Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File: vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier: 5styHPQTJMfNXQdklnFoWqtYOC/xAJtsL7BCwVDieXI=
Subject key identifier: 2A:72:87:F3:71:DD:D7:E4:D3:D5:7C:39:06:42:7D:61:A5:C7:F1:57
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer: /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial: 01A0D2DE457DC9C903ED40E6B4CCDFB7428B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 10:02:57 +0000
Manifest this update: Thu 24 Sep 2026 10:02:57 +0000
Manifest next update: Fri 25 Sep 2026 10:02:57 +0000
Files and hashes: 1: ZGekjXEzpu_RZ-7_vyg6Eo2ZkNk.roa (hash: g9zJSRkWxGZifxxDK0NFw2MI+0xI5nvgLjURj1IFEFw=)
2: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: 7jfuX/L98Q23wDJqQ35QHChUtnqAuMhUEv142AnnwVQ=)
3: xj3KIjGGQeE9p2z5xDtR4kdM838.roa (hash: KadOdd0YIetDxyuEeROWrqZ3UbDrY1vHEUtLjmlaM0E=)
4: z6bCwLojIPVuxbTXw72sR-aZPSQ.roa (hash: jarPN7oKXyiEaRbhLltezQTSG2nKsHFs4sdkmV5yFgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:45:7d:c9:c9:03:ed:40:e6:b4:cc:df:b7:42:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Validity
Not Before: Sep 24 10:02:57 2026 GMT
Not After : Sep 25 10:02:57 2026 GMT
Subject: CN=2a7287f371ddd7e4d3d57c3906427d61a5c7f157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:b3:14:57:e9:9f:71:db:85:47:41:f5:1f:
fc:c8:4e:3e:0d:a7:f8:49:05:15:6a:97:86:83:cb:
7b:26:ec:84:19:7a:47:e3:56:f5:8c:74:e2:2b:b4:
7d:dc:3e:46:62:8a:22:28:61:01:b8:95:ac:68:5f:
dd:79:20:ca:1b:eb:af:c7:96:c9:a7:4c:47:4f:c7:
61:7a:ed:ba:31:1c:de:bd:21:45:19:78:d8:6e:bb:
64:c7:7b:0e:15:e4:5c:3e:ab:34:86:05:5a:87:c9:
7f:7e:ad:83:dc:24:30:0e:04:0d:d1:e2:99:e9:a4:
74:85:2e:ed:d5:7f:2a:14:c4:b2:e7:7d:16:83:f3:
0d:bf:3a:e2:e8:88:9b:cc:72:6c:33:35:69:13:2d:
c4:c2:34:1c:06:55:34:71:88:e0:9a:21:54:9f:3e:
74:8e:cd:24:5b:6a:3b:d2:61:c1:ed:3e:e4:92:51:
9c:17:96:f7:81:46:04:84:7f:92:d7:25:76:d9:10:
2d:cb:dc:c2:8a:f4:57:de:96:4e:1b:a5:79:c2:ef:
c3:f2:3f:66:ae:fd:9d:72:4b:f2:ff:d6:54:2d:7c:
e9:a8:d1:b4:eb:93:f4:5a:9a:d7:3a:85:e9:30:f7:
51:40:91:20:43:55:e5:cb:6f:7c:cc:3d:b6:3e:d9:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:72:87:F3:71:DD:D7:E4:D3:D5:7C:39:06:42:7D:61:A5:C7:F1:57
X509v3 Authority Key Identifier:
keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:07:1b:94:6e:fe:0b:7d:2a:5b:0c:33:69:f8:9d:d1:96:6c:
0f:67:d1:a2:dc:87:4c:5b:1b:68:d9:be:af:c7:62:9d:84:3e:
aa:9b:68:f7:8c:c4:fb:f9:d0:c6:b5:47:16:21:0f:96:9e:dc:
b2:15:46:8e:db:1f:88:9e:43:23:22:ac:0b:ea:1a:43:b0:3c:
a2:80:bc:4a:f8:54:aa:60:f4:c0:b8:ed:66:e4:a3:db:45:06:
9d:c5:69:65:e3:3d:5c:d8:b5:57:43:55:cb:fb:29:1f:3a:12:
d6:d4:65:ba:c0:ae:29:53:d3:ed:e6:70:91:7d:57:a3:60:86:
6e:3d:6e:09:2f:9a:1f:cd:f7:94:6a:ea:7c:e9:e3:67:79:9f:
88:3c:00:ef:4a:f5:f3:93:3f:a4:28:29:fa:7e:1f:39:15:7b:
22:1d:82:9f:cf:47:75:33:4a:21:91:19:f9:22:8b:82:93:ad:
1d:b9:b1:a4:9f:e9:f6:0f:d5:6d:a5:83:e5:2d:3f:df:35:d6:
fd:de:67:84:65:73:25:e2:c7:fb:62:77:01:5d:78:09:b2:d8:
45:0a:5f:17:13:37:bd:07:b3:8f:8e:21:c0:2e:58:8d:0b:86:
d6:07:63:77:44:1f:63:a7:c6:cf:ab:7f:9f:50:3c:24:15:79:
dc:2e:4a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:09:15 2026 by rpki-client