Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File: vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier: GjmJv9WDIwNO+SQxuH16d/aRCmxVSXBWsweg/9TR5AU=
Subject key identifier: 1D:58:6E:8F:50:2C:A7:56:6B:0B:35:9B:A5:2E:F9:9F:1B:C2:3F:59
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial: 01A0D3EFACDA360CBB33AB09AFE107880F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number: 19ED
Signing time: Thu 24 Sep 2026 15:01:34 +0000
Manifest this update: Thu 24 Sep 2026 15:01:34 +0000
Manifest next update: Fri 25 Sep 2026 15:01:34 +0000
Files and hashes: 1: Hj4v62AOdoRZqYCBUDTjMFLo8KI.roa (hash: YWbpGzjtAJu7tqoItoovhEd5x36ZXMAx6yUUYU//amY=)
2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: 3QeVjCOty4ptLxZM4WEJg44yqucTqp1oCKl+coeOCsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:ac:da:36:0c:bb:33:ab:09:af:e1:07:88:0f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Validity
Not Before: Sep 24 15:01:34 2026 GMT
Not After : Sep 25 15:01:34 2026 GMT
Subject: CN=1d586e8f502ca7566b0b359ba52ef99f1bc23f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:a8:13:55:f1:ea:a0:16:95:1f:03:b4:81:
25:93:e7:8e:e6:aa:2f:28:8c:21:11:29:df:c0:f7:
b5:9f:12:05:74:c0:5a:9d:e3:a7:5d:33:dc:f1:7e:
0e:44:89:68:e7:9f:5e:df:99:6b:b0:62:99:f4:f6:
52:22:66:02:49:cc:19:d1:60:ab:1a:5c:e0:10:8d:
36:38:23:8b:93:1d:1c:54:27:f5:cb:eb:67:21:74:
da:89:b3:10:74:b5:02:56:f2:b9:04:b6:11:09:df:
a5:d3:cb:eb:45:a0:fe:bd:24:f8:d1:a8:25:19:71:
94:79:b0:1e:de:5c:dd:5b:b2:46:00:69:2f:17:b0:
4a:69:dd:0b:e1:94:5b:54:2c:2b:43:a1:86:a5:cb:
e3:3b:f2:e6:8b:97:7c:d5:dd:87:f4:1c:bb:7c:76:
24:d7:6a:d5:86:f6:cf:c2:da:30:68:9c:e0:1c:17:
9c:db:f0:a7:02:de:64:9b:a3:65:42:16:b9:a7:61:
7f:ba:0b:fa:9b:9b:b9:ef:10:c4:7d:33:f0:e2:8f:
36:6c:0e:b7:c1:fb:e2:eb:18:6b:b7:27:77:b6:c3:
9f:31:7e:99:25:b0:35:eb:1a:44:8e:ba:6c:88:95:
57:80:db:60:40:9a:08:eb:8f:c5:fd:d4:b9:d1:c6:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:58:6E:8F:50:2C:A7:56:6B:0B:35:9B:A5:2E:F9:9F:1B:C2:3F:59
X509v3 Authority Key Identifier:
keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:89:d0:9a:0d:5e:05:cd:ed:b7:f2:a8:e6:49:fe:4d:51:d7:
ba:3b:3e:33:14:23:f8:18:9b:85:b1:09:80:34:ff:ef:3d:9d:
3c:74:3a:7e:0c:c4:51:5a:16:2a:bb:10:5e:27:02:3a:80:71:
1e:27:59:3d:d1:93:34:d3:1b:a1:10:99:a6:ca:d7:17:81:ca:
19:8b:3d:d4:29:b6:f4:33:69:14:8f:9c:a7:76:cf:37:64:fa:
45:cf:f9:88:12:b7:19:67:30:d2:2d:ae:65:40:b1:5c:2f:c1:
93:db:86:e6:89:0d:ed:25:f6:f3:e8:3d:73:e4:99:d3:0e:df:
71:19:bf:37:3a:39:fd:a3:8d:e8:c8:8a:c3:a7:3c:65:42:47:
f1:1f:bb:9e:d1:2e:bd:0a:ec:07:78:43:52:05:fb:f6:94:ca:
65:8b:ca:44:0c:5d:02:15:eb:b4:06:88:13:25:9a:fe:6d:be:
cf:c0:d2:ec:07:ba:4b:13:b7:a9:e4:4e:97:75:4a:2f:2d:20:
6c:f6:7d:38:d6:6f:90:3b:bc:d2:61:77:95:dd:3f:7a:59:fc:
04:ec:fd:37:4b:fc:81:73:5c:3c:f6:14:ad:2d:23:90:b8:eb:
89:ed:27:59:2a:03:04:9e:ca:19:76:31:52:85:d6:9c:c1:98:
4c:d8:f5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:48:24 2026 by rpki-client