:25 2026 by rpki-client