Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
File: veGsj467UC_MRFYtwQ2XOIRJO-U.mft (raw, json)
Hash identifier: yrvmofPI2xfvb/w74v3eUso8JrQRu7gJR4JngjqhARA=
Subject key identifier: 37:A9:A8:FA:34:DD:18:FA:5D:D0:0D:13:13:BE:FA:23:45:B8:FF:9E
Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
Certificate issuer: /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Certificate serial: 01A0D796F69553B4EF55BCC868189E7F3389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
Manifest number: 0DA2
Signing time: Fri 25 Sep 2026 08:03:09 +0000
Manifest this update: Fri 25 Sep 2026 08:03:09 +0000
Manifest next update: Sat 26 Sep 2026 08:03:09 +0000
Files and hashes: 1: FHuC08xej65vWpoCn1vY19ZYaXo.roa (hash: fK+QZuAXM9LenQpI7DNcQDyQgibuJZ/UqzboQddeQwQ=)
2: veGsj467UC_MRFYtwQ2XOIRJO-U.crl (hash: /4hAB/PvB9F+aFSYdYWEZGh9BKzXraIJHJMQL826JYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:f6:95:53:b4:ef:55:bc:c8:68:18:9e:7f:33:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Validity
Not Before: Sep 25 08:03:09 2026 GMT
Not After : Sep 26 08:03:09 2026 GMT
Subject: CN=37a9a8fa34dd18fa5dd00d1313befa2345b8ff9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:47:c2:cb:69:4c:c3:ed:fe:86:3f:b7:fc:7b:
af:7c:e8:96:c1:76:18:bc:99:04:10:d9:90:3e:e6:
0a:b2:34:01:e6:a9:03:03:9f:d3:85:41:37:88:15:
49:cf:dd:94:68:f1:6a:82:a1:7d:21:e3:6d:42:a7:
9e:05:29:4f:87:73:52:d5:28:80:3e:28:00:f1:f4:
85:de:7b:77:60:26:f0:2d:d7:33:0e:52:a5:bc:95:
75:e7:6c:31:af:17:3d:1c:9e:a3:d9:8f:94:7d:02:
67:5d:88:ad:84:43:3e:f8:71:f3:cd:d1:29:75:7a:
74:19:e6:73:ab:ee:6e:2c:eb:f9:d3:ba:8b:88:2d:
85:da:2e:0f:db:9b:67:ff:0e:d0:94:d7:bf:53:2c:
2e:b5:88:fb:6c:af:5f:93:2c:11:b9:da:0b:fc:91:
7e:7d:02:cd:b1:4b:8f:15:74:48:91:44:0e:ab:92:
f1:62:67:01:db:e4:cd:81:28:2a:70:b2:bc:4f:12:
d5:0d:6a:db:1e:06:f1:fb:3c:1d:f6:ab:24:87:03:
92:d7:97:b2:e5:44:3d:79:76:6d:43:86:63:54:40:
7a:6f:25:d2:fe:e3:c0:ca:99:70:00:9b:61:55:e5:
ae:b8:ac:d6:3a:d5:c9:fe:3c:21:c2:80:2d:ef:0c:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A9:A8:FA:34:DD:18:FA:5D:D0:0D:13:13:BE:FA:23:45:B8:FF:9E
X509v3 Authority Key Identifier:
keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:84:14:03:25:3a:62:5c:6c:8a:b6:c6:86:44:ca:05:3c:d4:
60:ac:5a:ad:29:6c:9c:f5:1d:55:f3:b2:7b:ec:96:e4:6b:70:
c9:d7:64:32:a1:57:5f:57:2b:05:e9:b0:86:6a:77:23:bd:04:
0c:29:01:9d:1d:2f:e0:03:05:bc:6c:d2:15:a5:f6:26:fe:b2:
cd:fa:77:22:d5:e1:a5:f9:fa:66:a4:fd:e1:59:8a:22:98:67:
96:41:72:51:f6:8f:2c:d2:03:e9:a4:71:96:16:ae:99:30:6d:
f8:34:4f:63:73:60:99:8b:89:1d:46:44:7f:65:7f:e2:f6:da:
1a:29:a2:74:72:88:1b:f8:aa:a5:d3:20:e8:e5:cb:2f:4b:d9:
88:36:c8:6f:d1:6f:2b:4b:d1:bf:98:6d:0c:ce:1d:c9:e5:cb:
16:fc:16:ca:4c:f0:c8:a3:f6:9c:90:37:79:3c:f6:c3:ab:2b:
b2:de:3e:8b:f7:c3:a0:2b:05:3c:dd:0f:91:6b:a2:63:9d:1b:
fe:2d:03:a3:61:cf:58:80:ed:72:54:b6:66:99:df:c4:15:02:
3c:9a:e0:d0:5b:a9:b5:12:20:50:2a:62:74:02:b4:e8:bf:9e:
1f:d1:56:01:86:45:81:76:07:fa:0b:31:c5:6e:a3:7c:22:b3:
c8:8b:f8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:56:49 2026 by rpki-client