Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
File: vJldFVAngKzfe25qGGXttaDn3Es.mft (raw, json)
Hash identifier: yTN2nFB68rIAx6fBbe5kUqHlyyETlDkDGkVCl8xY9HM=
Subject key identifier: AD:E8:38:2C:16:DE:69:67:B4:C4:62:C6:B4:F3:BD:FE:2D:F7:09:16
Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
Certificate issuer: /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Certificate serial: 01A0D01249D5C28E15CC07A5854DABB89FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
Manifest number: 0821
Signing time: Wed 23 Sep 2026 21:00:54 +0000
Manifest this update: Wed 23 Sep 2026 21:00:54 +0000
Manifest next update: Thu 24 Sep 2026 21:00:54 +0000
Files and hashes: 1: LgX3EnuU8OfYYtzP7MkhOHIuG6k.roa (hash: tdx965ReIy+ujDSCSzvpO67kGikMuRqJQAFubursvgs=)
2: gzoeZ2AgO1ey7ZNcukJz3zjT1LY.roa (hash: argro5YsxjIunpkmHi4BZRWmPpTrNV/wF+jpyXPN3DM=)
3: vJldFVAngKzfe25qGGXttaDn3Es.crl (hash: g2vNqrz4W4DupSxXiqA+EbcISll+vjCEXgp/3MSnclQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:49:d5:c2:8e:15:cc:07:a5:85:4d:ab:b8:9f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Validity
Not Before: Sep 23 21:00:54 2026 GMT
Not After : Sep 24 21:00:54 2026 GMT
Subject: CN=ade8382c16de6967b4c462c6b4f3bdfe2df70916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a8:fe:c6:6d:a9:8f:4e:d0:d7:0a:c8:ab:4f:
21:60:90:f1:fd:1b:91:f5:eb:f1:23:ff:18:4b:a3:
46:49:9f:bd:d5:3d:8d:25:4b:f0:b9:4d:27:49:e8:
bd:d6:0b:bc:c0:b4:dc:8f:17:bd:25:8d:61:82:ac:
57:54:bd:a0:fc:0f:4f:ea:35:5c:00:b3:e2:ce:65:
cd:49:bb:d0:23:8a:f2:71:1e:f9:49:16:56:36:ee:
86:4d:ee:7d:f5:b7:e1:84:be:1d:b9:67:15:3d:da:
d7:b8:bf:6e:08:ae:2f:2e:71:8a:46:4c:94:73:35:
5b:5a:cb:e2:2e:d9:39:97:13:5e:35:64:cb:2f:fc:
d9:d7:c4:51:1f:14:9b:a3:fd:f2:fb:b0:cb:bf:be:
fa:ff:42:d9:b5:72:ce:b5:94:70:7c:ac:46:81:3d:
e9:df:60:05:43:ef:0a:1c:2c:c2:a2:f5:04:a1:2a:
b5:76:15:a6:38:3a:db:7e:48:f7:1e:91:81:f4:33:
22:87:4a:ff:28:0c:73:c4:96:a8:8a:d0:02:b3:12:
c0:7f:6a:1e:62:05:7d:0e:1c:34:fd:2e:14:d3:9a:
a4:b6:59:c4:f7:b2:cd:7c:63:6f:90:8e:b3:99:2e:
4b:f5:74:25:de:62:78:84:0d:88:5e:7a:df:e0:02:
f7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E8:38:2C:16:DE:69:67:B4:C4:62:C6:B4:F3:BD:FE:2D:F7:09:16
X509v3 Authority Key Identifier:
keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:7b:35:be:16:a1:13:cd:12:18:94:9c:f4:c7:54:a9:7d:80:
bf:9f:e3:d6:08:0c:0f:7b:16:7e:90:89:3d:0c:4d:c2:68:5c:
aa:e7:57:bc:04:8a:39:bd:c5:d8:48:20:b5:61:af:7b:b9:0d:
62:f8:db:f5:34:8a:e9:3e:25:9c:c2:bc:03:3b:1c:f1:e2:fe:
cb:ba:c9:59:ff:b2:1c:7e:5e:ff:9c:c6:e6:05:1f:f2:d1:9e:
c4:c4:dd:f9:bc:70:fd:83:fc:cf:8a:f0:10:86:e0:1b:ea:69:
40:c9:fc:5b:b6:88:5f:81:f4:a2:e8:48:2b:d4:94:ee:19:28:
c6:57:f7:6c:62:54:17:bd:4b:5f:76:d0:ba:49:19:ae:5a:b5:
6a:f9:19:7c:f6:77:2c:ba:f3:8e:95:2e:01:35:ae:3e:09:ca:
db:72:5e:f1:17:e6:9b:5a:6f:3a:8c:0f:90:12:68:9e:45:07:
f6:8b:13:6e:0e:60:18:32:ef:b1:7c:9b:00:ad:ab:77:50:9b:
f9:ad:ed:8a:b5:de:89:77:79:96:46:4f:8d:cc:0a:7b:6a:b0:
ca:55:0b:f6:dd:28:c1:49:c5:97:66:e5:8f:1f:c6:35:fb:92:
e9:ce:aa:31:7a:02:ba:25:99:9e:99:78:9d:e2:e8:31:72:2d:
90:3e:52:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:32:11 2026 by rpki-client