Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
File: VlIv9fvKiFRLh6NC_veNHJH8_ds.mft (raw, json)
Hash identifier: Z/irFna75w/TdU89KsU3nhgJzwMB6zjdxihIa/SOY7c=
Subject key identifier: 0E:68:85:A8:7A:4B:05:99:62:60:A4:F6:12:9E:39:BB:5E:1A:F4:2F
Authority key identifier: 56:52:2F:F5:FB:CA:88:54:4B:87:A3:42:FE:F7:8D:1C:91:FC:FD:DB
Certificate issuer: /CN=56522ff5fbca88544b87a342fef78d1c91fcfddb
Certificate serial: 01A0F18B760FF073CB0CA587D190B4AA8C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
Manifest number: 0267
Signing time: Wed 30 Sep 2026 09:00:43 +0000
Manifest this update: Wed 30 Sep 2026 09:00:43 +0000
Manifest next update: Thu 01 Oct 2026 09:00:43 +0000
Files and hashes: 1: 5KONAqD1frCRl3iURxlCjgsNLOg.roa (hash: tGnKJ+BSY1DMf6D9UEKBenHfaVs3CddfA0kG2ueymKY=)
2: TrfwfhcY8GGswLkgJrkJWsWSAlc.asa (hash: zmO01xmmzNKQw6cPo8ZkDqbcz8cu3YAmuN8CJGkozWA=)
3: VlIv9fvKiFRLh6NC_veNHJH8_ds.crl (hash: azRsAQaOjGxmTj0oQJbWl6RAvdWnY7mhYg3n9ENTBXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:8b:76:0f:f0:73:cb:0c:a5:87:d1:90:b4:aa:8c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56522ff5fbca88544b87a342fef78d1c91fcfddb
Validity
Not Before: Sep 30 09:00:43 2026 GMT
Not After : Oct 1 09:00:43 2026 GMT
Subject: CN=0e6885a87a4b05996260a4f6129e39bb5e1af42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:e3:d2:be:49:97:61:d8:3d:1f:41:f4:5a:
74:93:54:26:e9:80:40:3b:bb:c8:bf:c0:0a:60:63:
4a:9f:44:72:6c:c5:a5:2d:75:70:87:0a:35:1b:4f:
dc:bb:cf:a4:54:e0:0a:26:9f:65:ce:e5:08:69:88:
90:a0:c9:29:66:76:91:f7:47:1b:0f:aa:b6:ed:c6:
e8:19:08:3d:9b:7a:5d:7a:28:91:13:88:06:6a:17:
51:ae:5d:32:08:35:42:5d:00:45:3c:df:e8:b6:a3:
69:2c:35:3c:d2:6e:f4:ca:fe:4e:e9:ba:e2:83:ba:
6d:ae:16:cf:84:ca:ef:83:cc:50:58:1b:95:fb:fd:
ca:90:c2:64:7d:cf:ed:1c:10:eb:f3:80:48:e1:5d:
fa:bd:49:b3:75:88:75:04:55:26:9c:b6:c4:4c:fa:
ad:16:c2:b6:b4:bf:eb:a2:bf:5b:d3:6d:0c:40:fd:
5b:ca:9e:06:bd:b2:6e:f4:ac:2a:58:e5:ba:a5:47:
65:f9:45:6f:d1:c1:93:b8:94:f1:79:35:72:0d:78:
05:c0:d5:3e:43:43:db:a4:07:bb:20:0d:ae:ff:2d:
61:84:05:2f:39:6f:1a:7a:e9:3e:8b:a0:85:ec:ce:
36:ef:2d:49:31:43:2b:82:53:b9:91:a3:30:19:ca:
7c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:68:85:A8:7A:4B:05:99:62:60:A4:F6:12:9E:39:BB:5E:1A:F4:2F
X509v3 Authority Key Identifier:
keyid:56:52:2F:F5:FB:CA:88:54:4B:87:A3:42:FE:F7:8D:1C:91:FC:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e5:7e:f7:42:3d:18:b7:67:7d:d6:4f:b1:5d:1d:17:91:0e:
c3:30:0e:77:d9:d5:95:6e:37:e0:c7:69:b1:c1:f8:4f:62:36:
c3:79:5f:b6:5f:e7:51:e2:b0:c5:e3:81:59:51:9c:20:6a:98:
5c:39:a5:2e:ac:e8:1c:e6:0c:56:fc:82:f2:11:37:7d:ef:97:
56:0e:04:8a:85:9f:d3:01:75:19:7d:26:54:26:fe:4e:64:08:
17:9c:8a:bf:ae:9f:cb:18:0d:4c:e5:89:21:ab:e5:6d:7c:00:
64:0c:4c:0e:b3:68:e3:ff:19:ce:63:b3:8a:79:0e:28:b2:ca:
29:44:7d:76:5f:71:64:40:25:67:91:c6:dd:cf:0f:bd:8b:ff:
e4:48:b7:eb:c3:27:22:01:35:5c:b4:48:1f:b7:6c:3e:ec:87:
c7:11:80:05:ed:d7:da:87:c7:2b:2f:e4:51:bc:c5:31:9a:e0:
36:35:83:66:65:71:3c:7e:28:f2:61:98:b1:e6:fc:37:dd:58:
5b:4d:18:e5:64:e4:ab:02:8f:10:97:ae:ba:22:9f:fc:e9:e2:
f8:32:36:c5:b0:b2:15:d6:00:c0:da:0b:41:71:fe:d0:e3:b1:
42:fd:33:3c:7e:9d:90:4b:78:94:36:56:0b:04:84:60:cb:4e:
70:b4:f3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:10:41 2026 by rpki-client