Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
File: valtAqgi9GJTwq7mgEQdWsJ8PfU.mft (raw, json)
Hash identifier: 0N0z4XOEj/sZAVOT78ABRZERWKq5TAGOGElo6edB5P8=
Subject key identifier: 16:EE:42:52:36:95:F8:64:D6:EB:1F:EE:E4:1E:89:27:67:3D:55:DA
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Certificate issuer: /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial: 01A1201C59B68547F05261435E7F87BEF59A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
Manifest number: 1AA0
Signing time: Fri 09 Oct 2026 10:01:31 +0000
Manifest this update: Fri 09 Oct 2026 10:01:31 +0000
Manifest next update: Sat 10 Oct 2026 10:01:31 +0000
Files and hashes: 1: EhydGNTB-hB89eN92UxIng6UVZM.roa (hash: gWjLjnj1fBxsYuib5uZNn6bhDyaTmXoH7T7zFvCCLkU=)
2: PEaB6XQK_JSckDUEH_ZUUvy4XJs.roa (hash: pHNbC9gTB8A25YDnRH1/ZymWlhpa8gI2FiyHFl3N24c=)
3: SdlkOvmWxZsG3lrNdu-_BWScGdw.roa (hash: BWpyRh5LY7eOyaK5XRYDUHQC4WOnoi30+STAR7V5gbM=)
4: kNnArX8rxSQizIzXcuK9nc5VM20.roa (hash: vhtZwmPY49vps0U0PvF9ig8qAqogrTdDowNB1/EB0pk=)
5: luTG1wEQoJ2CdlwrK7SvZ_P5LnE.roa (hash: mWrhQXIzFzzy6PXlxTLPkj0tx5iEbtFjzb8/vkv2Ot4=)
6: uKP8H6ExLgUqvBel-0TlMaMdYwY.roa (hash: u+LpsbOmzfoAEVZi4Pv4FxFv7TUs4TKRpLcI7uHwFcY=)
7: valtAqgi9GJTwq7mgEQdWsJ8PfU.crl (hash: 3o5VZT2kzgPgKE/5cRU9U+PHeRQSHhm7xhUzp8erlFo=)
8: vyQaTgnZmO6A2QP5fltvyAiHn2w.roa (hash: CuO+A8UIrEVOD42Zu4NLM0xT7n43WzFhoUCyh9EEw7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:1c:59:b6:85:47:f0:52:61:43:5e:7f:87:be:f5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Validity
Not Before: Oct 9 10:01:31 2026 GMT
Not After : Oct 10 10:01:31 2026 GMT
Subject: CN=16ee42523695f864d6eb1feee41e8927673d55da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:e0:c7:cb:b9:e0:8d:16:b0:69:47:32:71:
8c:4f:2b:10:b4:24:8f:43:91:dc:05:8e:07:51:cb:
2d:09:dd:17:c7:da:c3:2f:15:83:16:de:96:14:79:
bc:d5:70:32:4b:01:f3:8d:68:c7:75:21:b3:a5:b2:
1f:b6:12:f2:4a:75:52:70:43:a5:ec:7f:d9:d3:6a:
5e:a1:a8:c3:81:80:2c:f9:b3:af:3e:38:69:22:5b:
08:7e:cb:cd:f4:15:19:4f:70:08:21:a3:c0:9e:d4:
dd:67:a9:10:b6:9a:43:47:e4:f3:69:e7:49:7b:7b:
97:9d:7c:86:a3:2c:0b:77:d9:3d:f9:f2:72:97:e8:
b8:48:9d:ce:f6:8e:4d:68:aa:8b:94:07:f0:69:f6:
ff:6f:ab:ff:01:2d:53:73:cd:f5:be:6f:bd:8c:e9:
5d:2f:66:ce:42:54:cb:3f:bf:57:c2:77:83:fd:9f:
44:da:47:d7:2c:1f:13:41:e1:9e:a9:d5:f2:2f:2a:
40:c5:8e:95:f5:33:02:1f:ac:11:2e:aa:a1:76:40:
3c:49:4b:17:4c:25:a7:e2:27:24:5f:4a:a6:e3:ae:
b9:79:e3:9b:7f:5d:00:cd:07:ba:c6:17:f3:da:c8:
5e:9c:e2:2a:8e:8e:05:89:56:71:54:bf:62:ef:9e:
a9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EE:42:52:36:95:F8:64:D6:EB:1F:EE:E4:1E:89:27:67:3D:55:DA
X509v3 Authority Key Identifier:
keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ae:ac:a5:d8:00:22:4f:e8:ec:bf:ca:d6:77:b8:fb:fa:87:
81:92:20:42:03:a1:6e:5a:60:c4:e3:aa:cd:ee:eb:27:e7:be:
50:14:d2:31:39:fe:0a:dd:a7:0e:4a:cc:67:a3:5a:a6:7e:ac:
14:d2:3a:c3:17:44:a4:bd:11:fb:15:1e:f6:7d:fd:4f:24:e3:
78:de:0b:c9:41:74:cc:94:84:8b:95:44:e6:0f:30:34:fe:f9:
50:d3:87:e1:e1:0e:b5:42:c8:f1:64:bb:a7:85:3d:f8:3f:61:
74:ba:75:f5:f0:65:e0:5a:d5:d8:6e:0e:2d:4a:2d:cb:b5:f6:
c0:72:04:4c:cb:1b:b3:8b:33:69:cb:f9:c8:c9:2f:db:c4:8a:
c8:4f:a8:d1:ca:19:a7:d6:e0:d1:1c:7d:7c:cf:e6:5e:32:47:
c7:2b:95:6e:b0:01:b1:11:5c:6e:87:1b:8e:95:1b:cb:84:88:
40:e7:30:5e:10:35:6b:c7:43:75:7b:b0:e0:cd:11:ed:75:28:
fb:ac:ba:c0:90:be:8f:bf:a0:76:96:3b:cc:e8:f3:d1:11:3b:
79:27:2b:77:1e:50:4e:d1:09:9a:51:3a:4a:c1:2a:19:24:5d:
fd:41:7e:cf:14:33:b7:24:1c:de:78:68:c5:21:a3:73:cf:28:
52:17:81:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:44:39 2026 by rpki-client