Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: yynCjvxFX2gGIarnBVeOX+5R2I51en+35diUIeYnjIA=
Subject key identifier: 3B:3D:97:84:80:07:BB:20:8F:54:95:EB:B7:33:79:B5:30:1C:70:C1
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 01A1212E47AF009429BADD8536B331D3D613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 1A94
Signing time: Fri 09 Oct 2026 15:00:43 +0000
Manifest this update: Fri 09 Oct 2026 15:00:43 +0000
Manifest next update: Sat 10 Oct 2026 15:00:43 +0000
Files and hashes: 1: KBM2JifvD2Vh2akJjDLpqYRnGis.roa (hash: qcaeJ9j6EbyDF5mQddzhEcOLSvwlN5hP0uXT449+ltQ=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: dS5jmXMqZgHyc031jUue61dXjWj2WfZvmgsT4LePlRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2e:47:af:00:94:29:ba:dd:85:36:b3:31:d3:d6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Oct 9 15:00:43 2026 GMT
Not After : Oct 10 15:00:43 2026 GMT
Subject: CN=3b3d97848007bb208f5495ebb73379b5301c70c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:05:20:85:45:3f:5f:d5:21:9c:fe:d5:8a:
7e:49:0c:73:5b:e1:4b:15:65:cf:de:74:c8:59:60:
33:49:20:b4:1b:f5:eb:41:56:ee:dd:61:f4:be:23:
76:e4:e5:04:b1:f8:72:d4:6a:dd:c5:61:87:59:58:
a6:1d:3e:87:5e:02:9c:da:07:f8:40:c1:48:7f:ca:
89:d6:a2:b9:ce:61:26:a3:a6:5b:d6:ec:b3:52:7c:
f9:1e:62:52:b6:d2:7b:10:d1:76:c3:d9:9f:ca:bc:
5c:23:2a:e5:4e:8d:d3:21:0d:af:62:51:7e:7d:1e:
96:cb:64:ab:be:41:49:de:ac:b7:25:a0:45:43:43:
5e:71:b4:78:83:ea:36:56:5e:bb:8f:8d:b3:62:d2:
f1:8c:e8:c3:92:f8:66:92:54:70:7c:14:c4:cb:ba:
bb:8a:59:95:b6:44:0c:20:a6:99:03:18:41:96:86:
82:25:6d:18:69:3c:25:1a:9a:8e:84:bc:8b:3b:57:
04:6b:51:e4:74:05:92:62:1f:b6:6f:bb:89:be:38:
65:b3:d5:9c:89:0d:3b:91:32:98:01:11:db:af:a2:
3c:86:8c:a9:b3:44:61:4a:e2:a2:e5:f0:43:97:d5:
89:a2:bc:f2:d7:b3:65:86:7c:e6:47:38:2a:f5:12:
c7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3D:97:84:80:07:BB:20:8F:54:95:EB:B7:33:79:B5:30:1C:70:C1
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2d:6a:59:89:48:34:98:24:05:a6:6d:4b:0e:74:43:06:56:
5d:10:5c:19:ac:2d:ac:42:1a:8e:46:41:6d:b6:db:ab:75:64:
fd:b3:7a:21:d6:60:2c:51:09:99:03:b6:c5:c3:f9:88:ad:1a:
a5:5d:29:db:de:28:bb:a3:4e:d0:bc:dd:07:65:d6:c9:60:11:
a6:fa:e3:bf:19:aa:7c:f8:7a:1c:de:95:21:75:df:46:88:f9:
22:84:7a:a9:19:c8:ae:6a:50:68:c0:60:8c:11:47:18:81:2b:
4e:3c:6b:fc:f8:37:83:e0:b5:b4:5e:29:66:d5:57:b1:5d:55:
ed:a7:52:82:04:8e:ce:3c:1a:c1:33:0e:5f:00:cc:93:80:7a:
76:3a:92:d4:3c:53:45:f1:cc:fb:90:53:f9:35:8c:98:a6:2c:
14:96:3b:45:80:b9:09:59:d8:57:58:47:e7:d0:c7:b1:a3:47:
20:dc:e2:b7:7e:74:61:d3:ff:a4:f4:f7:3b:90:25:19:ca:4c:
a1:81:e8:5e:5d:90:9a:a2:da:dd:4e:71:55:7f:97:b7:98:bb:
bd:7a:93:9c:1f:9a:2e:12:e5:ef:e1:1d:c6:fa:f6:b9:0a:3c:
ec:48:31:82:18:09:49:a2:0d:18:47:af:cf:f1:30:ad:4a:23:
9f:ee:60:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:46:21 2026 by rpki-client