Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: ga/y/6zgzUEN2fmjqw05h8flitezUv6Xo8dsZrpsQJk=
Subject key identifier: 2D:A0:C4:0F:E7:A8:A3:25:FD:8F:CD:13:70:57:D6:00:86:C5:EF:8A
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 01A0CE235575DCE96ECD9329D016ED02CB37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0EF7
Signing time: Wed 23 Sep 2026 12:00:17 +0000
Manifest this update: Wed 23 Sep 2026 12:00:17 +0000
Manifest next update: Thu 24 Sep 2026 12:00:17 +0000
Files and hashes: 1: OmdvYxmrLn_L3wu-tKKe3CfgvKI.roa (hash: yDMfNBV69imWC+j1AfIyiotbGJSK6kkJjaiL93WMyvg=)
2: aCZ93vgD_JrnhMVE8ag6EFucpkg.roa (hash: YM2YwZolqo4cY7IySdgCVqucXddKsJE5ZWSJH8u/1Ww=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: IIA1Icd5WnpskDUoNgCTJvtNkMJRgwh6Xurj4GBHz2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:55:75:dc:e9:6e:cd:93:29:d0:16:ed:02:cb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Sep 23 12:00:17 2026 GMT
Not After : Sep 24 12:00:17 2026 GMT
Subject: CN=2da0c40fe7a8a325fd8fcd137057d60086c5ef8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:83:ac:8d:d9:98:50:93:32:6a:42:c2:34:13:
84:db:5d:b9:04:79:4f:5c:41:98:7e:66:6a:81:be:
a5:ba:15:44:82:12:11:a2:fa:50:19:6f:a7:8a:75:
a9:02:a1:95:d9:da:18:39:59:95:66:fb:d3:8a:12:
14:8f:1c:d6:c8:03:50:f1:83:d5:ca:cc:0f:fc:9f:
d4:1e:bc:a3:f3:12:71:be:7a:0a:5a:5a:90:cb:c5:
fb:75:bc:e9:25:c2:7a:20:34:7a:94:66:1a:ad:67:
ab:7f:c1:2a:43:27:b1:ff:51:47:29:72:60:ab:e0:
31:0b:a4:20:fc:33:13:1d:85:29:1f:30:c1:cf:6b:
d6:4e:a7:38:a1:6c:38:ed:41:1c:87:96:41:51:e5:
f9:75:1f:01:3b:f1:e2:68:93:67:56:61:ab:9a:00:
5e:e1:33:99:bc:02:48:dc:79:8b:bf:be:1e:4a:c0:
1c:1d:dd:9b:e3:31:f8:b4:0d:f8:44:29:14:11:43:
3b:e1:60:17:e8:27:eb:0a:3a:43:6a:63:ee:53:7a:
05:6c:6c:7c:b6:31:c9:84:3b:d0:de:3d:01:06:a3:
0c:c1:13:63:41:32:98:83:de:22:9b:94:28:a7:46:
23:31:11:cf:b7:32:b8:cf:4d:f7:ef:3a:0b:32:4b:
d2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A0:C4:0F:E7:A8:A3:25:FD:8F:CD:13:70:57:D6:00:86:C5:EF:8A
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c8:2d:06:36:87:b2:9e:a1:f6:42:c4:88:09:4b:e5:bf:a5:
1e:08:4a:1c:09:f9:92:67:7b:16:1c:d1:6d:76:b9:0e:80:93:
a3:60:97:64:33:ec:45:39:60:0f:4b:b5:6b:8c:49:2d:0a:52:
79:8a:0c:f1:ea:63:b9:b6:4b:ab:34:c8:23:2b:ad:5d:74:cf:
cd:6d:2a:fd:10:90:5e:e5:c5:ad:a7:9d:d2:12:0b:06:3c:7a:
20:c4:88:8e:9f:3b:40:fb:2c:92:ed:35:b6:2e:66:f1:a9:12:
f7:9f:e5:d8:e2:f2:95:f5:3b:49:36:aa:d0:43:2e:ce:db:10:
48:f4:c2:89:ff:8e:a6:24:79:f8:75:fb:cc:bc:f1:92:9a:15:
dc:54:71:52:7b:3f:33:41:70:e2:c0:53:58:6b:fb:cd:f6:a9:
42:90:fd:4e:22:9f:07:b0:ab:12:8f:24:ea:d0:87:2f:f2:ed:
9f:34:e6:ce:dd:b0:f9:5f:30:94:f5:12:d4:e4:66:cb:87:5a:
95:f4:46:a7:6d:8e:e1:0e:fb:91:87:24:94:c1:a4:ac:1b:0c:
29:3c:a4:49:ef:54:f1:0a:71:3c:18:da:bc:65:e3:0f:e8:d7:
b4:ea:24:88:bc:9f:53:18:44:03:a5:1b:f2:11:8c:65:2d:10:
1e:10:8a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:53:57 2026 by rpki-client