Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
File: vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft (raw, json)
Hash identifier: R1HgTSkb6MbaXMs74fuBZCxe32Lx4BulJMFKlcXJvi0=
Subject key identifier: 7E:57:1A:A4:04:71:F1:53:F8:48:21:F4:4C:72:0E:0F:6C:E5:A7:A4
Authority key identifier: BE:DD:C5:BB:A2:00:CF:D1:9B:25:DC:E1:3C:1E:2E:1A:2A:19:88:A7
Certificate issuer: /CN=beddc5bba200cfd19b25dce13c1e2e1a2a1988a7
Certificate serial: 01A0D0B6C9496013441FA61A51D8766707D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
Manifest number: 01DA
Signing time: Thu 24 Sep 2026 00:00:35 +0000
Manifest this update: Thu 24 Sep 2026 00:00:35 +0000
Manifest next update: Fri 25 Sep 2026 00:00:35 +0000
Files and hashes: 1: QjlLqXwrKuX4WWijKXyWQlrwzSI.roa (hash: RrqtKaSOGqQ6cVJgOKK900pw+4nXE4aG5H706/A/L7s=)
2: dBuZbSPKal6c4zm6YNTPS1fr3GQ.asa (hash: ogSY4EAD3D6IaYFiG2filgxMUAq2W39XeRjlBqtFTic=)
3: vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl (hash: mZj5Bn6n+22QHVUJquEQM5XqHDtSaIuUBlNypZLkiCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:c9:49:60:13:44:1f:a6:1a:51:d8:76:67:07:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beddc5bba200cfd19b25dce13c1e2e1a2a1988a7
Validity
Not Before: Sep 24 00:00:35 2026 GMT
Not After : Sep 25 00:00:35 2026 GMT
Subject: CN=7e571aa40471f153f84821f44c720e0f6ce5a7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:55:93:9c:17:75:a2:49:c9:73:1e:b6:1f:
07:7e:18:e0:d4:f7:de:43:26:66:10:7b:0d:e9:90:
3a:60:05:e2:09:6c:fc:36:e6:bf:3d:46:0f:79:18:
3c:04:98:6d:4d:dc:0e:cd:f4:34:4d:3d:42:d7:a9:
3d:9d:b1:96:50:1a:5c:cf:ce:f1:49:b0:d3:5a:57:
26:0c:35:26:c6:dd:b6:80:17:b8:c6:6c:c7:b4:bf:
3e:52:7d:55:ce:6e:00:af:93:d4:b2:b3:44:cd:93:
23:83:4e:8f:b4:26:fb:95:0c:99:d2:f0:f2:ab:18:
04:39:16:35:b5:22:8b:8b:7c:79:32:02:01:30:60:
1e:c1:e7:6c:00:4e:14:66:ae:f1:51:29:3a:08:fa:
6d:01:15:76:67:22:af:dc:9d:d5:c4:7d:8e:31:04:
28:d0:e4:ae:69:f3:d1:50:f4:90:06:c0:71:9f:8e:
cd:99:59:f7:16:7a:94:fa:71:9a:05:76:09:a9:61:
90:d9:ca:84:a5:da:e1:54:08:25:bb:08:3e:dd:4c:
b3:25:23:cd:f9:80:59:cc:61:82:0e:fb:13:f8:f6:
5f:77:d7:a6:b9:96:66:92:bd:8e:e0:07:97:cd:78:
b8:c6:f2:2d:ff:24:13:f7:c6:b4:5e:d9:21:4e:44:
48:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:57:1A:A4:04:71:F1:53:F8:48:21:F4:4C:72:0E:0F:6C:E5:A7:A4
X509v3 Authority Key Identifier:
keyid:BE:DD:C5:BB:A2:00:CF:D1:9B:25:DC:E1:3C:1E:2E:1A:2A:19:88:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:17:c9:48:f0:62:90:c5:6e:c1:e0:f0:60:fa:8e:6f:18:71:
f0:3c:aa:f6:6d:16:94:92:30:9a:b3:66:e2:cd:4b:a4:30:37:
08:c5:f5:26:47:95:8f:cb:4b:4a:96:a4:80:18:8f:dd:3f:ed:
e7:74:ce:04:67:6e:30:f6:c8:08:73:7d:72:f8:71:94:92:2c:
15:46:a4:47:5e:47:a8:59:12:7b:6d:ea:9e:0c:8b:50:88:78:
6f:a0:f3:d0:df:6f:48:4d:d9:7d:ca:2f:b4:d8:4c:8e:1f:b7:
5d:6f:60:7e:1d:0b:f1:36:3d:2c:ea:f3:64:60:d4:35:48:be:
66:36:41:e8:0d:5d:f1:1f:a1:95:b1:2d:48:2b:e2:f2:58:e2:
e1:8b:3a:7d:c7:23:2f:8e:65:d5:0c:90:12:ef:85:41:26:c0:
62:bc:8d:8f:cc:a8:b0:36:b7:98:a4:0f:4c:14:6e:e0:09:43:
03:54:b2:55:89:c4:04:55:7e:8d:34:af:91:62:61:06:ab:27:
54:e6:43:27:0f:2e:7b:6a:12:38:7f:3c:77:c8:dd:e2:c6:58:
cf:c4:79:f1:5a:6e:5d:67:01:18:d5:78:8c:d9:cd:de:c8:21:
a9:30:64:8d:16:de:b2:6b:c3:42:91:3f:23:7f:4e:af:e4:e7:
1b:c6:9d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:07:37 2026 by rpki-client