Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json)
Hash identifier: Hk+kbvRaLxWPrk7711Fb+pXPiF9H7micrvKi/dQY11M=
Subject key identifier: 83:76:D7:E1:E8:46:F6:7B:55:AE:B7:19:73:44:92:21:98:02:50:EF
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial: 01A0CEC8A90FDAEC833774E021BA3678E96F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
Manifest number: 0938
Signing time: Wed 23 Sep 2026 15:00:51 +0000
Manifest this update: Wed 23 Sep 2026 15:00:51 +0000
Manifest next update: Thu 24 Sep 2026 15:00:51 +0000
Files and hashes: 1: Ivg6snMydNXdySu3QX12mNo28u8.roa (hash: j9c4g1fOAHiMBPWaG5AigoutzfZxb4EuhkBYBF49VwY=)
2: i69vJEQPkDcWZtUI4FCC2gJOc0U.roa (hash: D7g5fdfmMlJvg4w+bYuZp2xJXQeTRhu8e3EybLceqmw=)
3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: BGB+hK4FIBe0Qe5DlY8OkhZhkg8Ax7JcpZK0XCicpuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:a9:0f:da:ec:83:37:74:e0:21:ba:36:78:e9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Validity
Not Before: Sep 23 15:00:51 2026 GMT
Not After : Sep 24 15:00:51 2026 GMT
Subject: CN=8376d7e1e846f67b55aeb71973449221980250ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c8:d1:1c:07:18:2c:fb:79:68:e1:f8:c5:1b:
47:04:d6:e6:ae:d6:e3:84:4a:3a:82:bc:be:09:3c:
cc:b3:9a:c8:73:4e:e1:2b:60:37:f5:32:8a:a5:e7:
48:32:9a:bd:ac:63:11:a4:35:d7:9d:45:7a:06:a4:
51:ad:d3:75:29:f7:36:e8:68:02:f3:07:76:91:9c:
c8:38:53:47:bb:06:6e:48:8e:f6:cf:c6:77:2f:1a:
e0:40:25:4e:53:91:8e:cf:74:d0:e2:6b:4c:49:49:
82:08:df:9b:12:e0:25:41:79:2e:0b:96:0e:01:3d:
ef:f5:f1:3a:00:c0:9f:b8:33:ba:e9:33:57:ed:33:
69:b2:5e:10:55:10:c5:34:a1:5b:7a:96:9a:49:b3:
3e:9e:f2:f9:31:19:9b:a9:c6:d5:66:ce:4d:5a:4d:
4b:30:97:d0:c5:ae:8b:05:bc:bf:7a:af:d5:a7:6c:
b9:e3:f1:fe:1e:f8:d7:28:54:c6:c0:8f:f0:e7:68:
5a:6a:01:e0:a6:a9:85:3f:f7:2f:d0:7d:e2:db:39:
fc:b9:2c:48:b4:ae:b6:c8:f0:38:3f:54:81:e4:b3:
d2:d7:f1:9a:36:27:31:ad:3d:c1:23:15:0b:04:44:
f4:c7:f1:a2:80:93:08:0b:f3:0f:78:f6:96:53:19:
3d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:76:D7:E1:E8:46:F6:7B:55:AE:B7:19:73:44:92:21:98:02:50:EF
X509v3 Authority Key Identifier:
keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a2:d9:fd:ec:a3:8f:e5:7e:87:52:52:f7:d4:30:01:04:cb:
5a:b0:27:2e:a3:8d:2f:c3:25:ce:ff:e2:ab:73:b2:89:94:3c:
86:a4:3a:99:4f:f4:8e:64:df:12:b7:85:42:d5:5f:f9:db:52:
72:00:f9:b8:ae:57:80:9f:1c:d0:eb:c3:c7:66:64:54:0e:d4:
d0:03:7d:b5:d0:19:68:f2:8e:96:05:7a:15:a8:3d:89:18:17:
f5:b7:dd:54:b0:b9:06:2e:21:d8:07:08:97:82:77:7b:c1:55:
90:7c:70:1a:3e:d2:1f:3c:3b:9c:00:c6:0f:85:7a:2d:f2:6e:
d9:ca:ce:c8:56:df:b1:e2:31:21:15:6e:82:41:89:48:e2:58:
3c:8d:91:41:e1:a3:cd:f0:e0:cc:f0:b5:dc:76:a0:e4:dd:0f:
dc:a9:e5:86:df:cf:49:fb:70:60:65:40:f2:f5:b1:5a:c1:8f:
0b:c9:a8:a5:87:71:38:78:7b:9a:77:54:46:3b:a9:d5:57:68:
8f:43:38:4c:0f:2c:e6:45:af:cb:10:4d:9f:a8:27:c6:98:38:
19:e6:dd:8d:68:47:58:de:e3:a9:bc:6f:5a:65:4f:10:fc:01:
29:d0:1f:d4:1c:ea:05:a1:fd:47:b9:f5:96:b4:3e:a4:19:a5:
5f:a7:6b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:57:51 2026 by rpki-client