Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
File: vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft (raw, json)
Hash identifier: uuM7p1GJxule6ltaFpV1uM+fPVQLZkazhK3PHrbTPno=
Subject key identifier: A8:A2:B4:11:49:73:56:D4:7D:F0:AA:61:4D:04:4C:F3:03:22:8B:AC
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial: 01A13C00D066A7D8BDBD845C535C5783BEC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
Manifest number: 1AAB
Signing time: Wed 14 Oct 2026 20:00:48 +0000
Manifest this update: Wed 14 Oct 2026 20:00:48 +0000
Manifest next update: Thu 15 Oct 2026 20:00:48 +0000
Files and hashes: 1: mLE7VosmydhVCMguYH3rQgmTc-M.roa (hash: mTYzchMKEO4uZTushftKzw0+5nZsPeA/JGcP5k+QnQM=)
2: peCptJnBjS01Jffe9zNkUarZyKY.roa (hash: NdN6bmU/0xsnoYufljMuvL8XIU6jhRkxeQ2tCu90AyY=)
3: vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl (hash: LHGH4Z+MrLEUptDgMJoZsHSkuxZp/zfWJ3sbruwpwGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:00:d0:66:a7:d8:bd:bd:84:5c:53:5c:57:83:be:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Validity
Not Before: Oct 14 20:00:48 2026 GMT
Not After : Oct 15 20:00:48 2026 GMT
Subject: CN=a8a2b411497356d47df0aa614d044cf303228bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:38:4d:d7:56:22:ed:6a:a7:6a:db:98:5a:4c:
9f:56:52:74:ca:f9:ac:b4:62:55:2a:cc:57:67:84:
36:46:3e:b8:59:c2:cc:07:07:a6:d0:79:7a:25:e2:
dc:f3:e5:c5:4e:05:73:b3:68:0c:44:5c:f7:83:a7:
79:16:ae:11:77:d9:54:85:b3:54:05:dd:cb:48:d1:
79:5b:10:01:48:bd:e4:0f:b9:ff:fe:1b:5c:69:24:
27:63:fe:4b:84:81:bf:06:ee:93:d7:01:56:08:4d:
4f:ec:b2:45:b5:90:a0:49:1e:12:2e:54:ce:e9:7e:
79:36:d6:05:47:a0:c2:f1:0a:76:8b:f1:1d:a0:20:
77:b3:74:a2:c9:45:ac:9b:93:8a:74:b6:1d:a5:07:
5b:07:6f:b1:c1:0c:a4:26:b6:94:19:03:54:cc:e6:
06:68:4f:9f:cc:e1:00:61:f9:be:4d:10:20:25:4a:
28:94:8a:94:37:5a:62:bd:1f:ff:19:c4:0d:b3:9f:
6f:0b:d6:20:a0:6b:67:a3:7a:40:24:96:5f:9b:8f:
fa:d6:0a:ed:38:80:24:57:eb:dc:a9:7c:84:fe:8e:
8a:39:83:9c:d5:f2:2a:47:a7:d7:e7:10:0b:68:a7:
6e:7c:f0:ce:61:7c:f7:16:d6:42:47:55:b8:0f:21:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A2:B4:11:49:73:56:D4:7D:F0:AA:61:4D:04:4C:F3:03:22:8B:AC
X509v3 Authority Key Identifier:
keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0b:28:9b:5e:b1:2b:c5:20:12:1b:3a:c2:3f:8e:af:ad:e3:
bc:d0:75:09:4c:6e:3e:30:9c:bf:3e:5b:7a:76:b0:d5:87:6a:
0e:64:2f:dd:11:8f:44:7d:00:70:ca:e0:5f:03:c3:95:a1:fb:
d9:50:3d:f5:18:e0:95:73:d3:82:93:aa:1c:0d:50:b6:8b:69:
51:c4:76:ad:89:5d:67:eb:a2:42:13:5c:8f:42:1b:e6:4f:c1:
6b:c2:25:cf:c4:a2:e3:04:8c:77:a3:4a:a1:98:ea:a3:f5:50:
e6:14:ca:9e:fe:c1:74:42:39:4c:57:52:ca:7d:4a:5b:c1:f0:
13:1d:26:c4:4a:38:99:5d:01:f6:7f:ca:02:17:67:64:54:d4:
51:a5:00:8a:59:5b:a6:b5:a7:1f:b3:dc:be:36:12:ac:35:a8:
5c:83:48:6b:e9:45:d3:a1:8f:17:16:64:31:3e:45:7f:1f:1e:
50:9c:eb:52:91:2f:dd:79:60:9b:07:85:84:55:41:50:9d:2e:
1f:da:dd:73:5f:39:a1:73:4b:0d:0b:79:1c:43:97:23:c3:3d:
6f:db:f9:00:ef:fa:ae:c6:f8:a2:75:e7:dd:d5:dd:32:a8:b4:
4c:86:f2:64:06:7b:c1:21:b5:9a:1a:9d:4f:8c:2e:30:bb:ae:
64:34:23:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:24:14 2026 by rpki-client