Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: h92TxYPIKDsVfcAYY9nK5DgLoyervOYmvnO51783ua0=
Subject key identifier: 22:B1:09:DF:C9:3D:E1:CF:F5:3B:B8:85:9D:12:19:2B:47:32:85:D7
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 01A0C21FB12133B1F35244A37C4B610D74C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 04:00:51 +0000
Manifest this update: Mon 21 Sep 2026 04:00:51 +0000
Manifest next update: Tue 22 Sep 2026 04:00:51 +0000
Files and hashes: 1: GD5N1e3Ei3ORndrSHYwwOCJ1-ck.roa (hash: snYjDxWHMkR6zUe+lhv2/FAqfemlL5lVnJY940jUknk=)
2: gX94KHujeqBgf1OQw3kvDwZSXYw.roa (hash: iWZ0LIZisJBiwchMv/ZPll0lS2mW3PKbeX5QIpLootw=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: gFZG3z9uOjkEOiFy9cIBKG1GnZohX3TdfJgRvcCM7z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:b1:21:33:b1:f3:52:44:a3:7c:4b:61:0d:74:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Sep 21 04:00:51 2026 GMT
Not After : Sep 22 04:00:51 2026 GMT
Subject: CN=22b109dfc93de1cff53bb8859d12192b473285d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:36:fe:47:1d:8a:c4:95:0f:af:b3:9b:f0:
56:45:e4:02:01:0b:67:0b:d3:31:e7:b4:d5:6b:99:
f2:29:80:53:bf:35:f7:ec:9e:07:62:35:1b:eb:14:
be:ff:09:b8:32:d1:07:c3:8d:57:fa:91:94:c4:43:
04:e2:00:e5:f0:c5:1e:a7:df:bb:ff:32:29:80:a6:
92:39:f5:81:53:5a:4b:84:30:05:a9:45:55:f3:a5:
79:11:94:53:33:78:2c:0a:07:8b:69:de:10:24:37:
53:5d:51:fa:c9:2d:d7:3c:db:fd:ef:62:aa:54:6f:
d4:14:d2:c7:e4:5d:ab:05:95:65:00:56:1f:a5:1f:
eb:01:78:8f:e8:10:6b:7b:d2:2d:23:64:ab:c0:cb:
1f:dd:63:ae:c1:70:12:9d:3a:7c:b5:9f:d8:ed:9c:
ea:ad:47:87:e9:03:6d:63:9e:da:7f:12:d9:cc:80:
ef:d2:12:fe:50:c3:12:8b:36:ed:bc:41:2d:53:66:
8f:29:9b:15:83:ab:6d:e8:28:7a:7d:94:e4:9e:b2:
9d:9f:18:0b:d9:52:70:30:29:fd:52:08:13:3a:ef:
c6:7c:7c:f5:07:a8:a6:7d:6a:db:4b:f0:7f:30:bf:
8c:03:c2:10:6f:89:5d:16:10:06:ba:b1:69:3d:c2:
8b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B1:09:DF:C9:3D:E1:CF:F5:3B:B8:85:9D:12:19:2B:47:32:85:D7
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:99:6c:a9:49:74:ed:11:de:93:96:d6:ff:94:df:15:a2:b8:
e4:19:04:01:2c:43:9c:9c:08:63:d9:74:8b:79:19:e3:87:36:
6e:fb:97:e1:7f:26:67:0f:c4:fe:b3:e7:eb:92:c3:88:2c:2e:
d2:ea:a5:43:c3:5b:bc:73:ad:26:4e:43:fa:8f:24:49:a7:11:
9b:1e:41:d0:85:b3:d0:97:82:74:e7:b8:7a:62:30:b5:64:c3:
e5:fd:3e:64:ba:8e:62:3f:b7:a4:9a:33:e1:a2:c6:13:ec:e5:
5f:bf:f0:1a:a4:d0:21:2c:3d:c2:03:9d:80:02:db:bd:f0:51:
a8:cb:7e:32:53:77:89:c1:dd:31:ee:86:8a:c2:ba:7c:c8:7b:
cc:03:e6:c1:9a:51:23:aa:86:8c:f2:de:f7:7e:07:45:87:ce:
c5:5e:6d:ed:63:7b:28:aa:68:61:7a:01:12:26:d7:6a:73:9a:
85:f3:4c:40:0c:f9:fe:73:6f:7e:ec:ac:5e:6a:c1:2e:ce:0e:
27:d1:31:d6:73:62:2e:6e:6d:65:f1:9e:c1:42:9a:22:d6:4f:
bb:22:24:1f:42:4e:74:a8:78:1b:6c:d7:14:2b:45:ee:ff:d8:
91:29:f4:ce:72:55:1d:47:07:9a:92:26:00:e0:0d:f6:7c:dc:
49:50:df:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:48:53 2026 by rpki-client