Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
File: Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft (raw, json)
Hash identifier: xeYK5lJqNati3zG3q0AWfexb4v5Mniib1EJoB+9hOtU=
Subject key identifier: 13:BA:EF:FC:60:72:97:5E:74:F6:36:8C:2C:48:A2:BC:2B:E1:3C:F5
Authority key identifier: 55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73
Certificate issuer: /CN=55df024d85e89953d74c9bee32c9e32796bcfe73
Certificate serial: 01A0CC35101C9E15CB3F150C3A587D46B7EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:00:24 +0000
Manifest this update: Wed 23 Sep 2026 03:00:24 +0000
Manifest next update: Thu 24 Sep 2026 03:00:24 +0000
Files and hashes: 1: IiKdZihxK24qAbY3IlsJBY8DWuI.roa (hash: GiUmS/2trsIX5BrmBaADREO7MrJkpyzXZUgRulZKo18=)
2: KyEl-NBPpQ9teBrmm7tpFc8-Dj4.roa (hash: LX3Hr454zl2MUCj61HpMXcW0BQ8pIuxmh8gRh4mgIis=)
3: Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl (hash: ciBoxI7hmGuliTAJhotl+8bGIkqDeM/PHYIVETE6j64=)
4: XGylWLMmuf-6cyXPIHTSqm3GCd8.roa (hash: Bd9s12c8P6Pe+DYxSBmdpuoMDBh5umpoBqgkM4LDkJw=)
5: aWVkUEp4lm12y5qwWv2adJ66-rs.roa (hash: Hq+MYEUAwJVfh/YoUoYayEoIk7iU3N4ROU0WjO5xyMA=)
6: a_a4Bm2vMVbsH9BfYmsaqGtUarI.roa (hash: YQ7WevldUaPUf2luIJT1enFkQ7Ao715lMC2Xh1aTnXU=)
7: mX5yBu9SXhlcsrImPSehotm7bas.roa (hash: +AwpNCGeeHcy8ov56jxqSP8MLjuzljj6nR9dFS6V4jM=)
8: uTiURM_DMHiv75dNHPrAJFdnAd0.roa (hash: sF0ZyLzuBt8uyr+UBykHairkTID8q9WL1Vh7lTAxp1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:10:1c:9e:15:cb:3f:15:0c:3a:58:7d:46:b7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55df024d85e89953d74c9bee32c9e32796bcfe73
Validity
Not Before: Sep 23 03:00:24 2026 GMT
Not After : Sep 24 03:00:24 2026 GMT
Subject: CN=13baeffc6072975e74f6368c2c48a2bc2be13cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d9:29:15:a5:ba:1f:17:8c:17:99:d0:2a:0a:
ac:37:bb:f5:d5:75:93:ae:df:9e:7c:e3:eb:60:0c:
ae:0a:65:25:a4:2e:46:5f:17:ef:e8:94:75:c8:57:
e3:ab:64:ba:2b:2a:ed:88:52:f6:80:b3:5b:9a:a9:
a0:b3:f1:93:79:e2:33:96:3a:50:d6:9d:e1:dc:a2:
89:b0:85:5f:cd:64:d0:fc:55:0b:00:7a:48:3d:49:
a0:cf:2c:39:76:fe:68:92:bd:e5:a5:07:dc:bf:a9:
b3:ce:08:c2:c7:7b:44:bc:73:0b:cf:11:40:cc:72:
1a:18:6c:b3:07:a8:30:74:23:16:4c:e5:5a:1b:f0:
b7:dd:53:37:1f:ca:24:b3:3c:41:df:b7:a8:26:2b:
cd:8f:76:aa:51:9f:a6:b9:b6:39:5b:77:6e:52:99:
70:eb:8a:9f:7e:e6:cf:eb:76:e4:98:0b:62:9c:19:
9c:63:bd:ef:72:2d:9a:85:34:15:f4:8e:67:52:af:
a1:42:83:c3:09:2c:b1:50:e2:f4:82:84:14:57:c8:
60:29:08:af:63:56:30:3b:77:da:c8:a3:9c:a7:60:
bd:22:b3:68:b5:93:6a:ba:3e:70:85:c8:35:49:1a:
4f:85:bc:aa:19:d8:d6:18:d4:8f:a7:5e:b8:1b:58:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BA:EF:FC:60:72:97:5E:74:F6:36:8C:2C:48:A2:BC:2B:E1:3C:F5
X509v3 Authority Key Identifier:
keyid:55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d9:1f:11:11:33:10:21:df:09:a4:86:bd:ce:41:15:96:e1:
84:6c:87:40:a2:6a:d4:c9:0e:00:9e:e1:84:4a:8b:b7:17:20:
5b:73:00:21:f3:65:fd:40:bc:95:5a:0d:dd:dc:89:c6:8b:45:
df:89:ad:11:3f:52:43:2c:6f:62:c6:e2:70:4d:a8:1d:0e:49:
db:d6:81:5b:a6:58:dc:ac:5d:58:17:08:3c:48:fa:da:a5:d5:
72:12:a0:da:d5:b2:35:69:b6:97:a4:7d:98:a0:ca:60:36:6d:
61:82:ae:df:36:75:b0:16:b5:b7:99:79:57:a9:3e:49:32:0e:
15:b1:f1:75:03:ad:65:f3:b0:27:d1:e1:6c:63:3b:47:86:62:
3b:9a:26:f0:8b:95:39:ee:fa:a2:01:f9:69:1b:f9:e7:5b:23:
39:e9:3d:52:6d:d1:08:fb:8e:e2:92:94:1a:54:80:3f:0b:5f:
18:eb:01:ae:69:ad:ad:cd:ca:6b:ce:15:4a:0d:9a:63:06:45:
26:11:c8:ba:6d:77:56:83:7c:c8:46:ae:4f:4b:e9:c3:6f:5b:
02:a9:ba:e4:e5:02:0d:8b:18:c9:2d:f5:9b:d2:d1:fb:20:86:
bb:51:eb:36:35:87:a8:5a:d8:95:81:05:c7:3e:f8:10:41:31:
97:a2:75:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:19:40 2026 by rpki-client