Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
File: vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft (raw, json)
Hash identifier: miji1a5a96ptffsVqGFyU8xvrzjxuDFdVEPKWb/3VeA=
Subject key identifier: 4B:C2:38:E2:6B:58:05:8B:33:EE:B0:0D:14:A8:79:1C:4C:95:4A:4A
Authority key identifier: BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE
Certificate issuer: /CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
Certificate serial: 01A0D494B5876359004187978E47C9D78600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
Manifest number: 0D3B
Signing time: Thu 24 Sep 2026 18:01:50 +0000
Manifest this update: Thu 24 Sep 2026 18:01:50 +0000
Manifest next update: Fri 25 Sep 2026 18:01:50 +0000
Files and hashes: 1: 3ch1Jb7sFGYOGbilPvREcxXxE6k.roa (hash: J6u00YHUjiuGwv/53UMv+yM4klhV4JggG1AUNdLNZVQ=)
2: mNC5GkRzpe0TcIftq03m_ZQlLiM.asa (hash: l/sJ49tKEXd94Ikw8096y/GdUHEWeA7yG1kPodLn6rw=)
3: vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl (hash: uLWWJWSeI18VF+/OzHNGlu57u8nEU/589pZDJ1qVEl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:b5:87:63:59:00:41:87:97:8e:47:c9:d7:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
Validity
Not Before: Sep 24 18:01:50 2026 GMT
Not After : Sep 25 18:01:50 2026 GMT
Subject: CN=4bc238e26b58058b33eeb00d14a8791c4c954a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:6b:47:10:63:ad:17:1b:d4:40:9e:f6:67:
99:0e:8e:ee:19:cc:39:ac:7e:ff:82:06:c4:81:4f:
47:fe:0e:f7:e8:19:40:25:29:ee:4c:93:97:56:a0:
d9:58:48:19:31:9f:fc:ea:1f:44:3f:ec:22:be:92:
52:2b:3e:22:f8:2b:1f:d8:3c:5b:42:7e:fb:92:32:
ea:6a:3d:9e:8e:50:e2:25:8c:87:6f:34:dd:2a:1b:
d6:d8:5b:b0:16:72:38:f6:64:ca:49:4d:5c:d7:eb:
77:ea:81:a6:9c:24:94:d2:85:4c:f1:43:a1:18:72:
4b:a8:d5:4b:ba:ce:3b:b2:0a:60:99:87:aa:20:f5:
46:9d:f2:ed:6d:eb:2c:f7:38:8e:fc:23:61:07:3d:
08:67:1b:bc:a3:85:a0:8b:bd:ef:db:87:e3:12:11:
6c:be:a5:74:3a:ac:5a:62:60:ff:52:8d:0b:ed:c2:
4e:b9:f9:1c:7c:ba:b5:49:69:f4:e9:d8:e2:00:8c:
09:d2:09:a3:7b:8f:bf:dc:55:15:e9:4f:3a:2d:38:
c3:b6:3f:52:df:46:51:86:d5:7d:74:e8:35:6d:aa:
73:0f:70:66:f4:09:6e:25:a2:fc:73:e3:5c:e2:c0:
fc:0d:28:27:b2:54:d8:72:a2:c8:92:74:df:1c:b1:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C2:38:E2:6B:58:05:8B:33:EE:B0:0D:14:A8:79:1C:4C:95:4A:4A
X509v3 Authority Key Identifier:
keyid:BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9c:f0:47:84:7a:a4:ec:24:c2:7d:fc:6a:98:b4:a5:65:c0:
94:34:84:f2:d9:a3:02:0c:6b:f3:f4:70:ef:94:5e:62:07:58:
bf:39:00:06:d6:eb:3d:bf:b8:95:91:5b:00:8f:54:59:11:50:
ee:e6:a2:0f:57:6d:10:6d:76:8e:d6:66:e8:6d:29:7b:2d:de:
af:27:53:60:c2:50:11:ac:48:6c:55:19:4a:0d:bf:3c:72:2d:
44:42:86:6b:71:81:49:c7:72:6c:3f:46:dd:ff:d2:28:e0:23:
29:9e:23:4d:ed:9c:ef:11:36:5b:95:2a:4e:91:99:c5:01:32:
c6:da:d3:b6:ff:86:8c:ab:fd:de:3a:35:71:0e:b1:0b:05:df:
7d:39:86:63:c0:a7:bd:48:ce:fe:cb:b6:8a:b8:08:7a:53:f0:
b9:41:85:53:80:6e:23:45:77:f7:30:96:5a:27:31:f2:29:60:
9e:7a:ce:64:8a:b3:f7:e5:66:f9:f8:7c:06:e0:7b:db:15:bd:
43:a6:01:fe:5d:66:20:38:79:98:95:85:05:58:8f:89:90:ec:
fb:1e:6c:b7:1e:33:5a:8d:7e:63:94:22:f8:3b:d5:ff:45:ee:
4c:dc:ff:2b:9b:32:06:2d:cd:6e:31:2f:f5:55:48:44:e1:94:
22:a6:6e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:27:10 2026 by rpki-client