Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File: vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier: kAI//JE6KJhqZj+asMzcqEontXEZge3o3cdh0TPH0VI=
Subject key identifier: 81:77:28:DA:9C:72:6D:EE:97:19:EF:40:03:2E:A1:8A:D7:92:91:FC
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial: 01A0D7CD362F5D7CDD253475B35A597FC3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number: 19EF
Signing time: Fri 25 Sep 2026 09:02:25 +0000
Manifest this update: Fri 25 Sep 2026 09:02:25 +0000
Manifest next update: Sat 26 Sep 2026 09:02:25 +0000
Files and hashes: 1: Hj4v62AOdoRZqYCBUDTjMFLo8KI.roa (hash: YWbpGzjtAJu7tqoItoovhEd5x36ZXMAx6yUUYU//amY=)
2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: 3ZemqG+a0pfWLwmqTmFkiUZa+wdBRIOJreRL9NGsCu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:36:2f:5d:7c:dd:25:34:75:b3:5a:59:7f:c3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Validity
Not Before: Sep 25 09:02:25 2026 GMT
Not After : Sep 26 09:02:25 2026 GMT
Subject: CN=817728da9c726dee9719ef40032ea18ad79291fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:61:29:a9:34:e4:20:c7:05:ff:09:6b:af:97:
ab:b1:05:94:5b:c4:82:5b:6c:56:84:d6:e4:2d:85:
e3:4b:9c:4f:d7:40:b1:4c:83:58:8d:93:42:ca:0b:
6f:71:83:80:28:b0:c9:c6:d5:3f:2a:54:12:1f:64:
01:22:71:9c:c7:d1:57:df:a6:4d:89:c7:6a:d0:a9:
83:29:70:c3:2b:fa:91:9a:95:2b:96:1e:72:9d:87:
a2:bf:2f:2f:07:a1:d1:1a:3f:63:f8:0f:31:f3:9e:
99:42:71:c1:f5:46:02:3c:c7:a5:c3:bf:fa:5f:db:
9d:5e:5f:00:00:7f:56:4f:1e:e1:25:d2:b3:6d:5d:
5d:74:fc:9e:a1:6a:1d:ab:84:70:85:f9:f6:cb:0f:
0c:7e:75:dc:39:ef:15:8a:28:b6:34:da:ac:dc:2f:
ea:84:ab:72:ab:7b:07:a6:f6:5d:32:e4:ad:44:38:
45:58:69:8d:61:0e:e9:94:3c:8c:d8:8e:bc:c3:cb:
63:a1:09:5b:cb:f2:af:e3:70:84:07:cc:91:91:7a:
e0:71:41:53:96:c9:e9:86:61:41:92:23:af:0a:5d:
e9:f5:4b:dc:f6:77:f3:4f:99:d4:2e:95:7f:1a:13:
bd:12:7d:e5:18:b7:87:52:99:9b:b4:ac:f7:15:d5:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:77:28:DA:9C:72:6D:EE:97:19:EF:40:03:2E:A1:8A:D7:92:91:FC
X509v3 Authority Key Identifier:
keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9a:d9:3c:9f:8e:1e:60:77:c7:f3:27:8a:d5:57:ee:c9:d9:
bb:97:69:9a:e1:9c:0a:f7:92:95:cd:3b:da:37:92:30:5f:4d:
99:cb:55:93:c5:96:44:02:d8:f7:2e:4b:1b:93:d5:d8:b2:e9:
bd:f5:0d:4d:52:cd:35:bd:dc:93:82:26:11:fb:0f:72:e0:da:
65:bb:b2:a4:17:82:8f:af:e6:18:68:04:3d:ec:84:9c:1f:e7:
4f:74:3c:3b:85:1c:77:9a:c5:28:9f:9b:e2:c0:b5:54:e5:3a:
f0:53:ad:a7:6a:ef:a2:c7:37:2f:ea:1e:22:c2:98:9c:25:99:
5e:cb:ce:4b:40:5b:38:da:3e:a2:e9:03:4f:32:bf:d2:c7:64:
a4:91:36:fe:7a:ff:fe:d9:d2:64:a8:26:e1:bb:85:32:4f:f3:
97:fa:4e:c0:95:8b:4d:41:26:83:02:5d:b1:8f:b3:2f:a9:bd:
d2:6c:4e:71:74:00:07:60:4c:66:fa:10:87:c1:89:37:19:4a:
da:b9:65:0b:7d:da:b3:6c:17:83:a4:4e:17:53:1c:66:a3:5a:
eb:26:a1:6f:e6:00:2b:b8:8e:3c:0a:36:ce:14:79:2b:77:ae:
da:ce:4b:59:09:7c:87:8f:f6:12:f7:b8:5d:2d:2d:b2:fe:37:
39:ad:07:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:32:13 2026 by rpki-client