Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File: vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier: bmhKoeZlMNdrvbV/kqbvola0wao6A21oiJaWDnUnaqk=
Subject key identifier: D5:7A:90:BA:7C:CA:87:E2:D9:D0:B6:E0:B1:07:80:09:70:1D:AF:44
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial: 01A0D5DEC2F3130E59BA230F1BE721E5FA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number: 19EE
Signing time: Fri 25 Sep 2026 00:02:20 +0000
Manifest this update: Fri 25 Sep 2026 00:02:20 +0000
Manifest next update: Sat 26 Sep 2026 00:02:20 +0000
Files and hashes: 1: Hj4v62AOdoRZqYCBUDTjMFLo8KI.roa (hash: YWbpGzjtAJu7tqoItoovhEd5x36ZXMAx6yUUYU//amY=)
2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: Rr5vb2Rpl0Mhp/lUTRjTo+gSsz2+b8UNSIEN0JBM3QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:c2:f3:13:0e:59:ba:23:0f:1b:e7:21:e5:fa:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Validity
Not Before: Sep 25 00:02:20 2026 GMT
Not After : Sep 26 00:02:20 2026 GMT
Subject: CN=d57a90ba7cca87e2d9d0b6e0b1078009701daf44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a6:e0:b8:63:65:77:f8:72:6d:e0:54:f1:bf:
78:67:18:4f:db:ce:1e:15:a2:bd:15:6c:2e:de:1d:
d2:8c:f4:f9:c5:1b:3b:1e:33:a9:16:fd:a3:5a:d2:
51:0e:7a:d6:dc:b2:70:0e:37:ef:5d:2c:70:a8:63:
07:e3:f1:5f:c0:b7:d0:29:2c:cd:f0:bd:5d:77:7d:
71:36:58:89:2b:d9:53:24:a2:b2:83:35:65:a2:1f:
d0:55:32:cd:ec:ed:71:52:99:28:0e:f0:ae:e7:51:
d1:b6:84:b5:41:79:96:18:df:6d:cf:4d:64:8d:87:
05:77:9a:ef:5d:ac:bd:06:60:5c:a6:e5:51:4c:47:
0f:0b:d9:25:e5:99:ec:0f:8c:e1:23:6f:34:6a:fe:
85:5f:c1:93:30:0d:2b:8d:eb:62:bb:6f:d2:42:fd:
5e:56:53:4f:6b:41:9b:f5:a0:f0:09:50:4c:72:50:
b4:47:2f:e7:18:1c:e0:de:0a:35:ac:ed:2b:ba:1f:
d0:69:d7:6c:46:a7:eb:75:36:18:5e:6d:cc:a9:f6:
5a:28:46:c4:1b:38:bf:ac:d0:13:e0:48:6d:08:6e:
d0:e4:ac:da:64:b2:6f:ef:d9:9e:05:51:7f:c0:cc:
c2:80:9c:c0:23:a0:f7:d9:8c:e5:5b:6f:14:d2:3d:
a5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7A:90:BA:7C:CA:87:E2:D9:D0:B6:E0:B1:07:80:09:70:1D:AF:44
X509v3 Authority Key Identifier:
keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:81:27:9e:4e:c2:95:96:45:89:7a:15:04:38:f1:7c:ad:ae:
b9:26:2a:65:0a:16:a2:f1:ae:e5:46:cb:e3:0c:a9:e3:6f:d5:
eb:65:f5:39:4c:c2:7b:17:6c:62:5a:11:aa:a6:5c:33:ce:11:
08:75:d8:21:50:5c:0f:a9:f0:75:87:19:e2:b9:46:d2:64:2a:
62:bf:3a:83:0a:39:f8:d0:c6:84:1e:d6:ff:91:c4:a9:c9:9b:
7b:89:ee:16:1b:6b:3a:7f:8c:b5:5a:69:d9:5a:7f:8a:71:71:
62:d0:e7:e9:53:e4:9e:ca:e0:3e:1c:b0:61:cf:f3:3f:a6:8b:
71:06:27:fe:34:bb:9a:bb:69:d3:6a:e5:29:de:eb:b7:cd:b6:
91:66:a3:ac:79:00:2c:97:35:59:e3:61:36:ae:5d:7e:68:43:
50:e1:27:c4:a0:36:d4:2a:cc:28:bb:9e:9c:92:f0:d8:9e:dc:
6c:8b:26:ba:e3:8f:c7:e2:00:16:34:8a:40:f5:8d:dd:fd:81:
d4:34:53:18:4d:e4:66:58:87:3d:87:62:2d:5e:4b:d6:ab:83:
22:58:af:9b:01:9b:40:6f:bf:88:43:c3:43:6c:e8:ee:a7:f2:
b2:2e:22:ee:37:aa:8b:bb:fb:cd:05:32:50:2c:80:57:18:06:
9b:4c:65:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:46:01 2026 by rpki-client