Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
File: vf3CTv25YU3JPpd3TOicHJcw5mU.mft (raw, json)
Hash identifier: XeqpN7PkNarrH2BfILh92q1iKXQyqhpYaMhr7FIHaWs=
Subject key identifier: AC:21:6E:5B:AC:87:FC:A6:E6:24:B8:23:C8:AC:F9:B0:31:A0:A8:86
Authority key identifier: BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
Certificate issuer: /CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Certificate serial: 01A10AA721ABD5ADAA722B6DFEFA47802813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
Manifest number: 03ED
Signing time: Mon 05 Oct 2026 06:01:27 +0000
Manifest this update: Mon 05 Oct 2026 06:01:27 +0000
Manifest next update: Tue 06 Oct 2026 06:01:27 +0000
Files and hashes: 1: gAWk_30h7y4VaoOZxcAdDFowjFc.roa (hash: odqu0T0Eb3GJ36/dwAalvTu2Dwy1IIPBya2kP6/fxjk=)
2: vf3CTv25YU3JPpd3TOicHJcw5mU.crl (hash: Bfirmta183+4prqhQeJ/tYtUwneURgJOMvFDnCIhgfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:a7:21:ab:d5:ad:aa:72:2b:6d:fe:fa:47:80:28:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Validity
Not Before: Oct 5 06:01:27 2026 GMT
Not After : Oct 6 06:01:27 2026 GMT
Subject: CN=ac216e5bac87fca6e624b823c8acf9b031a0a886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:c9:aa:cc:71:a9:df:6c:d6:42:9b:13:ed:
dd:ea:66:f4:cd:ed:4d:3b:17:cf:e7:3b:1d:97:d3:
c0:6e:2a:f0:38:98:08:b5:5c:f4:61:5c:51:3d:32:
3d:61:93:0a:43:e9:40:5b:e7:d0:aa:33:57:ec:12:
bc:83:51:34:86:64:32:12:00:fa:90:4c:0e:1c:6d:
67:3c:56:71:35:82:c1:70:01:ce:1c:1d:16:d9:8e:
10:d4:23:28:e8:a5:e8:e8:cf:a0:a2:23:e8:53:21:
58:77:23:2c:5d:60:ab:1e:c7:f2:03:45:ea:25:44:
97:4a:64:e1:51:ae:7f:5e:d3:57:94:94:0c:b7:4d:
98:ec:f1:b4:bd:79:4a:be:0c:62:80:30:fb:31:3b:
d4:81:07:b0:9a:f4:7e:2e:a6:dc:bb:80:b7:d4:22:
65:cf:2a:9c:49:19:7a:ae:e9:c0:84:c5:48:a7:0c:
1e:62:5e:9b:d1:f2:be:4a:2e:a0:89:82:26:2b:f3:
08:a8:6d:2e:30:97:ad:bc:3e:9b:df:37:f4:59:d0:
3b:cc:b8:61:1b:50:9d:76:d5:fb:c4:95:fd:5b:db:
d1:70:16:f3:76:c3:97:fa:4e:8d:14:2d:50:78:af:
1b:50:b0:7e:01:ea:03:8d:c0:b9:62:39:d7:14:f0:
99:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:21:6E:5B:AC:87:FC:A6:E6:24:B8:23:C8:AC:F9:B0:31:A0:A8:86
X509v3 Authority Key Identifier:
keyid:BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e4:81:5e:74:1a:02:a8:f1:e9:ac:98:24:28:01:89:b8:db:
3b:e7:9c:b7:36:1f:ae:3a:79:57:44:3a:fb:df:97:44:ee:16:
8a:e9:40:2b:2c:ed:a0:32:98:7a:89:cf:99:e6:04:76:a1:0a:
fd:ae:cc:e0:1b:0e:f7:a1:0e:9c:31:f1:b1:a5:b1:51:11:78:
b4:48:de:6f:00:07:38:b0:44:7b:cc:09:13:95:29:f3:c9:aa:
9a:56:80:78:62:87:f9:75:ea:07:af:c9:14:68:07:38:3a:c8:
75:f9:70:6d:ba:a6:83:b7:8b:9a:3f:36:0d:e3:44:b7:d5:cd:
cb:58:fe:e1:84:32:f4:75:23:9d:96:fd:31:87:a1:72:c2:ec:
bb:39:e9:70:a0:62:ea:69:8e:17:11:36:04:cb:92:47:62:b6:
03:14:5d:e4:5a:9e:e1:81:8d:84:45:9a:b6:bb:09:6b:e1:ef:
fd:c6:ba:51:83:e9:f1:a4:b2:98:8c:d6:6e:9e:3c:08:e9:c6:
94:73:fa:88:20:f8:0e:ba:c7:ea:2f:98:6f:f4:33:81:38:18:
d8:a0:a3:eb:02:e4:91:55:5c:22:ee:62:e7:9e:2f:1f:c5:ec:
a7:a4:0a:e6:92:0a:5e:c6:75:f2:97:a3:eb:f8:05:0c:18:3d:
88:33:c0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:22:46 2026 by rpki-client