Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/vXkChAfjb9PQ_HjWdFMiuwqR7D4.mft
File: vXkChAfjb9PQ_HjWdFMiuwqR7D4.mft (raw, json)
Hash identifier: 3y+hvlTmL/BEqyN7pfGQtpohF2deENzAhb1pNqOfksQ=
Subject key identifier: DF:06:2A:07:6A:E8:07:B9:D8:6B:DC:9E:C1:72:2A:EE:7C:DA:AC:0F
Authority key identifier: BD:79:02:84:07:E3:6F:D3:D0:FC:78:D6:74:53:22:BB:0A:91:EC:3E
Certificate issuer: /CN=bd79028407e36fd3d0fc78d6745322bb0a91ec3e
Certificate serial: 01A0CFDB48F874529CC3B9FE6BFAF3917B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXkChAfjb9PQ_HjWdFMiuwqR7D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/vXkChAfjb9PQ_HjWdFMiuwqR7D4.mft
Manifest number: 03
Signing time: Wed 23 Sep 2026 20:00:49 +0000
Manifest this update: Wed 23 Sep 2026 20:00:49 +0000
Manifest next update: Thu 24 Sep 2026 20:00:49 +0000
Files and hashes: 1: A87KyXgZxFXcOFcdTP-aqI08c04.roa (hash: bMlH4UM/eYsz1FGmzC6vUqxk4Fiu/Vplgw62sZLOk7s=)
2: vXkChAfjb9PQ_HjWdFMiuwqR7D4.crl (hash: nGhLwe0DPxoIhAyFT5grNGDO0efe1G6zmNTrq/D7akM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/vXkChAfjb9PQ_HjWdFMiuwqR7D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/vXkChAfjb9PQ_HjWdFMiuwqR7D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXkChAfjb9PQ_HjWdFMiuwqR7D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:48:f8:74:52:9c:c3:b9:fe:6b:fa:f3:91:7b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd79028407e36fd3d0fc78d6745322bb0a91ec3e
Validity
Not Before: Sep 23 20:00:49 2026 GMT
Not After : Sep 24 20:00:49 2026 GMT
Subject: CN=df062a076ae807b9d86bdc9ec1722aee7cdaac0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:60:02:96:82:06:06:93:cb:77:5b:e4:f0:30:
04:9e:9c:ce:04:72:83:f7:6b:3e:06:2b:58:ed:05:
cf:4c:97:87:61:d2:05:b4:00:e2:a8:62:95:aa:b6:
4b:55:74:3a:25:00:2e:06:44:21:83:42:bb:19:99:
a6:e1:fc:88:1e:1e:a6:1c:17:7a:eb:a5:3e:ff:3c:
1e:35:c9:4e:56:66:27:1c:7b:ed:87:91:88:c0:65:
a7:69:89:e0:35:ce:53:c1:d8:b6:fe:1b:9d:bd:24:
d6:7c:85:57:33:1d:91:4f:70:f3:91:be:02:ce:35:
14:f2:ca:ba:d7:3f:7f:74:05:bf:87:a9:0f:9b:f4:
aa:87:09:03:60:30:b6:36:10:ba:5b:bc:28:48:9c:
bc:08:2b:77:8f:3c:32:ee:c3:6a:3a:a1:d5:d4:93:
e5:a2:8a:f0:71:59:a7:5b:ba:02:f6:51:7b:07:be:
00:dc:d2:70:44:de:45:3d:3d:a3:d7:72:a2:a1:0c:
59:cd:fb:61:27:6e:70:fc:ce:8b:09:25:80:aa:f3:
b5:b4:d0:54:49:ce:36:d0:47:74:83:c4:54:d8:7f:
8b:af:1f:bb:9f:4d:21:b4:b9:7a:1e:d5:9e:46:f0:
12:d2:b9:cc:96:44:c1:a7:a7:ca:51:88:cc:40:8e:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:06:2A:07:6A:E8:07:B9:D8:6B:DC:9E:C1:72:2A:EE:7C:DA:AC:0F
X509v3 Authority Key Identifier:
keyid:BD:79:02:84:07:E3:6F:D3:D0:FC:78:D6:74:53:22:BB:0A:91:EC:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXkChAfjb9PQ_HjWdFMiuwqR7D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/vXkChAfjb9PQ_HjWdFMiuwqR7D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/vXkChAfjb9PQ_HjWdFMiuwqR7D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:67:3e:e0:67:34:35:5b:cc:3c:0b:ec:91:c9:a1:69:95:1e:
c3:62:43:b3:a7:b2:82:05:3f:fa:da:b2:ad:32:71:b6:9e:5a:
e1:67:b1:cb:42:75:96:ea:0b:ff:a2:a2:31:44:14:27:99:5e:
56:ac:79:4a:5f:76:50:45:cb:a4:77:ee:92:f8:d0:69:8f:fb:
d3:a5:c9:a0:3d:b0:04:63:a9:47:5a:38:d6:2c:40:a5:b9:95:
14:5f:46:9a:49:91:57:74:e3:69:85:c6:5e:d0:1b:0a:29:e7:
e2:8b:18:a4:ef:fe:0d:ec:2b:3e:bd:a6:22:2e:c7:04:09:25:
1c:4c:13:45:e4:ff:d3:0f:64:f5:41:d8:ca:30:7c:f6:e5:cd:
db:8b:00:aa:06:95:89:d9:84:55:61:d0:1f:46:c5:a9:70:88:
00:28:c5:55:86:f4:52:6e:d4:8f:18:a6:f8:dd:29:49:c9:2f:
8f:e1:74:2c:4a:02:64:a5:cf:13:e4:3b:94:94:84:56:f6:85:
ce:af:2c:d4:50:13:64:86:4f:79:d4:b3:06:d8:e1:6b:8c:a0:
5e:59:d5:be:cb:00:87:0c:c8:c9:25:fc:2b:32:0a:90:10:1f:
82:60:93:f7:2a:4b:dd:c1:36:de:e6:d4:1a:16:c2:30:7a:4a:
17:f0:52:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:08:16 2026 by rpki-client