
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: guIgcHiT8OQKusTIFG2tbSfwx2V8HBYejetoJTqOVro=
Subject key identifier: BF:2C:18:6D:FE:24:CE:34:3E:0F:96:73:4E:61:B3:1A:89:72:32:E4
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 01A0DC84BDFD0BCA68FD22372BED4267A78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 0E73
Signing time: Sat 26 Sep 2026 07:01:21 +0000
Manifest this update: Sat 26 Sep 2026 07:01:21 +0000
Manifest next update: Sun 27 Sep 2026 07:01:21 +0000
Files and hashes: 1: FKH8xZJ_YHOc07BQdMH2-QcT4rI.roa (hash: Yvb0PbUbYKGYDycEyweK+TQumsZjfiIHZGi6vLPV4RI=)
2: UFyGWXWcim7DlwzYRFdDDxFp02E.roa (hash: kKnEir5+3nk1ouhvn6251pQ8Tl1aQO6TIVnnwdHfSdI=)
3: sdzS0oCftjlUBF_x6Se_monNeYk.roa (hash: WoH/tQiUE8dkOdaeguscSVlQ0r0KBSj1gMZzcaTJ6DM=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: HeBQKF434GpLRW4BccshjFirPqVL9S0FlezHiRi+anc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:bd:fd:0b:ca:68:fd:22:37:2b:ed:42:67:a7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Sep 26 07:01:21 2026 GMT
Not After : Sep 27 07:01:21 2026 GMT
Subject: CN=bf2c186dfe24ce343e0f96734e61b31a897232e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:38:03:40:01:df:eb:fb:fc:cd:40:3f:0b:e5:
45:5e:be:0d:af:64:12:e0:93:7b:15:2f:6a:b4:a4:
81:59:f2:f9:30:5e:b0:e9:b0:ff:fb:8d:53:24:62:
36:f7:e0:3e:8e:3a:31:d6:a8:ef:96:2b:8d:f1:e5:
19:3e:ad:48:e2:84:e1:94:b2:08:c7:41:20:3d:ca:
fd:2c:02:9a:5f:e4:e4:2b:dc:3d:3c:1f:7a:ec:6f:
e5:b4:6b:74:1f:f4:63:ac:5b:a4:29:cd:89:19:a2:
72:a0:dc:aa:14:ea:f3:08:bc:39:79:28:89:1d:7b:
1b:d5:07:d9:18:23:da:9a:95:17:67:5b:29:b5:40:
d0:c3:fb:ed:89:0e:c8:dc:85:0c:58:c2:0e:76:c2:
c0:0c:3e:7d:9f:b8:d5:5c:71:9c:d5:d7:74:5e:85:
5f:1e:f1:e2:cf:a6:b6:94:55:20:74:95:20:f4:69:
43:0b:00:1c:4e:a4:eb:08:81:3c:1f:9f:dc:3e:79:
e9:af:79:7d:f4:48:fa:90:6c:e9:bb:7d:64:40:bf:
22:dd:9f:61:4d:89:01:93:1d:13:08:1f:19:91:c0:
f1:8b:b3:56:3b:30:f1:24:2f:a9:f5:b7:2f:90:f8:
03:77:8a:77:e9:ee:be:40:5f:71:f8:5c:00:43:28:
ba:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2C:18:6D:FE:24:CE:34:3E:0F:96:73:4E:61:B3:1A:89:72:32:E4
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cf:41:72:cd:7e:9f:40:59:c5:17:6a:11:d9:9b:c4:5a:6b:
2d:e2:46:c1:4b:69:1a:e4:f6:7a:be:1b:84:d5:39:2b:b8:93:
4b:0d:8b:fc:95:84:5a:4f:9b:4a:54:80:88:41:5a:a0:1e:5f:
59:98:8a:0c:ba:84:92:76:5c:1a:4a:55:39:8d:32:63:d0:a2:
43:b2:a9:f1:46:3e:d9:de:e1:a8:2e:f6:cf:8b:00:2f:ca:60:
6d:7e:67:2f:d9:ef:ec:6d:76:18:f0:52:a1:e6:a8:e9:06:76:
15:bd:32:93:d1:7a:c4:5a:50:b1:55:b2:9c:17:52:a6:5f:eb:
27:52:70:57:00:16:6b:5f:38:1f:82:33:f4:99:f1:e8:87:7a:
7e:e1:6c:30:6c:c4:a5:c5:ff:1c:3e:1f:9a:01:05:6e:1f:d3:
f3:c9:26:a6:ce:3e:16:72:aa:2f:97:21:5a:59:37:53:6e:b9:
b6:a2:5d:48:54:c9:dc:40:c7:c8:db:50:fe:3f:13:8c:b6:18:
75:f6:11:93:71:3a:9a:00:63:7a:88:c8:40:0f:23:c8:c2:05:
3f:60:d6:aa:8e:b2:62:1b:d1:8a:e4:03:09:44:80:fc:47:27:
3e:d8:6d:0f:23:2a:2d:9f:f4:ef:ba:d2:c7:60:47:5e:fc:e7:
88:7b:ed:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:16:15 2026 by rpki-client