Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
File: valtAqgi9GJTwq7mgEQdWsJ8PfU.mft (raw, json)
Hash identifier: yzKkw2atpjTX7ugkdRlRsJ4e6p+NsZFNLmGsJD+AoUs=
Subject key identifier: E2:B3:3B:1B:E1:92:B5:E1:40:98:F1:7D:0C:49:A0:D6:7B:08:A3:F0
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Certificate issuer: /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial: 01A12F8EA333981F26E5A1915817D9A51EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
Manifest number: 1AA8
Signing time: Mon 12 Oct 2026 10:00:39 +0000
Manifest this update: Mon 12 Oct 2026 10:00:39 +0000
Manifest next update: Tue 13 Oct 2026 10:00:39 +0000
Files and hashes: 1: EhydGNTB-hB89eN92UxIng6UVZM.roa (hash: gWjLjnj1fBxsYuib5uZNn6bhDyaTmXoH7T7zFvCCLkU=)
2: PEaB6XQK_JSckDUEH_ZUUvy4XJs.roa (hash: pHNbC9gTB8A25YDnRH1/ZymWlhpa8gI2FiyHFl3N24c=)
3: SdlkOvmWxZsG3lrNdu-_BWScGdw.roa (hash: BWpyRh5LY7eOyaK5XRYDUHQC4WOnoi30+STAR7V5gbM=)
4: kNnArX8rxSQizIzXcuK9nc5VM20.roa (hash: vhtZwmPY49vps0U0PvF9ig8qAqogrTdDowNB1/EB0pk=)
5: luTG1wEQoJ2CdlwrK7SvZ_P5LnE.roa (hash: mWrhQXIzFzzy6PXlxTLPkj0tx5iEbtFjzb8/vkv2Ot4=)
6: uKP8H6ExLgUqvBel-0TlMaMdYwY.roa (hash: u+LpsbOmzfoAEVZi4Pv4FxFv7TUs4TKRpLcI7uHwFcY=)
7: valtAqgi9GJTwq7mgEQdWsJ8PfU.crl (hash: ko5mSHZGulbEmHIcpE3rcKrNLwUBeEyHdtdbgwZbISc=)
8: vyQaTgnZmO6A2QP5fltvyAiHn2w.roa (hash: CuO+A8UIrEVOD42Zu4NLM0xT7n43WzFhoUCyh9EEw7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:8e:a3:33:98:1f:26:e5:a1:91:58:17:d9:a5:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Validity
Not Before: Oct 12 10:00:39 2026 GMT
Not After : Oct 13 10:00:39 2026 GMT
Subject: CN=e2b33b1be192b5e14098f17d0c49a0d67b08a3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:09:79:f4:c2:4c:01:1d:fb:56:81:4f:83:
54:2f:80:e7:5f:c5:a6:53:7e:73:37:57:54:ae:3f:
ef:0b:80:07:2e:55:4e:51:02:d2:96:ad:0f:33:92:
db:4a:67:d6:34:8f:f4:a8:2b:ed:5c:fe:d9:ea:69:
df:fc:8b:bf:49:5b:4e:1a:68:df:13:cc:a2:13:1f:
2c:57:15:7d:75:7e:0d:02:26:43:28:da:97:43:8b:
5c:d0:1e:1e:df:c1:74:6c:77:e8:ce:95:99:e3:85:
29:19:8f:39:e7:d9:7c:c5:8d:3b:81:94:f7:2e:30:
bf:d1:76:bb:2b:f3:14:9d:f8:73:57:4b:17:67:69:
9d:92:d2:db:3c:4a:58:94:a7:3d:c2:e8:88:5e:ba:
24:2a:10:cf:d8:0b:d0:f7:e2:89:19:eb:fc:c5:ff:
11:18:aa:ee:70:ab:cd:76:fd:c5:d3:cd:51:16:7f:
e4:94:0c:06:3c:8b:79:bc:78:94:e5:89:94:20:be:
b1:de:a8:99:27:d9:89:d5:9e:d4:d2:36:d8:ee:54:
23:3e:23:d0:25:57:86:1d:e8:0d:5d:e8:68:6b:17:
24:2e:75:a0:aa:08:32:14:11:c9:ec:1d:d6:c2:13:
06:1a:d6:9b:b9:68:8c:c6:fe:b4:ba:dd:a7:62:96:
d3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B3:3B:1B:E1:92:B5:E1:40:98:F1:7D:0C:49:A0:D6:7B:08:A3:F0
X509v3 Authority Key Identifier:
keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:65:62:20:dd:44:d3:e1:7b:1e:28:9f:d5:e0:f6:a5:5f:5d:
26:49:56:5d:a5:16:f4:7f:ca:22:9a:9d:da:00:73:4d:3b:fa:
5f:7a:9d:3c:19:2e:07:4a:5d:8e:3f:cc:7e:f2:5f:b6:96:03:
0b:ba:7c:bd:f1:46:22:9a:f4:2d:50:a2:40:7f:d4:be:1d:85:
37:ef:2a:f3:07:8d:40:4d:db:9d:2a:e2:31:e3:bf:dd:34:9f:
68:36:d1:9d:98:85:3d:e0:1d:13:55:d0:82:c0:12:22:d2:11:
86:d3:29:58:84:25:4c:d2:9b:c6:74:68:bf:4a:63:80:b0:59:
70:98:1e:0d:0f:9f:e1:a4:20:c1:97:e7:37:54:5f:40:59:fb:
16:e6:98:77:f6:c9:91:27:f3:c2:09:4b:4a:14:27:33:f6:0c:
ea:67:59:42:05:7c:19:d8:89:e2:e1:92:4f:4e:c9:ee:c6:e2:
48:89:93:f1:48:cb:3a:90:bf:bc:ba:e7:6a:14:21:7f:e2:f4:
bd:0d:67:da:99:db:54:b2:78:e7:04:d1:6c:d7:79:6b:a1:d9:
a9:4e:92:c7:ec:48:5b:00:fb:da:a5:3f:e8:b4:2d:72:34:68:
98:2f:6e:0d:fc:5f:5c:d8:f0:61:9d:7c:8a:52:84:e0:13:7c:
27:a5:fc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:27:38 2026 by rpki-client