Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File: VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier: UxxSvIS6Yc0fqy07W4b+LX5W38N2TJfzjnHYRhN+rdk=
Subject key identifier: C1:ED:9D:6B:E4:7D:88:5A:3F:A0:51:E0:F2:07:82:BE:EE:AF:BA:EC
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial: 01A1257943D5EC914EEF1B8B9418C3434596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number: 07E1
Signing time: Sat 10 Oct 2026 11:01:06 +0000
Manifest this update: Sat 10 Oct 2026 11:01:06 +0000
Manifest next update: Sun 11 Oct 2026 11:01:06 +0000
Files and hashes: 1: J3APbr50rVneV9H1qg-HNNc-3lc.roa (hash: NXCP1NiFTqdVA1tneuQk89jFvEWiunEfCtSHBOd2xMY=)
2: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: pNnCairnUmeL0vGBjx/OJSjktcf1QYZXUp7dL+UJTSA=)
3: sFbjjm9G4nIcCl6eddoCOU60Adg.roa (hash: s7stSepgHsyCZyovoxvn1tgIewGdFX/4iFQZDg8eOb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:79:43:d5:ec:91:4e:ef:1b:8b:94:18:c3:43:45:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Validity
Not Before: Oct 10 11:01:06 2026 GMT
Not After : Oct 11 11:01:06 2026 GMT
Subject: CN=c1ed9d6be47d885a3fa051e0f20782beeeafbaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:41:36:d2:46:a8:8e:ea:be:7a:28:b5:3e:
66:b9:4b:c6:1e:e8:ee:b1:87:24:c8:17:8f:04:74:
38:f6:dd:9a:f0:0a:23:a3:aa:01:60:76:16:30:ee:
57:08:aa:29:12:f8:63:10:dd:1c:58:9e:b8:de:34:
f8:5f:4d:09:e3:c8:8e:50:69:b5:1d:9f:d4:18:66:
f0:6c:f9:56:70:92:10:df:0d:48:1f:cf:fc:6b:d5:
2c:d7:07:7b:4e:52:15:e6:37:3c:59:ec:be:75:a9:
7b:ec:66:20:1c:d2:2b:dd:46:68:7b:94:36:8d:94:
1a:1d:6c:47:80:34:0b:e1:55:0e:41:b5:fc:69:e3:
2f:a6:0a:b4:ea:0a:57:88:96:43:2a:90:29:f8:cf:
56:41:e9:fd:5b:0a:92:0a:04:0c:38:f0:b2:eb:65:
9e:f5:80:62:ac:3a:8d:bc:1d:bf:5f:d1:d4:14:7e:
28:7d:39:5d:f9:7d:c5:da:be:b7:e1:52:26:a0:b9:
95:82:7c:db:2f:7e:31:54:00:d2:8c:5c:98:a8:bf:
e3:92:30:9c:ef:d7:41:c8:2c:e2:a8:fe:30:24:e1:
44:d3:5e:69:27:44:77:56:3d:20:c6:ff:be:8b:94:
e1:e5:dd:37:56:94:38:36:35:30:04:cc:9d:52:20:
3b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:ED:9D:6B:E4:7D:88:5A:3F:A0:51:E0:F2:07:82:BE:EE:AF:BA:EC
X509v3 Authority Key Identifier:
keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9e:6c:40:da:0b:0c:0f:ed:e8:9f:15:f7:df:48:23:68:8e:
f5:fd:47:ac:e9:fb:59:8b:c1:93:97:2b:db:cf:02:5b:1b:f0:
60:4b:92:8d:13:d7:af:36:24:b2:c9:82:d1:10:fe:09:02:42:
c6:4b:8c:99:de:f7:ab:02:b4:77:99:77:8a:2b:2d:bc:b6:78:
3d:7b:40:14:0c:56:f6:3b:6c:27:0a:cf:73:6d:9d:95:a9:78:
d3:13:04:ef:40:f8:fc:62:bd:d2:1f:53:95:24:5b:de:d1:01:
7c:15:9e:0b:80:14:d9:f9:bd:0b:af:bb:4f:4f:0f:51:08:19:
c0:b9:7e:bf:6a:70:85:d9:d4:22:26:af:a2:72:1a:ac:84:fc:
8f:ad:56:86:03:f8:d8:c7:de:37:1e:c4:90:57:c2:ec:03:b5:
30:ea:5d:de:f5:ea:6b:87:78:f8:c6:6d:94:a2:6f:9f:09:e4:
35:14:91:56:7b:b3:99:34:46:12:b6:6b:47:9a:c0:24:ae:41:
68:2b:7f:f8:7b:d4:aa:bd:50:38:a5:3c:a5:1b:e7:45:d1:10:
39:9a:d9:1b:74:4b:7d:3f:9e:39:f1:3c:e0:99:9f:75:ba:1d:
f2:cb:91:27:b4:54:bb:89:69:83:4d:23:ea:11:67:1b:a5:53:
78:25:94:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:48:34 2026 by rpki-client