Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json)
Hash identifier: 6bh/r/PTu3+/61VdZ9dZ0R3+8YuXCq3vlHI/2TJDLpI=
Subject key identifier: 1E:FD:4F:F3:19:DA:DA:77:96:5F:C5:84:31:46:22:02:63:72:13:AE
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 01A0C7B3E36ABBCE516C05E6E0EA94CD1E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 06:00:50 +0000
Manifest this update: Tue 22 Sep 2026 06:00:50 +0000
Manifest next update: Wed 23 Sep 2026 06:00:50 +0000
Files and hashes: 1: VJGlReXG5W-ZR47PVyvqWZdf0xI.roa (hash: wBxca4kCkRMoBMcjG9PQpXCJfip6KTb7TlGSlembBvo=)
2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: yXaJuAcnPS8UeB1U0lAOyVE1VypxGOs9z6+y7XyrzDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:e3:6a:bb:ce:51:6c:05:e6:e0:ea:94:cd:1e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: Sep 22 06:00:50 2026 GMT
Not After : Sep 23 06:00:50 2026 GMT
Subject: CN=1efd4ff319dada77965fc58431462202637213ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:63:be:c9:de:54:44:ba:79:37:d6:91:a9:
b6:b3:85:fe:73:7e:6b:3f:5b:4a:bc:02:c3:d1:5d:
5c:a5:0c:c9:90:57:80:91:66:f4:11:b7:e2:59:48:
da:d9:78:14:e6:76:e5:2e:6c:6f:8c:6c:5c:95:64:
fe:5b:72:85:83:3e:52:68:4e:36:5e:d2:94:1d:ed:
75:aa:4f:fd:25:75:3a:1a:2e:e2:64:18:66:d2:a1:
e8:bb:3f:f9:2f:ea:a8:df:49:af:44:83:5b:ea:d3:
64:eb:1b:22:dc:11:9c:53:5d:16:ec:12:7f:8f:d9:
fc:49:ea:b2:38:6b:a6:60:ba:47:e6:fe:42:a3:b7:
1c:ed:4c:a6:c2:b6:41:e2:92:57:e7:61:c8:ae:a2:
53:6e:04:e5:ba:a3:8c:39:24:0c:9c:13:b3:78:d1:
74:a5:9b:eb:b6:ce:ed:b9:a0:90:19:c1:8d:6d:95:
96:aa:a4:bb:4e:01:15:3e:2d:31:af:99:07:28:ce:
d9:18:78:dd:dc:72:ec:af:41:39:bf:3a:5e:48:71:
cf:e5:7d:ca:91:9a:20:14:27:2f:1b:5a:40:23:04:
39:c8:74:b6:cb:c2:0d:75:43:0b:f5:98:ba:ad:3e:
78:79:8c:d0:84:63:e6:db:0a:a8:cb:40:36:f3:31:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FD:4F:F3:19:DA:DA:77:96:5F:C5:84:31:46:22:02:63:72:13:AE
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b1:8c:3b:3c:a5:96:c1:4a:d2:f7:87:d7:12:06:5a:b1:d0:
bf:0a:7d:2e:b6:1d:05:0c:e2:63:e4:88:f4:f6:3c:40:6a:3c:
fb:f6:71:5c:6d:71:b0:b6:ef:1e:31:8c:85:af:84:67:09:06:
91:73:eb:07:68:10:ba:44:bc:f3:96:3f:14:3f:4e:53:02:ec:
6b:d9:14:c5:ca:1a:42:ee:45:dd:61:dd:d9:ae:fd:c8:4a:53:
3a:c5:08:06:85:c3:47:b0:9c:7f:25:0f:f9:e0:b7:f2:b0:87:
da:5d:32:80:81:34:01:f2:27:7e:75:5c:15:14:b4:93:bb:3f:
65:be:8d:bd:31:08:cb:e1:1d:b8:1d:a9:92:c4:a5:10:d2:d4:
c0:07:5f:3e:6f:e3:f2:5c:f5:06:a6:f0:26:7e:f7:95:e7:0f:
de:f0:67:dc:33:30:ad:99:31:cb:e4:02:45:cc:d7:ea:96:30:
0d:6c:b3:28:b5:45:e9:0b:a4:e4:71:2c:3a:5b:5e:fa:d0:73:
8d:ca:d4:af:03:1e:08:66:ac:95:9b:fa:b7:d8:08:65:de:77:
30:b3:96:f5:55:3f:72:16:5f:7e:57:68:dd:f0:c4:3c:5e:7c:
ae:fc:68:50:74:1b:f1:ff:9b:9e:a8:d0:f4:ed:02:c2:d8:d7:
68:19:2a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:50:05 2026 by rpki-client