Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
File: vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft (raw, json)
Hash identifier: Ca6RicaGw8Rphz6oqzONeVIv0XO6hRfnphnbA7wIPkI=
Subject key identifier: 02:0D:C5:EC:AB:28:78:4A:A4:E5:C8:1B:0A:BE:52:3B:F4:D8:18:47
Authority key identifier: BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
Certificate issuer: /CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Certificate serial: 01A0DC4D7D3269BF8D70B7F5AAEDC2C83793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 06:01:00 +0000
Manifest this update: Sat 26 Sep 2026 06:01:00 +0000
Manifest next update: Sun 27 Sep 2026 06:01:00 +0000
Files and hashes: 1: H5XIBQIDLJQjSp39OuEv8vt1cZ4.roa (hash: xpiWSsWy5a1LyppV6vCGdX0tXvaYKw/9ibIsF5wlKgg=)
2: VgpKn3563QumQ3vI6T65CdTXJRY.roa (hash: 0Sh5H5DPaJwxDGKT1SX9t1w/AoLxVT76G3RbjGUJn18=)
3: vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl (hash: dISYtf9W6vmrepaD1knXUOrQOEPBZoCEKUTuw173rMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:7d:32:69:bf:8d:70:b7:f5:aa:ed:c2:c8:37:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Validity
Not Before: Sep 26 06:01:00 2026 GMT
Not After : Sep 27 06:01:00 2026 GMT
Subject: CN=020dc5ecab28784aa4e5c81b0abe523bf4d81847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:13:df:4b:ac:64:26:88:d5:72:bf:bf:b5:
2c:de:74:69:1a:42:eb:47:5c:d0:6a:5a:1f:8c:55:
c6:fc:2c:6b:dc:b9:5f:e4:89:dd:b1:09:5c:29:2e:
d1:39:29:0b:d6:b7:e1:fa:52:76:94:2e:b9:32:ee:
f0:9b:64:c8:35:1a:2c:b9:97:4d:f5:b7:6a:da:c9:
03:51:8a:e4:de:fd:8f:19:0d:33:a4:6a:b1:ba:8f:
ba:8e:9d:1b:96:96:04:44:68:bb:ab:40:2d:7b:c9:
80:6d:c8:fa:40:46:dc:f0:b6:41:ae:a2:bd:c8:7e:
a6:a5:c0:a9:5f:17:97:46:ac:31:50:7d:89:40:c4:
bd:c5:13:e7:72:f9:8c:fe:f0:4c:96:26:7e:1d:bb:
10:e3:d7:2e:3a:8f:bd:dc:f8:96:06:a5:65:33:41:
02:b0:79:60:f0:02:9c:16:24:e5:f4:a8:50:21:07:
64:bf:43:5e:72:53:76:82:e9:7d:da:f2:84:d3:c6:
55:e9:e3:54:48:4b:fb:62:9b:c9:bc:e8:ce:d0:7a:
06:23:72:27:fe:c8:14:9d:49:54:51:2c:6e:26:3f:
86:77:4d:6d:bd:58:54:41:d0:03:2f:e8:c8:08:28:
43:8a:22:67:bc:c3:9e:7f:74:98:b9:87:82:70:dc:
f1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0D:C5:EC:AB:28:78:4A:A4:E5:C8:1B:0A:BE:52:3B:F4:D8:18:47
X509v3 Authority Key Identifier:
keyid:BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f8:9f:a0:e2:7c:d7:ae:d8:3c:61:2d:75:be:f7:3d:b0:84:
3c:74:9d:d3:7b:06:20:99:26:1d:81:6f:2e:be:d6:1e:2e:5f:
d6:de:fd:e7:11:b4:56:4c:92:57:74:8d:74:b8:1f:0a:87:ae:
49:5d:dd:ee:52:5f:f1:16:e9:77:4a:e6:af:da:25:68:fc:2d:
9b:97:a3:27:09:1d:62:bf:49:2a:0b:66:9d:79:ae:65:6d:d8:
ec:ac:ed:c1:b7:75:2a:9a:9d:32:7e:95:63:7a:1e:a8:ab:5d:
2f:ad:a7:b2:15:83:33:50:bf:1c:85:ee:72:42:85:5c:ec:6e:
c4:df:e6:96:c7:b1:ad:1d:5b:39:17:34:90:84:6a:53:13:0a:
ab:81:75:92:fe:ec:a4:1e:8b:49:81:9a:33:30:65:34:e2:98:
1d:1a:cb:84:47:b8:46:6b:ef:be:b3:13:9e:26:03:63:00:fd:
13:50:50:81:02:20:9e:5d:46:6a:b3:38:68:e5:27:2e:39:8f:
4b:06:0e:63:f0:af:d2:2c:5c:5a:e9:40:3e:17:11:36:61:ee:
42:05:0d:a4:68:1d:e3:08:ed:b0:b3:77:26:ae:55:49:32:8f:
22:fd:df:83:e8:33:be:b8:c2:fc:ee:4d:77:c0:12:5b:a3:2a:
90:83:94:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:41:23 2026 by rpki-client