Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
File: vnApzozJt4fZQyPgyg0U3R4AQ-w.mft (raw, json)
Hash identifier: xqyATNGypJddfHDRWg8/03zESrdMwHkZqbRDe8T/5MM=
Subject key identifier: D0:6D:0B:D8:18:18:C9:13:59:C7:87:B0:3F:5A:74:C6:63:81:FD:E8
Authority key identifier: BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
Certificate issuer: /CN=be7029ce8cc9b787d94323e0ca0d14dd1e0043ec
Certificate serial: 01A06536B0D7123A64C445FA3255EFBEDC1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
Manifest number: FD
Signing time: Thu 03 Sep 2026 03:01:18 +0000
Manifest this update: Thu 03 Sep 2026 03:01:18 +0000
Manifest next update: Fri 04 Sep 2026 03:01:18 +0000
Files and hashes: 1: PREiP0WtH9ua_lz3N4aim-V6AL8.roa (hash: 1d1XtFoMmk8IeE22KgiEf8/gZMUj3LiFZydzZU53viM=)
2: Rse8KVJ-qnRoFq6yUvasvPGC72s.roa (hash: 5L9ESppL3oc4AteITAQXY4+3w1JEM9PNJuyAgfgBzq4=)
3: vnApzozJt4fZQyPgyg0U3R4AQ-w.crl (hash: 0j7vk/vcYq/z9p+qbLnjl/XaUC/9wm8DY05/mAlJJWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:65:36:b0:d7:12:3a:64:c4:45:fa:32:55:ef:be:dc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be7029ce8cc9b787d94323e0ca0d14dd1e0043ec
Validity
Not Before: Sep 3 03:01:18 2026 GMT
Not After : Sep 4 03:01:18 2026 GMT
Subject: CN=d06d0bd81818c91359c787b03f5a74c66381fde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:05:c4:01:1f:59:99:f7:91:52:73:dd:f8:
5f:83:d2:05:a5:90:1b:9b:b9:a2:a1:f6:6a:c4:ea:
34:06:c0:82:1c:a6:98:50:5a:55:9d:29:cc:18:8a:
cb:fd:e9:06:c7:f1:e5:0c:9b:8c:ae:f6:e9:2a:90:
19:03:0e:40:4c:31:5c:3a:35:8c:d9:a0:16:fe:fb:
46:d9:c6:70:11:89:8f:88:36:53:6d:e1:f8:17:ae:
57:49:a0:19:eb:1c:ac:80:16:f0:6e:e3:bb:6c:64:
f9:d9:d9:c6:c8:7b:12:95:8f:49:c8:a5:0c:71:25:
4f:b1:43:3c:d7:bc:6d:dd:3e:bb:c7:23:94:3f:3a:
2d:8f:ae:eb:a7:ec:c3:87:2a:df:34:92:7c:d0:19:
2f:10:03:dd:a3:b2:d7:0b:b6:ad:57:99:57:2d:bf:
a9:5c:92:39:6b:43:e0:79:24:68:f3:be:62:32:1b:
ad:7a:c7:8f:12:0e:0c:9a:ac:b9:6a:a5:5c:e9:4d:
32:fa:30:42:a4:25:31:98:66:e4:39:0d:8d:12:ec:
1f:63:26:53:e1:a0:49:f8:d2:ab:3c:a1:68:b3:50:
b7:24:1c:d2:2f:9c:ca:69:16:cf:b3:84:25:05:a4:
18:6f:d9:f8:d2:48:d4:c2:c0:c6:ef:64:0a:54:bf:
33:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6D:0B:D8:18:18:C9:13:59:C7:87:B0:3F:5A:74:C6:63:81:FD:E8
X509v3 Authority Key Identifier:
keyid:BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b2:e9:f1:41:2a:7a:62:16:47:8a:24:23:ec:55:5b:e0:42:
50:61:b8:65:07:f8:4e:f8:99:25:d3:0c:12:aa:ce:e4:3b:3f:
b9:0a:90:b0:ae:99:d6:99:de:19:4f:ff:ad:4f:02:bf:53:71:
1d:e0:8e:af:d5:2e:18:5c:34:e0:ec:ca:e3:1c:f7:43:03:62:
20:ed:d5:d2:26:3a:4d:6d:ab:b4:cc:0b:a0:ef:6a:8b:50:6d:
c6:38:f9:d8:29:25:7a:5e:52:91:df:2c:7f:c6:b9:63:2b:c8:
b5:ac:36:02:a4:6c:3e:d9:7a:59:a1:56:a6:3a:f3:ce:fb:c5:
61:da:8c:af:5b:d7:99:92:49:bc:b7:56:d5:b6:25:c8:a5:2b:
d4:f4:84:27:f7:db:2e:ef:50:3e:8e:81:69:f6:89:1a:38:2a:
b8:cf:ea:f7:3c:48:21:3c:90:64:94:6c:d7:8b:71:48:be:7d:
5d:cb:13:9f:0d:fd:05:d5:a7:e9:5a:fb:68:87:df:48:36:e1:
34:ff:31:c1:6f:00:fe:01:fc:ee:5b:50:fb:db:ec:dc:a3:63:
8e:b0:df:3d:e5:34:fc:4b:53:bf:7a:0e:dc:74:86:ae:ad:41:
41:f8:67:b0:dd:44:14:0f:a6:7d:d1:1a:e6:26:c2:97:4d:1d:
56:7b:54:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 11:31:34 2026 by rpki-client