Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier: KIp8z+jTU0M/J9UDJT+elRTcoxaygpVM8xUF5Z5pEkQ=
Subject key identifier: 5A:3E:7B:02:C6:8D:8C:93:FE:9A:C5:F4:3F:B3:89:26:57:F6:21:98
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 01A130D8BD9821DDB4E9ACDC66F1F2FDDAF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number: 1A32
Signing time: Mon 12 Oct 2026 16:01:12 +0000
Manifest this update: Mon 12 Oct 2026 16:01:12 +0000
Manifest next update: Tue 13 Oct 2026 16:01:12 +0000
Files and hashes: 1: 7w9615nIUak6j9qKBSemLYUs4lE.roa (hash: UXmWoVxNa8W/M8yy0s9ag8l2H1J69QCKdRwDtmWIJD0=)
2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: +kCakJ7HYnjPuu31mILtcABoLZwcLOvQ4BCty3ixHj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:d8:bd:98:21:dd:b4:e9:ac:dc:66:f1:f2:fd:da:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: Oct 12 16:01:12 2026 GMT
Not After : Oct 13 16:01:12 2026 GMT
Subject: CN=5a3e7b02c68d8c93fe9ac5f43fb3892657f62198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:49:58:5a:a0:0d:5a:24:2b:98:06:09:78:
5c:b6:54:37:11:5e:5f:23:2c:70:6f:8d:bc:55:2d:
d1:1f:93:50:d3:fd:b3:0a:58:4b:68:7e:de:b2:b1:
d2:33:be:e7:b4:d7:fd:38:cc:a3:ca:56:f8:ee:fd:
68:63:ee:49:36:57:57:01:a4:ef:f0:53:37:64:ae:
17:a6:f3:8b:54:4d:a8:d9:a3:f8:12:79:5e:9e:91:
c3:f6:0e:94:1c:e6:98:1b:43:b7:c5:91:bc:0a:9a:
89:85:f2:c8:16:60:20:bb:74:ad:44:09:98:32:7d:
04:84:f9:43:5c:2a:bd:07:96:88:bc:d4:0e:9f:e8:
a9:a2:03:cc:79:db:e4:37:00:76:58:c1:73:4d:67:
7c:37:09:3a:4d:fc:c1:58:e6:be:4b:ba:b5:39:95:
95:95:52:a8:84:8c:e6:1b:53:93:95:66:93:6a:d2:
91:44:b2:24:b8:45:12:0d:74:a5:28:bb:52:86:37:
4a:de:7b:78:ed:bf:54:d6:6c:61:91:34:38:a3:a2:
f8:4f:da:59:f3:6d:49:a1:8f:0d:cc:d7:af:be:d7:
91:2f:d0:54:fe:2e:50:a9:2f:66:0e:92:59:3b:f9:
71:36:38:13:af:ae:a7:01:3e:02:ab:fb:ed:dc:12:
1d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3E:7B:02:C6:8D:8C:93:FE:9A:C5:F4:3F:B3:89:26:57:F6:21:98
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5f:e0:d7:ce:0c:dd:0b:b2:2d:f3:6a:c1:af:3b:f9:cb:6a:
13:ee:fb:39:16:21:65:88:ec:2e:94:d7:be:c7:df:0d:79:58:
ce:a6:d2:c5:26:45:31:49:57:d8:13:db:8f:e5:5c:e2:9c:45:
93:d8:8b:00:46:e8:cd:65:63:dc:fa:c5:c2:67:c7:2a:e5:d9:
0e:4a:c8:5f:42:c1:26:29:14:2d:35:85:93:9f:16:d8:0f:7e:
c7:0c:e6:92:5f:35:fe:43:a3:97:19:bc:67:10:1c:89:58:7b:
ff:81:f4:ea:8c:ec:7f:9b:0a:cd:a9:f7:56:f4:ba:0f:12:75:
38:18:da:91:bd:28:53:20:e9:66:98:61:a3:cf:95:65:a0:36:
6a:d5:21:d6:7a:de:60:7b:e5:29:d6:d5:d8:31:16:23:b5:16:
a0:28:82:d3:6d:53:78:c0:89:1f:c5:35:ed:06:ba:a8:4d:86:
25:b6:fb:dc:50:13:f3:36:5d:b0:06:d3:7a:27:0f:a9:d6:d7:
1a:34:df:6f:cd:b1:b6:59:55:0d:b4:60:d2:4c:41:52:02:fe:
2e:10:58:24:94:08:a9:b8:1f:27:61:3c:c3:22:68:40:55:c5:
f4:c4:a9:c2:97:a5:5d:0c:f1:da:3e:d4:71:a7:bb:67:ff:ba:
35:49:19:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:33:51 2026 by rpki-client