Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File: vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier: 3yXEY8Lb/0nFZj+kUMEdmi5csYf9QqnPhV3AGunXjvE=
Subject key identifier: 8C:54:07:D9:18:E3:DB:10:2B:90:7B:DA:5E:22:C9:C8:BE:D5:13:A2
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer: /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial: 01A1DD5E2EC99EC5B2BA4BC3AC84523A4BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 04:01:39 +0000
Manifest this update: Sun 15 Nov 2026 04:01:39 +0000
Manifest next update: Mon 16 Nov 2026 04:01:39 +0000
Files and hashes: 1: ZGekjXEzpu_RZ-7_vyg6Eo2ZkNk.roa (hash: g9zJSRkWxGZifxxDK0NFw2MI+0xI5nvgLjURj1IFEFw=)
2: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: DoDdOp3DgpfgY2rek6wvZwHeGns3Q70sdSt5L+EK/kE=)
3: xj3KIjGGQeE9p2z5xDtR4kdM838.roa (hash: KadOdd0YIetDxyuEeROWrqZ3UbDrY1vHEUtLjmlaM0E=)
4: z6bCwLojIPVuxbTXw72sR-aZPSQ.roa (hash: jarPN7oKXyiEaRbhLltezQTSG2nKsHFs4sdkmV5yFgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:2e:c9:9e:c5:b2:ba:4b:c3:ac:84:52:3a:4b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Validity
Not Before: Nov 15 04:01:39 2026 GMT
Not After : Nov 16 04:01:39 2026 GMT
Subject: CN=8c5407d918e3db102b907bda5e22c9c8bed513a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:71:a9:bd:5f:5e:41:fe:c6:ef:d0:c0:16:
15:d3:c1:58:1e:70:e5:38:52:8c:e1:35:aa:2d:f5:
90:5f:dd:6b:92:63:9d:83:88:ce:41:3a:21:41:e3:
bb:c7:12:20:12:89:7b:d2:eb:73:93:c7:9a:b3:d4:
70:88:2c:09:8a:30:67:c0:a7:7e:b4:63:e8:01:ba:
0d:ae:f4:84:80:04:66:da:e5:56:25:29:36:e4:ef:
72:3a:0d:4e:68:08:06:e1:46:3f:b8:98:7d:7e:b8:
58:e2:d5:9d:87:e5:be:d9:5a:3e:3d:b6:42:60:08:
8d:a2:ce:b6:23:06:55:9f:af:0e:9a:49:76:a4:fa:
7a:e3:b3:d8:54:55:70:13:18:ab:90:5c:e4:ab:6a:
bd:7c:5c:ef:2b:fb:0c:ee:77:2c:1d:a0:5c:c1:1d:
8a:f9:18:0e:75:70:34:1a:17:c2:63:16:ac:16:43:
86:59:f6:31:7e:cc:15:e2:c8:ef:97:86:fc:1d:a2:
27:b4:b3:62:09:6b:86:3b:8a:7a:3d:4f:c5:b0:ea:
4f:c4:2f:f4:75:d7:26:63:fb:ce:1f:f4:7e:d0:11:
9f:27:6a:0f:77:47:de:e1:44:e7:0c:70:5d:9e:e3:
0e:c3:5b:24:a8:85:1b:37:5e:d1:e4:2b:98:bd:ee:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:54:07:D9:18:E3:DB:10:2B:90:7B:DA:5E:22:C9:C8:BE:D5:13:A2
X509v3 Authority Key Identifier:
keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2b:49:d6:76:84:58:bf:c8:e0:6b:2a:1d:c5:bb:40:e1:5a:
19:85:1f:24:8a:4a:d1:ba:31:47:a3:de:40:3c:9b:b9:5d:01:
20:e1:a2:ae:7b:d2:37:b6:d6:1b:5d:5a:3b:74:17:fe:0b:f0:
cd:04:98:5b:64:04:f1:27:d5:40:54:8d:ef:1d:88:f8:91:89:
d4:97:61:86:d3:70:56:d2:91:15:2d:5b:2a:33:6a:d3:a8:f6:
af:6a:a5:18:2b:b5:0f:b4:c2:a7:d7:fa:5d:87:b4:c9:42:a5:
63:fe:53:85:69:7d:3f:af:43:fb:b1:f0:71:cf:5c:27:1f:16:
8f:de:b0:50:eb:38:72:71:08:62:3c:0d:77:1d:7c:db:34:1d:
a4:67:90:42:8b:56:bc:21:8a:84:20:ae:e1:ad:9d:85:48:e7:
d6:aa:d8:5d:b2:ba:e7:ec:3d:3f:94:ba:38:dd:9d:0f:1f:a3:
97:77:05:d6:de:c1:a8:8b:ef:42:c5:01:7d:7b:c6:44:ae:73:
53:5c:1a:13:85:a7:a7:0a:75:9d:50:e6:0a:89:dc:6f:3f:bb:
5b:07:0d:a1:30:54:b4:97:eb:33:6a:5b:f6:47:ec:7d:02:5d:
c6:92:f5:a8:36:0e:92:88:e0:cb:e0:f1:d1:c8:d0:ab:70:5c:
0f:25:26:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:54:54 2026 by rpki-client