
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier: IWJ2ume7jZmBow9l0MAvlCc1ISy0braihwadVKgzkgo=
Subject key identifier: 35:D3:0B:A5:B1:F3:F9:03:E8:53:DF:A4:B8:E0:73:54:43:8F:31:7C
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer: /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial: 01A0AC73CFA9FD710206F35BBF4E50D070E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number: 0654
Signing time: Wed 16 Sep 2026 23:01:05 +0000
Manifest this update: Wed 16 Sep 2026 23:01:05 +0000
Manifest next update: Thu 17 Sep 2026 23:01:05 +0000
Files and hashes: 1: j6hllAPOfjGlxSjPf2J6ZRdZpJo.asa (hash: U2oiN7OANfQlnqJQht1FjgSLsysseVC5VhtI3rsOfnE=)
2: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: jZVXB+/gtoFgilGBfd40UjM4cisTaJt3nWD1xp8wl4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ac:73:cf:a9:fd:71:02:06:f3:5b:bf:4e:50:d0:70:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Validity
Not Before: Sep 16 23:01:05 2026 GMT
Not After : Sep 17 23:01:05 2026 GMT
Subject: CN=35d30ba5b1f3f903e853dfa4b8e07354438f317c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:dd:78:1b:9d:c1:87:0e:ac:42:7f:cb:00:
d3:b4:b7:24:c9:ba:17:40:74:4f:1a:40:71:71:55:
11:ad:7b:41:f1:67:ad:cf:24:53:c0:eb:ca:a6:29:
05:a5:e1:47:c7:ec:97:58:b1:29:3a:6f:10:15:9b:
5f:8d:9c:8d:5d:25:72:94:6d:8c:36:13:b0:f1:ef:
da:12:22:0f:f7:d9:f2:4d:8e:81:f0:db:30:16:1d:
d8:d1:72:27:33:d1:f5:2f:26:bb:fa:35:88:1a:2a:
00:06:05:86:34:a6:ed:b2:e6:fa:b4:ab:61:7c:b1:
20:61:bf:d5:1b:1d:82:18:62:d4:55:f7:1b:4b:d6:
b3:b5:f0:93:a8:a6:76:e8:71:51:a9:9c:91:e2:ec:
7a:9a:a3:0d:cf:f9:80:7a:08:84:bf:d0:d5:34:eb:
c2:e7:a7:4e:d7:0e:29:5e:43:5e:ff:a0:41:44:f9:
3b:0a:7a:3b:dc:d6:0a:60:f1:f8:46:4b:ef:2c:ae:
71:fc:c4:c1:ad:41:d0:6d:5a:c9:5a:92:99:bf:8a:
b3:4f:37:25:d4:37:2b:78:05:70:05:89:4e:a9:5f:
b2:8f:31:fc:98:8c:86:01:73:07:54:60:e9:8d:5d:
f8:b6:77:02:2b:ed:63:1e:9f:5b:42:e9:ad:7c:17:
b6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D3:0B:A5:B1:F3:F9:03:E8:53:DF:A4:B8:E0:73:54:43:8F:31:7C
X509v3 Authority Key Identifier:
keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1a:2b:3a:56:c2:42:cb:ff:a3:a8:84:4b:7b:ee:d6:f7:06:
3e:e4:23:de:75:04:d5:10:07:97:56:27:e1:57:7a:33:68:68:
09:fd:4a:ca:c9:0d:f1:3a:b5:7f:dd:15:e9:ab:ba:c3:97:75:
ac:6d:50:c3:3b:9f:88:d2:ad:75:b1:94:4a:06:66:7a:63:97:
f0:3e:9e:eb:69:b2:b4:e0:3f:bb:3c:be:33:91:ae:a7:94:71:
f8:94:7a:e1:30:e1:7a:48:c3:21:e4:2e:a2:da:4c:f9:b4:e7:
91:07:1c:28:04:c8:2a:36:c0:af:2f:e3:e0:09:63:5c:68:3c:
dc:5a:5a:87:a3:cb:e3:da:57:24:44:23:28:d2:60:8c:8f:02:
79:00:f6:03:61:7a:6f:75:cb:a3:52:49:08:c4:a4:45:5b:7a:
31:02:2f:50:09:e4:32:47:47:bd:d9:72:7c:d6:69:58:09:fc:
e7:75:3e:4e:d4:9a:ef:6f:77:e2:0d:eb:85:c7:2d:6d:7e:34:
c6:bd:2d:55:35:fd:6f:71:c7:a7:63:fe:13:49:1b:bf:0d:41:
7f:d2:f0:8d:54:1b:06:29:b1:6c:95:f2:86:d3:ff:2c:d2:b2:
ff:28:bd:13:1f:4e:aa:1c:a6:04:f4:a7:97:b8:2f:00:f9:1e:
cf:0a:d7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 03:42:00 2026 by rpki-client