Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: oeyjkeVkAuh4lUA7ovO4rcBHjnOAr3zbxCi+U7nLxjU=
Subject key identifier: C3:AC:89:BD:20:A4:2A:4B:F6:AB:09:1E:41:34:14:67:E2:5E:E8:36
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 01A0E2BDF149FE6FAF355D5F3D580BD64F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 12:01:33 +0000
Manifest this update: Sun 27 Sep 2026 12:01:33 +0000
Manifest next update: Mon 28 Sep 2026 12:01:33 +0000
Files and hashes: 1: Dnv-EV1F19e9aMG1L9dsaqy1C4Y.roa (hash: RrE3tRzsghSzPvz2h6aM81MCjghx1uCG0mdEiIujtTg=)
2: P8qRXIUXFRxLqpqPgoGyj2ksP4E.roa (hash: c/qoc2pQET/0jm2wOTLQC7x1KXfZ+jeD/PYJBR55Ebk=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: Cbyavo9fmomp4WlBEZPv/GOJQIjRLhB8UXjxd+CFlvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:bd:f1:49:fe:6f:af:35:5d:5f:3d:58:0b:d6:4f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Sep 27 12:01:33 2026 GMT
Not After : Sep 28 12:01:33 2026 GMT
Subject: CN=c3ac89bd20a42a4bf6ab091e41341467e25ee836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:db:13:08:f6:0e:5f:e2:a1:2a:07:e5:df:
74:fc:71:ae:5c:c5:c4:17:21:3b:d2:89:e1:e1:2b:
7e:44:f0:6b:f3:ee:39:67:b2:c1:ea:7c:14:a0:9b:
53:b0:44:7d:0d:82:a5:5b:40:56:83:e8:cb:71:8c:
a0:ab:97:bd:d8:d9:62:6c:af:07:1b:2d:c6:69:bf:
f9:b1:75:e3:69:5b:9b:99:dc:01:b4:93:55:e4:85:
cf:d2:8b:fb:94:cd:f4:91:1b:b4:63:12:d8:d0:f0:
bb:60:9d:6d:9b:61:de:31:ae:7f:47:40:52:a7:18:
30:f6:7e:ab:02:54:26:55:9b:96:c8:9c:3e:38:0f:
2b:e5:45:d7:07:18:ec:90:c2:b4:bf:79:c6:7f:69:
79:57:07:a4:2a:b6:f0:d5:89:a8:6e:9e:c3:ba:fe:
29:d6:d0:b5:29:e3:00:14:68:3b:74:b8:e8:57:e6:
2d:37:17:19:cf:63:a4:4d:e2:11:12:d8:2d:7e:bb:
99:1e:36:a7:f4:d1:19:1e:be:9c:39:56:b8:51:b2:
c9:d1:9c:91:99:03:43:e5:76:a8:95:f4:a4:e2:71:
39:17:02:46:ba:1a:f7:50:fd:2b:8c:3a:15:98:a7:
ae:fd:d4:6b:18:9f:46:56:64:9e:e9:67:25:25:1b:
ec:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AC:89:BD:20:A4:2A:4B:F6:AB:09:1E:41:34:14:67:E2:5E:E8:36
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d5:21:0b:57:76:4f:40:de:59:d1:fb:fc:62:79:20:01:74:
41:96:2f:b8:ee:13:65:b0:e6:11:18:16:2c:77:cb:5a:fb:95:
59:08:a7:08:37:74:1f:45:55:8f:71:76:a2:5c:dd:97:d4:e4:
ed:60:58:ff:4e:c5:d2:86:d8:a1:93:f2:b2:c8:82:c3:cf:10:
11:be:f5:f2:3d:0a:ee:14:4b:77:db:9d:9b:b8:37:65:52:d3:
07:96:ee:e0:eb:8c:bf:91:56:2d:09:46:fc:e1:a9:e8:df:ce:
a1:90:16:f1:63:4b:79:b0:c7:60:f3:2c:b9:21:1a:f7:07:3c:
07:bc:91:84:34:a1:3b:e6:24:65:ba:7e:4b:95:58:11:55:13:
82:06:79:54:44:55:f2:3c:a2:70:f0:21:62:e1:f9:47:24:d1:
d4:78:54:1b:04:4a:77:37:ac:ac:99:08:fa:3d:64:96:ed:9f:
10:6e:ae:fb:fa:a5:de:22:22:51:b6:27:31:a8:ef:ea:88:fd:
3c:4f:2b:df:92:94:bf:88:51:84:7a:54:36:36:a9:56:69:ab:
0d:cb:03:29:a7:48:25:bf:03:43:59:56:01:82:f9:b1:71:40:
f5:fc:46:06:55:09:15:eb:be:a8:48:71:a7:62:bb:56:59:21:
a7:38:1e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:22:43 2026 by rpki-client