Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: AiqcYXsOC1OZCNk0IijdECTi+uq/9wZltACgwpcOErA=
Subject key identifier: 1B:D0:7A:24:01:CB:C1:39:E5:8D:A9:B1:C5:F1:C6:5F:4F:37:AA:B9
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 01A0D7277359A429054D8AC6DF51E378E65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 06:01:21 +0000
Manifest this update: Fri 25 Sep 2026 06:01:21 +0000
Manifest next update: Sat 26 Sep 2026 06:01:21 +0000
Files and hashes: 1: Dnv-EV1F19e9aMG1L9dsaqy1C4Y.roa (hash: RrE3tRzsghSzPvz2h6aM81MCjghx1uCG0mdEiIujtTg=)
2: P8qRXIUXFRxLqpqPgoGyj2ksP4E.roa (hash: c/qoc2pQET/0jm2wOTLQC7x1KXfZ+jeD/PYJBR55Ebk=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: gJTA/FU1jm5rtthG0m7Atp0RbgaJqYgy1WSi95SJ2U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:73:59:a4:29:05:4d:8a:c6:df:51:e3:78:e6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Sep 25 06:01:21 2026 GMT
Not After : Sep 26 06:01:21 2026 GMT
Subject: CN=1bd07a2401cbc139e58da9b1c5f1c65f4f37aab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:9c:7a:47:f9:30:83:7a:7b:4f:d7:b1:d5:
e5:a5:e2:55:54:33:cb:62:a6:34:a1:5d:f4:5b:28:
7e:93:71:d3:9b:8d:e2:1d:70:c9:42:7b:ba:0d:7a:
cf:1e:2c:23:16:b9:ed:50:e5:9f:e7:e7:ab:12:bf:
fe:53:4a:70:4f:b5:9d:8a:03:7d:f5:a6:89:ed:ed:
4c:2a:a7:f8:bc:ff:60:70:9d:ed:4e:11:36:b6:3b:
1e:9c:19:e6:9b:bf:5f:80:70:8b:a3:65:7b:4a:5d:
03:e1:c7:65:ad:9d:a9:10:3c:a9:09:13:8b:74:72:
b3:93:13:73:13:e8:ca:5c:72:9c:0e:41:ea:2e:73:
d2:af:c7:ab:f4:23:76:66:f4:bf:61:9f:9c:a4:f8:
dc:ca:d3:2f:f1:5c:85:7d:b9:c9:6b:ee:89:c5:49:
a5:c4:50:b8:a9:6e:b2:19:8a:dd:74:a4:fa:9c:9c:
c2:6c:2b:2b:04:dd:23:f6:6c:32:7b:b5:6b:c0:ea:
84:54:3f:7a:f3:fa:41:fc:a7:90:eb:db:91:ee:fb:
22:ca:d3:45:13:f3:6c:85:68:26:57:43:f9:32:6e:
a4:dc:5c:46:09:da:e5:1e:f3:e3:ee:b5:89:d0:d2:
11:8c:38:cd:e3:d5:d0:c5:c8:12:e5:a9:4f:24:b7:
e4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D0:7A:24:01:CB:C1:39:E5:8D:A9:B1:C5:F1:C6:5F:4F:37:AA:B9
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b8:08:a8:58:53:a4:d7:32:4b:39:07:fd:47:cb:25:3d:39:
f1:56:23:67:1a:c5:30:3b:2b:69:ba:31:1c:5b:a9:2a:20:7d:
f7:b1:5e:f9:5b:92:dc:a2:64:50:32:30:a7:1c:07:0f:c5:ef:
83:44:62:0e:c7:b9:73:2b:e2:14:12:cd:cb:bd:aa:3b:20:55:
3d:27:b6:b6:a9:77:9b:a6:70:09:32:61:b2:26:13:b3:65:d2:
ec:8a:ed:22:86:e7:43:c2:47:db:a2:62:21:eb:8f:ca:9c:20:
0f:fc:56:9a:a4:2e:80:c4:40:8a:1c:0d:d5:82:28:cf:d5:eb:
01:09:97:ca:4e:82:f0:6e:b1:da:35:01:a3:90:c3:bc:a4:31:
a2:24:25:de:29:da:bd:29:13:4c:1e:45:62:21:cb:30:4b:60:
c3:fb:a2:e7:a1:2b:22:50:80:60:60:eb:5b:79:6c:2e:57:a0:
da:49:df:a4:15:ea:1f:6b:7b:fa:27:85:bd:94:d2:53:63:57:
43:40:94:96:cd:57:89:14:c7:72:ff:07:eb:6b:c1:01:dd:ee:
42:bb:6c:70:56:8d:6c:8b:1d:5b:3f:5a:c2:fe:06:fe:bb:8a:
ad:de:a2:9d:5a:e6:ee:ab:8d:05:7f:50:33:10:a1:4f:0f:dd:
9f:b5:12:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:36:38 2026 by rpki-client