Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
File: vx1f6v05F0clv-S--RvSfHsvb5E.mft (raw, json)
Hash identifier: tu5/N2z0uxuHsJ7ZlMYWWZgbvFf6AVn7No23xh6/9vo=
Subject key identifier: 0A:BF:56:FB:B7:7B:69:B2:C5:73:D3:51:DF:50:AD:92:AF:65:23:8F
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 01A1C39DFBE97C1887AA27CD29301954BBFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
Manifest number: 1B20
Signing time: Tue 10 Nov 2026 04:01:13 +0000
Manifest this update: Tue 10 Nov 2026 04:01:13 +0000
Manifest next update: Wed 11 Nov 2026 04:01:13 +0000
Files and hashes: 1: HBbTZ3Q7BOwj640I0jYSUAVw3qo.roa (hash: o7T4Dh22yBlZp7Egs8uQK5dq+Y2Bk/ktQFDv0GOBtkk=)
2: NhiSeFMh4axs7XPLcRiwhjKFt3g.roa (hash: 1KjwTjOsMLuZ9bEdD9eS+WBlrhEu3mHQKNAjKOT9PZA=)
3: b-3_s4OPm47G13nSnIa7XR69rcA.roa (hash: mFgZd4d8zued0wGbLsJXs0gSSRBKDoCC0snAs4/GtZw=)
4: vx1f6v05F0clv-S--RvSfHsvb5E.crl (hash: xhnaLmdFmDYODOWo6jVQDScXUW8C70/kxXEqvokaOlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c3:9d:fb:e9:7c:18:87:aa:27:cd:29:30:19:54:bb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Nov 10 04:01:13 2026 GMT
Not After : Nov 11 04:01:13 2026 GMT
Subject: CN=0abf56fbb77b69b2c573d351df50ad92af65238f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e9:aa:b2:10:bd:9d:25:a1:bd:8b:ec:2a:24:
b9:37:45:8a:bf:cd:ea:4f:70:6b:dd:5a:74:12:82:
6a:e8:4c:80:21:65:ee:5e:5d:0f:5c:c8:20:75:81:
71:5f:c4:f5:5e:4c:6d:d2:44:cc:91:34:e7:51:41:
a8:1d:ec:68:a2:af:36:e0:a0:d2:3a:d2:2c:1a:76:
79:92:b7:87:d8:f3:02:16:99:ef:c4:14:57:8b:64:
01:50:68:1d:8f:9e:61:f1:98:2a:40:72:c7:80:50:
5a:f1:50:4a:9d:da:2e:2f:9d:16:3f:22:be:9c:2e:
94:0f:ac:b8:00:e2:17:a6:c6:55:5b:73:40:93:06:
f5:45:be:47:9a:01:94:45:26:ca:9c:6d:86:9f:ef:
5e:ac:40:e5:bb:30:85:53:af:ce:4f:5c:f8:2b:47:
e8:ca:93:f9:4b:10:99:12:1a:fe:6e:29:db:40:cc:
e9:2a:33:fb:d0:4b:6b:dd:e5:a0:d7:18:76:22:1a:
86:08:92:5a:9c:e5:2b:8c:09:72:43:ad:c5:52:36:
f0:05:ec:4d:48:85:fb:3f:84:f4:bd:e1:26:de:1e:
73:fb:5e:76:de:82:71:0f:d0:4d:79:d7:ce:79:85:
e3:c8:c5:53:af:fe:48:05:8d:30:ce:f8:5c:cf:b4:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BF:56:FB:B7:7B:69:B2:C5:73:D3:51:DF:50:AD:92:AF:65:23:8F
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:10:f1:07:2d:c3:16:eb:2b:b3:7f:86:08:ea:ed:d6:2a:62:
ec:ca:b6:b0:54:09:be:17:65:53:cf:f1:dd:3b:af:c3:03:b1:
e2:bb:5f:3b:f8:ad:78:0e:25:6f:54:86:95:f7:6f:c9:a4:97:
1b:62:1c:41:7d:3b:a4:34:78:44:cc:b1:bd:17:2c:fa:7f:40:
01:64:3a:6d:dc:24:e7:bd:bd:b4:64:a2:ea:89:5f:3b:01:89:
39:2f:3d:e8:90:43:03:6b:73:40:93:46:c1:f5:01:14:5b:e2:
49:06:14:00:ee:41:6c:05:83:d6:2c:0e:b3:42:16:48:0c:94:
62:f3:20:3e:db:27:e7:ad:93:d0:40:36:b3:1a:6b:5b:81:01:
6f:95:32:bf:28:5a:15:a7:e5:7a:d2:7d:cc:04:37:4a:bf:ff:
80:f6:55:c0:68:6c:dd:eb:1b:1a:7a:fd:92:5f:63:80:ae:f1:
43:66:f8:81:59:80:c3:ef:fc:4d:e4:42:eb:e4:39:66:9c:ac:
28:3d:96:6a:3b:65:4b:81:57:08:98:11:7d:fe:6a:f1:f7:5e:
f2:10:d6:00:4d:58:cc:f8:49:c2:8d:75:ca:b2:44:8b:ea:8e:
60:91:0a:ab:4a:43:9f:bd:4b:77:b0:cb:b2:b3:2e:48:85:71:
c8:57:e8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 07:31:28 2026 by rpki-client