Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier: wRdlNrpmrM3ULd8YXCxal4YjbZtEu3LzE1qCe2NJQTo=
Subject key identifier: 3B:12:5D:38:AB:43:5D:46:67:A8:04:4E:27:68:5A:67:42:D8:40:56
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 01A11E2D5588D777ACD849DC4EE33BD72EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number: 1A95
Signing time: Fri 09 Oct 2026 01:00:49 +0000
Manifest this update: Fri 09 Oct 2026 01:00:49 +0000
Manifest next update: Sat 10 Oct 2026 01:00:49 +0000
Files and hashes: 1: JgeUHeNo3nFoKbjY1AINP-ptMwI.roa (hash: CbuVPg9dHHICjEGGHB/goqF54ESCFCWeMJDnOxUnhB8=)
2: lmShAguKDpqteUFiiwxYcMXfQMA.roa (hash: mAIfdJGX8ltG4W72LHXtlpg9vxaFGwMn3DmPzW0FpIM=)
3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: DlSotkFyOfT711MRghT6cA9MofWENdE8HDSyNXe8uF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:2d:55:88:d7:77:ac:d8:49:dc:4e:e3:3b:d7:2e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: Oct 9 01:00:49 2026 GMT
Not After : Oct 10 01:00:49 2026 GMT
Subject: CN=3b125d38ab435d4667a8044e27685a6742d84056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:cd:6a:bb:cf:53:7d:8a:22:b6:12:d7:3a:
82:87:34:8d:72:5b:7f:d8:fd:5a:14:e6:ce:95:c4:
73:32:a3:bd:82:d3:cb:00:bc:3c:c0:7d:e1:17:0b:
a8:32:28:83:fe:d2:5b:2f:3b:66:72:77:94:3f:11:
03:77:2a:43:3b:09:13:b6:68:60:c1:40:b9:19:35:
6a:27:9a:9b:ab:e8:fb:cc:a0:fe:eb:a2:6a:57:5e:
3d:5d:6f:0b:f4:a0:3b:4d:45:f5:7b:17:43:68:e3:
78:b6:93:3d:63:a9:66:e4:59:c9:d8:df:7c:24:a6:
fa:c3:60:15:54:09:94:d8:fa:14:4c:5c:dd:37:a0:
99:de:e0:b5:f1:f8:5c:89:7e:a4:3e:bb:18:79:3a:
ed:70:33:67:ec:36:28:25:f8:db:59:0e:6e:aa:c4:
87:55:be:38:98:2c:05:00:c6:48:c7:f9:2d:2c:76:
f3:c9:d6:5c:d8:ec:41:4f:3b:8f:e7:71:04:d3:89:
27:a4:3b:dd:66:b3:6c:f5:3e:fa:62:4c:d1:f5:0a:
2a:3b:2c:ff:4a:fa:be:72:67:e3:43:67:9b:2c:6f:
6e:62:b0:cc:c5:8a:78:9b:ae:b9:32:18:1e:3b:08:
61:ea:0c:8c:c3:9a:d1:49:06:9b:fb:17:b5:f9:bd:
e5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:12:5D:38:AB:43:5D:46:67:A8:04:4E:27:68:5A:67:42:D8:40:56
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:25:96:93:d6:17:1e:46:66:9e:02:00:0b:64:69:cf:59:6a:
45:e6:18:92:61:0c:79:b6:fd:34:ed:90:fe:bf:8e:e8:ef:54:
fc:34:3e:59:9a:a3:5f:47:2b:e7:37:df:64:ef:dc:a5:07:72:
2d:84:44:e6:5c:de:24:19:0e:55:c3:65:31:46:81:dc:e9:7a:
a0:f3:ec:33:3d:b7:bd:43:22:b9:2f:61:17:70:ac:53:4a:cc:
c3:2b:8d:d8:1b:f0:d1:40:8b:c2:28:7a:90:70:c8:e2:f8:61:
4e:58:07:4e:69:02:50:91:43:28:50:e5:7c:c5:94:d4:45:2d:
65:29:d4:9d:68:09:31:55:72:a3:3d:6f:71:13:03:0a:b2:8b:
d3:0d:03:bf:ea:8c:a8:02:b8:95:43:67:24:af:3f:5a:52:ce:
18:a3:e8:2e:0a:1e:54:9b:d8:9f:8b:ef:90:e2:8e:0f:f3:03:
60:a4:7e:72:ff:7f:13:88:01:db:4d:6d:07:03:75:65:a4:ac:
98:a1:a4:36:de:16:b1:7d:dc:23:9d:f3:73:1e:0b:3f:be:8b:
74:a7:bd:93:53:86:97:6f:7d:bd:cb:4c:5a:ed:a0:56:c9:fd:
e0:f3:de:25:ae:81:1d:92:fc:cd:59:e5:c3:42:db:48:0f:6c:
70:06:6d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 08:04:38 2026 by rpki-client