Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
File: vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft (raw, json)
Hash identifier: NCnRoPwvspHC6cj6UUPmzBfMdEXghHXQtDdXF7mWs48=
Subject key identifier: 72:21:0B:0C:79:B5:7A:AA:65:28:50:10:56:0E:E9:76:52:BC:C2:CF
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Certificate issuer: /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial: 01A0D2DE076A421C2BF94ECB635E64B741A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
Manifest number: 139C
Signing time: Thu 24 Sep 2026 10:02:41 +0000
Manifest this update: Thu 24 Sep 2026 10:02:41 +0000
Manifest next update: Fri 25 Sep 2026 10:02:41 +0000
Files and hashes: 1: OTRSO5_pHSeulNj4xXvHd4-oZGw.roa (hash: GumSyhlt9WpNHRYRGiGvb9zCBM/7gwLeOV+M6h7PvAY=)
2: YFFevfcb0MJ_yPF5gFWuiYNPaqg.roa (hash: lHBaBK2XvWUWSJ/Pzslgj1K8IVs6D38UMIfHsQwv/ik=)
3: rti6tjnaJyfv_Ylmdsnl4AB3DYs.roa (hash: RksYRj9xScfDwNjU2z8C2o8FShcQoua9yZqEvSMWJ+M=)
4: vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl (hash: pX4gJjtBkKTw27LJ5hwY5lkMI40HjHpc2YnDX2yoI58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:07:6a:42:1c:2b:f9:4e:cb:63:5e:64:b7:41:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
Validity
Not Before: Sep 24 10:02:41 2026 GMT
Not After : Sep 25 10:02:41 2026 GMT
Subject: CN=72210b0c79b57aaa65285010560ee97652bcc2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0f:83:11:72:43:17:2f:3a:59:9b:df:1f:79:
8c:42:d3:33:b6:ea:60:e0:0e:cc:cd:6c:d7:2b:b6:
1d:f3:28:6e:30:ba:92:de:a7:dc:7c:76:f3:fb:28:
01:ef:00:26:e4:ec:78:7b:f6:4a:4b:b7:a6:aa:66:
a6:64:c9:51:25:06:04:9f:bf:5c:82:55:a6:06:b1:
4c:75:ca:f3:17:53:b0:55:dd:34:98:24:44:e6:a5:
e1:2c:1b:62:1d:1d:1c:13:55:cf:e4:a2:1d:04:64:
06:d6:4c:d8:e5:60:ae:2d:51:fa:21:5b:e0:ae:24:
95:e6:5f:d4:da:42:18:7e:2d:92:74:8f:67:db:b3:
e9:fa:aa:23:52:78:ca:85:85:25:a4:0c:62:a1:f8:
e1:44:31:18:37:1f:f6:e6:fd:54:b4:e2:74:66:d1:
a1:85:96:18:3e:76:d9:43:2c:5e:a8:18:e7:a3:d2:
80:17:c2:0b:9b:5d:3c:b4:3b:d2:b4:80:78:c3:00:
87:aa:9a:a0:98:39:cb:1d:5e:5c:05:96:4a:a7:24:
fb:ec:7e:96:07:65:90:ff:a0:af:77:80:ef:3f:9d:
bb:0d:53:62:df:cf:3e:3a:8c:9a:28:de:32:f7:48:
ae:a1:a2:9a:65:3e:98:98:08:da:38:da:6d:01:d7:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:21:0B:0C:79:B5:7A:AA:65:28:50:10:56:0E:E9:76:52:BC:C2:CF
X509v3 Authority Key Identifier:
keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6e:bb:7c:68:ee:8b:5d:83:14:77:ce:87:40:90:2f:17:06:
43:d6:00:41:61:81:b5:ae:2a:43:c0:46:c0:14:72:82:4b:ee:
7d:45:12:e6:2f:41:25:e0:3f:7a:77:89:d8:81:27:fb:d8:45:
3b:a9:d2:66:d2:53:e2:22:cd:21:10:bf:c1:e0:10:39:66:18:
d9:62:01:10:4a:5d:8c:9d:d2:ee:b6:6f:2e:dd:54:65:5c:44:
2a:5b:18:e2:1b:69:72:e7:ea:83:bd:6e:d1:ad:1f:f6:65:2d:
31:02:83:d8:df:ef:83:7a:19:7f:a7:8d:a8:53:23:db:98:b4:
92:9d:16:a0:d5:5d:79:4f:35:00:17:7b:0d:2e:62:a4:6e:41:
3b:b2:cc:31:4e:bc:fd:b7:7e:14:76:c6:f3:4a:72:4a:56:8d:
60:1e:52:c8:10:4c:35:56:c5:de:d9:5f:8f:87:d1:8a:03:90:
b6:96:28:48:d9:b9:2c:3a:82:cc:32:9f:4b:76:43:78:c4:f9:
36:fb:35:2d:1c:b6:3f:c8:54:2f:95:0e:b6:72:10:b6:d1:5f:
bc:de:c1:16:63:fc:7b:ae:83:65:a5:af:89:54:6a:54:17:66:
47:0d:3d:79:4c:83:b1:85:df:f4:38:07:23:d8:24:72:91:e1:
01:60:2a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:03:31 2026 by rpki-client