Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
File: vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft (raw, json)
Hash identifier: V4TQRk/YqPVGqHqO1abQNjoqZ7x+hD9pdDfGonHu05k=
Subject key identifier: D7:2E:4C:D6:DE:DF:7A:B9:95:41:80:6A:A4:D6:2C:94:8F:31:9E:47
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial: 01A138245ADD30D0D4603E7A106616F3CF2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
Manifest number: 1AA9
Signing time: Wed 14 Oct 2026 02:01:09 +0000
Manifest this update: Wed 14 Oct 2026 02:01:09 +0000
Manifest next update: Thu 15 Oct 2026 02:01:09 +0000
Files and hashes: 1: mLE7VosmydhVCMguYH3rQgmTc-M.roa (hash: mTYzchMKEO4uZTushftKzw0+5nZsPeA/JGcP5k+QnQM=)
2: peCptJnBjS01Jffe9zNkUarZyKY.roa (hash: NdN6bmU/0xsnoYufljMuvL8XIU6jhRkxeQ2tCu90AyY=)
3: vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl (hash: nE2XcZYKDbJm1523olOcd5j+QNCsma7lnIKI6K2uWPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:24:5a:dd:30:d0:d4:60:3e:7a:10:66:16:f3:cf:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Validity
Not Before: Oct 14 02:01:09 2026 GMT
Not After : Oct 15 02:01:09 2026 GMT
Subject: CN=d72e4cd6dedf7ab99541806aa4d62c948f319e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8a:e6:25:ea:b1:33:7d:fd:a4:0b:a1:a4:4b:
b6:d5:23:02:16:ee:95:8a:d1:40:a3:0e:87:cb:9a:
ff:1f:42:7c:cf:ed:e1:b0:5d:b9:fe:9a:c2:77:f0:
9d:db:4d:1f:84:33:e7:9a:b1:89:83:03:16:96:24:
8a:a4:44:3d:e2:ad:ff:57:45:4f:62:b2:91:60:30:
61:74:0d:0f:54:f1:61:eb:97:e2:21:85:96:72:18:
9a:53:c6:bf:13:74:cc:16:bf:d2:42:b6:12:47:37:
2b:b3:ff:a2:73:35:2b:79:ad:9e:7c:ec:c2:5c:cc:
a6:4f:ea:f5:2e:5a:44:85:9e:71:86:fa:8a:84:77:
7e:a6:c5:08:34:19:32:15:48:3f:bf:30:19:81:9a:
65:a3:6c:bc:fd:c8:2f:35:92:c2:81:8a:73:48:4d:
e7:9a:40:82:71:1f:0d:29:54:79:c9:21:e0:1a:34:
14:d1:1c:47:04:0a:44:56:11:bc:60:1d:5a:63:86:
b6:2f:cb:5b:c5:1a:13:0a:ed:78:00:15:19:21:63:
95:c7:10:ca:61:db:31:41:cf:a6:f7:67:e8:e2:83:
f0:d0:f8:6b:bb:51:09:f4:d1:c6:5f:59:51:7d:98:
49:20:29:22:c5:bc:87:fb:36:50:b1:70:79:48:d2:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2E:4C:D6:DE:DF:7A:B9:95:41:80:6A:A4:D6:2C:94:8F:31:9E:47
X509v3 Authority Key Identifier:
keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:17:c6:1c:71:36:b0:6e:7b:60:cb:52:ea:fd:5e:ac:f0:17:
36:99:09:9f:fe:4f:13:ac:6c:8b:10:eb:de:27:3c:7c:1d:60:
c9:a1:9d:1e:f1:95:60:49:df:70:7a:a5:85:01:23:f5:7d:53:
cd:d7:5c:87:d6:4e:e7:a4:97:47:0c:f1:42:ca:32:a7:18:d9:
ee:0f:43:d9:d3:a1:40:75:b0:5f:ee:51:5b:66:b9:c8:39:a0:
38:e9:0b:95:99:df:42:56:fd:f2:1d:07:68:93:93:eb:3a:ea:
6c:66:8f:43:c8:8d:ad:4a:8e:94:28:80:7c:f6:d1:7a:6f:a1:
40:14:74:64:0e:ab:d6:82:f9:33:c5:aa:94:b3:81:ee:25:34:
74:2e:75:56:31:51:53:b9:dc:af:37:1a:78:8a:e0:51:ae:46:
01:bc:4c:59:b1:56:98:cc:65:e0:90:bb:b8:81:91:d6:3c:64:
08:52:57:93:28:95:c1:13:39:fa:5b:1c:f8:ae:7a:80:db:cf:
05:5b:a7:6d:e2:5e:6e:ca:dc:59:0d:b3:a6:03:69:db:2e:b0:
83:14:c4:9c:da:d0:6e:b6:de:b3:98:da:c5:87:63:c7:c4:af:
45:15:11:4b:8c:76:52:ea:16:de:bb:aa:64:38:7e:cf:3e:4a:
95:f3:03:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:48:28 2026 by rpki-client