Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: 38Hgtv7TeGJhwgRzYJdVi56lghCwkYhOjbXa8lg3LcY=
Subject key identifier: 43:2E:3C:6A:2F:96:93:86:59:E2:3C:5D:A6:52:81:95:E1:9C:2D:DA
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 01A1E05F130B1F2E389C0D6C78BA6EF78B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0F85
Signing time: Sun 15 Nov 2026 18:01:29 +0000
Manifest this update: Sun 15 Nov 2026 18:01:29 +0000
Manifest next update: Mon 16 Nov 2026 18:01:29 +0000
Files and hashes: 1: OmdvYxmrLn_L3wu-tKKe3CfgvKI.roa (hash: yDMfNBV69imWC+j1AfIyiotbGJSK6kkJjaiL93WMyvg=)
2: aCZ93vgD_JrnhMVE8ag6EFucpkg.roa (hash: YM2YwZolqo4cY7IySdgCVqucXddKsJE5ZWSJH8u/1Ww=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: H6mmqA9eLDhv9mH36IGSXlGcwxaQF3Z4/oc5fzKKmuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:13:0b:1f:2e:38:9c:0d:6c:78:ba:6e:f7:8b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Nov 15 18:01:29 2026 GMT
Not After : Nov 16 18:01:29 2026 GMT
Subject: CN=432e3c6a2f96938659e23c5da6528195e19c2dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:64:27:99:10:cb:4f:5c:d0:bc:23:9f:0f:
44:70:ac:39:55:3f:52:9f:c9:51:cf:f8:ce:73:06:
51:63:23:2f:24:44:4b:0d:06:b9:93:f8:36:24:dc:
a4:a8:81:e5:ac:72:4f:8b:6b:09:b2:75:2f:42:f9:
1d:93:62:99:84:d5:70:0e:24:cb:0f:d4:5e:f9:75:
08:ea:4a:5c:ec:fb:8e:49:03:0a:b6:3e:7b:a6:bc:
8b:dd:6f:a8:71:d5:e8:42:d6:df:41:d0:01:93:1b:
91:c8:f8:a1:1f:12:f6:be:98:44:fb:6a:5c:3c:a0:
30:67:a8:c1:6e:8a:f2:69:f0:93:b0:9e:3b:8c:28:
8d:8a:dd:f6:0a:c6:8d:21:a9:24:a4:4b:ea:52:99:
2b:ea:e6:0b:24:55:79:f7:58:86:f4:3a:5f:7c:e1:
f8:ef:2e:a2:bf:28:32:15:18:9c:25:d2:48:1c:c1:
d4:59:94:73:d1:84:1b:27:ac:d3:5f:89:5f:9e:47:
f9:fb:3c:74:7d:f0:66:b4:61:d8:55:64:02:0e:aa:
3c:64:93:c4:44:db:5a:35:9b:35:61:e5:91:b5:fd:
3b:57:ac:71:c4:68:ae:da:7b:50:a9:d0:8c:3d:79:
da:11:ca:93:b0:f7:c8:60:ac:26:7d:75:e7:88:78:
13:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2E:3C:6A:2F:96:93:86:59:E2:3C:5D:A6:52:81:95:E1:9C:2D:DA
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:12:c5:3c:38:a4:5a:41:a9:c4:99:60:cb:13:be:ed:33:91:
8d:e4:d8:c6:20:fe:22:5f:67:dc:cb:3c:18:ee:da:a0:aa:ab:
9b:e3:71:67:c6:d0:74:1e:cc:9f:18:94:d5:4f:0f:ef:61:fa:
d0:9b:06:e0:e2:82:02:67:ba:63:84:c9:f8:ef:0a:4f:6d:91:
bc:76:c2:bc:e7:9d:5d:da:82:ae:20:63:98:57:3b:83:91:73:
9b:9a:52:39:28:cc:85:a8:5c:f1:9c:fd:8e:d9:c3:af:9a:83:
4f:df:a0:0b:bd:66:b7:b8:f0:63:8a:8d:80:6a:f7:53:b4:61:
ed:32:f1:94:3d:75:cb:15:7f:4a:91:c5:c0:38:53:da:05:82:
b5:79:7e:0d:20:93:ae:75:1a:75:d4:b0:fd:95:bf:ed:31:6d:
57:d7:b6:f8:14:10:ad:6b:f9:4d:72:09:6a:e3:d4:d9:58:87:
d5:04:5f:8f:14:55:12:51:83:e2:e5:45:25:2e:2f:11:30:39:
25:a9:b0:90:21:4c:c3:dc:c7:0b:88:94:e1:de:0e:80:99:e6:
a7:d0:a8:be:df:6b:86:45:cd:b5:d6:94:ed:7c:dd:c5:6e:5f:
06:f0:0f:6f:85:98:13:ac:2b:86:d1:44:8e:32:0e:28:0d:f2:
54:31:57:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:59:54 2026 by rpki-client