Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: ilXqWD+fa/DLpWag+lKBqFttkp2Y6Wf+G4xdyMbG65M=
Subject key identifier: 53:F6:C1:08:35:86:5C:C7:3F:9E:82:E4:F8:6E:68:6F:58:3B:47:FB
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 01A0D5DEA0861AA9FB11274B2FDF91675661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0EFB
Signing time: Fri 25 Sep 2026 00:02:12 +0000
Manifest this update: Fri 25 Sep 2026 00:02:12 +0000
Manifest next update: Sat 26 Sep 2026 00:02:12 +0000
Files and hashes: 1: OmdvYxmrLn_L3wu-tKKe3CfgvKI.roa (hash: yDMfNBV69imWC+j1AfIyiotbGJSK6kkJjaiL93WMyvg=)
2: aCZ93vgD_JrnhMVE8ag6EFucpkg.roa (hash: YM2YwZolqo4cY7IySdgCVqucXddKsJE5ZWSJH8u/1Ww=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: sHPjDeC290Rbo2OGqpPBD50ECveK7BC+Rwk2dUfVsLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:a0:86:1a:a9:fb:11:27:4b:2f:df:91:67:56:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Sep 25 00:02:12 2026 GMT
Not After : Sep 26 00:02:12 2026 GMT
Subject: CN=53f6c10835865cc73f9e82e4f86e686f583b47fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:e0:04:75:73:46:6f:30:bc:b0:f0:58:d1:
fc:54:54:e4:d5:97:80:6b:69:eb:44:33:97:8d:07:
86:7f:fc:0a:51:60:51:44:70:be:25:b7:7c:c1:b7:
68:57:c7:d8:eb:34:4f:3d:0d:20:55:69:03:66:2a:
c1:ba:1e:4f:48:1e:8e:f4:a6:fa:3d:12:c3:26:50:
df:9f:54:69:f7:1f:50:4c:5e:a8:a5:7a:2a:4f:f0:
6b:8f:d6:73:de:9c:a9:b2:7f:97:b4:b4:66:44:e4:
fe:3c:77:3f:7d:8a:a2:96:12:ae:4b:56:88:f3:69:
a5:d1:50:97:a1:46:06:6f:08:d9:e2:15:9e:ac:0c:
4e:9b:8b:22:08:21:e0:7f:32:31:bd:b1:6b:e6:95:
9f:8f:97:c6:45:7f:60:66:09:79:f5:90:ba:29:96:
8a:3b:15:bb:1a:ab:e0:24:19:0f:7e:9e:1c:ef:ef:
82:b1:c4:8d:ff:41:bd:5f:21:5e:2b:48:93:67:ae:
ee:d3:17:db:d0:5b:94:18:c3:ae:60:eb:01:67:ab:
58:10:e8:2d:54:79:63:b8:4f:29:70:0c:16:fb:ee:
20:97:a8:83:7e:e4:8e:8e:11:42:fa:04:93:c9:3b:
12:3c:c0:e9:24:0c:2f:62:94:13:61:a1:f2:b1:36:
bb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F6:C1:08:35:86:5C:C7:3F:9E:82:E4:F8:6E:68:6F:58:3B:47:FB
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:fb:89:dc:ab:ed:27:42:de:cb:04:ba:82:c5:72:a5:f8:60:
fd:01:a9:59:e9:1e:48:30:29:9c:3f:9c:8e:07:cf:26:25:6d:
4f:56:85:df:3a:a9:4f:08:aa:98:76:8a:06:ee:4c:8d:a8:e7:
19:14:53:85:67:c5:e0:f9:0d:87:e8:f9:69:b8:23:74:27:82:
50:6a:8b:e8:a9:e0:e4:fb:3a:3e:42:e0:6d:6d:72:ec:ad:2d:
0f:42:71:1f:ee:bc:75:35:57:94:8b:48:74:64:f2:96:4e:87:
b8:af:7d:ba:f7:03:3b:2f:67:12:a9:0c:9a:31:b3:7d:29:59:
70:33:09:8f:64:08:05:89:83:0a:55:12:c4:7b:a7:5c:1b:9a:
22:a9:a2:77:e1:25:a2:b5:25:71:24:1d:6f:a0:d3:45:16:f1:
80:b8:6f:ab:ab:04:64:0d:ac:a8:31:c7:76:62:08:91:aa:a0:
e7:46:3f:1a:f0:48:ce:eb:c9:0c:56:f9:80:7d:99:6a:d1:60:
3f:13:2e:d1:07:64:b7:bd:c5:f9:07:20:8b:69:c9:a5:08:dc:
76:f0:ad:09:bd:48:ac:8d:81:25:93:45:7a:16:57:eb:5d:4e:
a3:20:37:bb:5a:34:d2:6b:e8:d4:d7:e6:77:48:83:99:6f:9c:
6b:87:98:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:55:04 2026 by rpki-client