Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
File: vE4hsn1vhOvdiIxo55zlVchG2ss.mft (raw, json)
Hash identifier: ekjSYnDI0Vs6NsahJ72dugbSapT/WCWdeqPvko/rdAI=
Subject key identifier: E9:89:87:56:21:67:F8:42:A2:25:0C:1B:8A:8A:61:12:33:AF:5F:1E
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Certificate issuer: /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial: 01A0EB1C4F1BE68F16B71D3159BA5D7FE905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
Manifest number: 1A7B
Signing time: Tue 29 Sep 2026 03:01:36 +0000
Manifest this update: Tue 29 Sep 2026 03:01:36 +0000
Manifest next update: Wed 30 Sep 2026 03:01:36 +0000
Files and hashes: 1: Wl_TNY94WK2rcly6xRH5gNybF90.roa (hash: l+YPId6RKLguzaCBjAcOhdZYbBy4KT7l6mfJmlUnqwM=)
2: tW2R0GRUoyNtK2_YkFvWz0zKBzc.roa (hash: K1KWr86aOYdf4AA1AHrR6w9+58FTKX+8pbTwDlMtG2M=)
3: vE4hsn1vhOvdiIxo55zlVchG2ss.crl (hash: qPVET9tVF2s2RK+LHkGV7XgTwqrep1xkte7bhfK+vSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:4f:1b:e6:8f:16:b7:1d:31:59:ba:5d:7f:e9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Validity
Not Before: Sep 29 03:01:36 2026 GMT
Not After : Sep 30 03:01:36 2026 GMT
Subject: CN=e98987562167f842a2250c1b8a8a611233af5f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:27:8c:25:f6:14:6b:06:a6:30:92:bf:de:5f:
39:4c:aa:c4:34:f3:b9:06:81:40:a7:32:75:7a:0d:
ef:8a:d5:bd:aa:a5:1c:c6:9f:93:8f:1d:11:74:58:
48:d5:3a:23:49:57:2f:db:87:05:77:e9:24:c1:27:
53:98:e3:4b:5f:80:9d:ed:41:cd:df:b4:ce:70:1d:
1c:17:9a:1a:75:82:4d:96:11:6d:d2:2c:9d:dd:b6:
f7:bf:64:81:eb:09:be:4b:35:1e:66:2c:b1:53:45:
aa:c8:cc:1e:c9:0b:97:64:67:55:e4:f9:ef:89:9b:
b4:9d:ba:b6:ce:85:cd:1c:f3:9e:ee:08:4d:c4:a0:
90:c0:32:df:1b:c2:be:4f:c4:02:4f:68:84:41:b5:
e9:56:a6:da:48:f0:04:d4:22:5c:72:76:3e:a5:b0:
7d:a4:89:25:2e:78:38:ce:95:53:25:46:be:ea:ce:
dc:05:1a:55:ab:23:ed:84:84:3b:43:83:a5:ec:17:
06:2e:96:52:00:ea:91:f6:bf:59:49:b9:69:a8:ea:
0e:55:c2:18:8f:5f:15:ae:ba:88:ac:76:9f:9f:05:
6e:96:71:37:c9:39:97:f9:6d:11:95:54:c8:41:72:
d1:99:5c:b5:30:13:57:7b:9a:d5:e2:dd:72:62:4a:
7c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:89:87:56:21:67:F8:42:A2:25:0C:1B:8A:8A:61:12:33:AF:5F:1E
X509v3 Authority Key Identifier:
keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:35:ce:32:6d:27:56:d7:2e:3f:7d:80:ae:3a:7b:e2:15:60:
76:9f:6f:ea:35:54:9e:34:d9:44:17:27:f7:8f:82:5b:1f:75:
8c:3f:db:69:bd:c6:49:0f:45:a6:4f:34:25:09:13:45:dc:e1:
bb:24:92:5b:f7:cf:52:26:8d:58:58:eb:ce:31:3e:b8:89:b5:
9b:a3:ed:bc:4e:f5:9d:fe:8f:61:da:81:6e:42:5d:97:6b:ce:
f0:dd:0f:27:cc:2e:49:cd:9b:32:2a:2d:ce:29:d5:49:5f:2a:
d3:a1:dd:f8:63:8f:08:c9:17:cd:5c:19:d8:53:d6:1a:85:bc:
b5:fe:7b:16:0d:25:18:c9:79:c7:0b:2b:d1:b5:64:c2:9a:77:
86:46:41:f0:48:85:0c:81:14:e0:39:00:da:49:f6:96:aa:c9:
f0:f9:4e:cb:9a:a2:7e:9a:f0:f3:1b:5b:72:68:5c:ae:14:30:
84:d6:6d:94:c6:4a:90:b7:23:6d:73:a4:d0:36:23:03:3a:b0:
73:01:23:fa:3c:a3:4d:a3:97:7f:9a:7a:5b:64:a0:1c:21:8b:
14:a0:93:f0:3c:2a:2d:87:39:91:d8:f6:5b:81:ec:fe:f8:2c:
cf:c3:39:d2:99:4e:86:29:18:d5:96:5a:15:f2:0b:47:7e:62:
20:f8:f4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 14:59:08 2026 by rpki-client