Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier: sz1piA1OQXiMZPyBkr2t04wjzpzvWobi1sFXI72Vr0s=
Subject key identifier: F1:58:4D:48:B8:06:9D:9A:29:EB:9C:7A:FA:85:1B:9B:16:67:B9:F6
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial: 01A0D6F0FD9234EF799A071C7A4DAD4ECB97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number: 06D8
Signing time: Fri 25 Sep 2026 05:01:52 +0000
Manifest this update: Fri 25 Sep 2026 05:01:52 +0000
Manifest next update: Sat 26 Sep 2026 05:01:52 +0000
Files and hashes: 1: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: 1UQzkonKeauWmZi0E/Xq2q1FPld8/om/L2hjoHPXGx0=)
2: ZHhc0L728ye9C_PaxE7QKIWysf0.roa (hash: IYrJXv7Z8+WyubB49OSinWGa68suJopradNDMs9g9yQ=)
3: mUqS4S5SL9Pvq3yISShuWCb9ZtE.roa (hash: uUcTOLjK+7qjGVmB7WyFwvHdMHjyRZf2FkbrhsEB5pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:fd:92:34:ef:79:9a:07:1c:7a:4d:ad:4e:cb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Validity
Not Before: Sep 25 05:01:52 2026 GMT
Not After : Sep 26 05:01:52 2026 GMT
Subject: CN=f1584d48b8069d9a29eb9c7afa851b9b1667b9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b6:96:c0:43:19:ca:e6:dc:3f:ae:f3:27:58:
50:b1:4a:bf:d4:60:f4:db:18:62:51:6d:49:06:ad:
5d:4b:30:57:27:d6:11:0c:66:59:28:36:c2:06:5f:
21:64:f1:aa:73:6f:ea:39:1f:93:df:79:6b:8d:a7:
a0:3e:31:b1:f7:5e:8c:60:45:b8:e6:c8:db:02:c5:
be:d3:f4:dc:9e:10:67:26:8a:7b:c0:18:32:1b:c6:
e8:6e:41:47:68:40:0d:00:48:47:8f:74:a9:15:e0:
f8:94:5e:1d:8a:e5:73:9e:df:71:9f:69:6d:64:0f:
8f:9b:f3:a7:21:77:3a:9d:17:1b:74:a1:f2:ee:ff:
bc:83:81:bd:0f:70:4d:63:3c:c5:11:97:48:54:0e:
eb:2f:10:bb:e3:d0:b0:f0:1c:3b:f2:ae:48:c8:26:
9e:05:22:35:27:26:cc:b3:7b:99:04:b5:07:24:24:
88:aa:62:eb:a4:bb:e5:77:73:15:ae:6f:fc:d0:87:
7f:59:8c:e5:af:ee:a4:7a:9a:c3:1b:80:ae:ff:85:
53:79:53:50:ae:59:56:31:a2:63:3e:af:5a:62:8f:
09:c0:86:46:86:6d:e9:5f:07:40:31:17:cb:34:e5:
f8:33:5e:65:aa:09:ab:06:d3:5c:34:3e:89:04:95:
3b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:58:4D:48:B8:06:9D:9A:29:EB:9C:7A:FA:85:1B:9B:16:67:B9:F6
X509v3 Authority Key Identifier:
keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6f:76:6b:df:89:53:59:c5:7e:eb:34:35:62:0b:d5:5d:24:
85:ad:84:45:68:2d:84:dc:81:05:a6:42:1d:89:5b:07:b8:da:
e1:2f:b0:c9:72:92:b1:b3:42:6d:32:27:3b:3f:67:db:6c:0c:
45:9c:db:49:dc:5a:22:16:93:de:5a:76:37:b3:f7:c6:a8:a1:
a8:e5:21:86:ca:14:0d:38:32:82:c7:9a:50:ad:17:68:c0:d1:
fc:fe:67:62:06:06:60:7d:c6:f0:b6:5d:63:84:71:fe:eb:90:
51:60:71:14:43:41:e7:70:92:10:76:a3:ef:95:d1:22:ed:5f:
0b:34:20:dc:0d:57:1d:6f:03:20:c9:4d:db:82:53:76:0d:ba:
b2:70:59:f9:9a:3c:08:4a:10:bd:1a:72:8e:46:f2:d1:39:96:
fa:91:be:5b:58:1c:1f:75:29:11:94:8a:07:5f:3e:40:8f:21:
9a:3c:2e:17:15:c9:6a:cf:3b:71:9e:2d:ec:83:6d:3a:d3:81:
23:3f:6c:ea:92:66:c8:4f:d2:d4:b2:04:32:3f:ad:90:39:40:
c0:2c:d0:fb:2e:96:2e:f3:2a:f7:40:58:9e:b6:fc:2b:ec:b2:
19:a4:2c:57:92:63:ee:f8:48:38:b7:fb:fe:c1:62:3a:b8:f8:
1f:0c:6a:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDW8P2SNO95mgccek2tTsuXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzZjM2NhNzgwY2M1Nzc0NGFkYmU5MGEwZjM5NGYxZDFj
ZDcyZjMwHhcNMjYwOTI1MDUwMTUyWhcNMjYwOTI2MDUwMTUyWjAzMTEwLwYDVQQD
EyhmMTU4NGQ0OGI4MDY5ZDlhMjllYjljN2FmYTg1MWI5YjE2NjdiOWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbaWwEMZyubcP67zJ1hQsUq/1GD0
2xhiUW1JBq1dSzBXJ9YRDGZZKDbCBl8hZPGqc2/qOR+T33lrjaegPjGx916MYEW4
5sjbAsW+0/TcnhBnJop7wBgyG8bobkFHaEANAEhHj3SpFeD4lF4diuVznt9xn2lt
ZA+Pm/OnIXc6nRcbdKHy7v+8g4G9D3BNYzzFEZdIVA7rLxC749Cw8Bw78q5IyCae
BSI1JybMs3uZBLUHJCSIqmLrpLvld3MVrm/80Id/WYzlr+6keprDG4Cu/4VTeVNQ
rllWMaJjPq9aYo8JwIZGhm3pXwdAMRfLNOX4M15lqgmrBtNcND6JBJU7QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFYTUi4Bp2aKeucevqFG5sWZ7n2MB8GA1UdIwQY
MBaAFFR2w8p4DMV3RK2+kKDzlPHRzXLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80MzkyODUtNzIyYS00MmRmLWIxODUt
MzAzMTUxZDc2YWNlLzEvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80MzkyODUtNzIyYS00MmRmLWIxODUtMzAzMTUxZDc2YWNl
LzEvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB292a9+J
U1nFfus0NWIL1V0kha2ERWgthNyBBaZCHYlbB7ja4S+wyXKSsbNCbTInOz9n22wM
RZzbSdxaIhaT3lp2N7P3xqihqOUhhsoUDTgygseaUK0XaMDR/P5nYgYGYH3G8LZd
Y4Rx/uuQUWBxFENB53CSEHaj75XRIu1fCzQg3A1XHW8DIMlN24JTdg26snBZ+Zo8
CEoQvRpyjkby0TmW+pG+W1gcH3UpEZSKB18+QI8hmjwuFxXJas87cZ4t7INtOtOB
Iz9s6pJmyE/S1LIEMj+tkDlAwCzQ+y6WLvMq90BYnrb8K+yyGaQsV5Jj7vhIOLf7
/sFiOrj4HwxqbQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:14:17 2026 by rpki-client