
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
File: vf3CTv25YU3JPpd3TOicHJcw5mU.mft (raw, json)
Hash identifier: XRFbgJLvPoPVER9TMlpTkGAurlnNUq55E8ViPTCKVlU=
Subject key identifier: 56:9F:41:ED:D6:B1:14:E0:2B:EA:42:9E:B4:BD:01:2A:B5:81:F3:5E
Authority key identifier: BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
Certificate issuer: /CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Certificate serial: 01A0EDAF4D11152278F07E4B79898F8EE79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
Manifest number: 03DE
Signing time: Tue 29 Sep 2026 15:01:23 +0000
Manifest this update: Tue 29 Sep 2026 15:01:23 +0000
Manifest next update: Wed 30 Sep 2026 15:01:23 +0000
Files and hashes: 1: gAWk_30h7y4VaoOZxcAdDFowjFc.roa (hash: odqu0T0Eb3GJ36/dwAalvTu2Dwy1IIPBya2kP6/fxjk=)
2: vf3CTv25YU3JPpd3TOicHJcw5mU.crl (hash: WJfCY/1uk5aH5/SBWNekQG6vJ3iRpX0Jxh+U8w9riSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:af:4d:11:15:22:78:f0:7e:4b:79:89:8f:8e:e7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Validity
Not Before: Sep 29 15:01:23 2026 GMT
Not After : Sep 30 15:01:23 2026 GMT
Subject: CN=569f41edd6b114e02bea429eb4bd012ab581f35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:62:5c:f3:43:b1:67:49:2a:25:b4:0e:94:
0b:04:0f:fb:d4:fe:1e:ca:16:70:2a:d3:09:db:dc:
8f:e5:cc:20:ae:4f:47:af:e0:bb:30:be:1b:37:a2:
b1:44:50:2a:fd:a1:ef:26:86:4b:a3:af:53:a4:10:
0a:3b:89:8d:9c:43:b5:6e:ab:2b:0b:95:2b:d7:26:
16:1c:c3:e5:d9:aa:a3:aa:07:11:d7:57:1c:9f:dc:
a6:6a:78:fa:e8:aa:48:61:1d:cd:b8:e7:cb:fe:e1:
67:f8:f8:02:67:fc:bc:50:19:8d:eb:21:81:06:88:
ed:ac:76:82:47:7f:65:89:bb:cf:8e:94:cf:f6:78:
e4:03:43:af:27:74:ba:9e:d9:30:b1:b8:e4:63:6c:
6c:8e:0c:96:4e:a0:71:25:6c:c5:25:da:f3:de:e7:
ca:59:34:cf:d1:d5:99:bb:68:76:78:81:6c:9b:3d:
87:37:c2:3a:7d:51:45:47:e6:11:26:d9:8c:08:25:
a1:30:a4:db:35:e5:20:98:3a:54:08:14:6f:5c:80:
87:06:c3:01:87:d4:69:1b:21:97:2c:a7:44:0b:79:
4a:cb:9f:3d:94:82:15:97:c9:22:55:db:85:ad:8c:
7c:8e:a0:c9:7c:9b:e2:92:39:0b:b5:74:89:8f:26:
e5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9F:41:ED:D6:B1:14:E0:2B:EA:42:9E:B4:BD:01:2A:B5:81:F3:5E
X509v3 Authority Key Identifier:
keyid:BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6e:6e:a9:46:b3:cb:96:6e:24:60:ac:e7:83:67:f6:73:09:
49:b2:88:39:39:67:c0:a2:33:fc:9b:db:b2:84:8a:aa:47:dc:
64:4f:85:d7:c7:72:8f:d1:81:a3:b2:b6:72:3c:a3:d7:62:d2:
4e:d7:4e:b4:15:6a:37:07:b4:72:83:74:86:72:76:95:87:1d:
17:47:fb:8a:63:99:d2:ed:cb:ed:46:0a:c7:f3:fb:93:4a:30:
8d:0f:e8:59:c1:a5:26:a2:37:18:c8:58:b8:81:55:9c:45:ba:
ef:7b:0a:34:8a:ae:03:65:37:13:e5:f2:f8:cf:a9:76:7c:2a:
fa:ee:14:45:a4:04:26:44:65:f7:00:69:ed:63:f0:08:cd:ca:
63:f7:d5:16:a4:46:96:a9:4a:c8:17:80:d9:5e:9f:89:fc:8f:
52:48:b3:c7:f2:c1:38:4c:be:85:c3:87:6f:31:df:0d:25:57:
fc:01:2d:99:da:06:7a:07:06:3b:97:5c:df:30:2d:c1:d7:58:
47:0b:aa:a1:25:0e:85:79:89:0e:97:a1:08:94:44:af:a2:cf:
db:f7:2e:60:90:33:bc:7e:95:a4:36:87:a4:fa:d1:a4:32:01:
1f:88:cf:d1:ad:19:ef:2d:d9:63:b4:82:f7:cc:8e:d9:48:de:
44:7b:d0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:30:34 2026 by rpki-client