Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
File: vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft (raw, json)
Hash identifier: GDunLDRgLsdfSCvs48tR0w6MADKyTjL8mx9AhOEmtgY=
Subject key identifier: E4:75:5E:D3:80:A0:78:E5:C2:DD:65:3A:7F:2C:A4:86:22:FD:7D:67
Authority key identifier: BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
Certificate issuer: /CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Certificate serial: 01A0EC2EC2DA7BFF4187EE60D3238C331F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
Manifest number: 0A03
Signing time: Tue 29 Sep 2026 08:01:22 +0000
Manifest this update: Tue 29 Sep 2026 08:01:22 +0000
Manifest next update: Wed 30 Sep 2026 08:01:22 +0000
Files and hashes: 1: _fu8HVCzSvRt0NkeK2yjKWusuWE.roa (hash: vu5AFCJ2gOF+w3Dk+FLPIQg6RZau2UZ0AeeFgZPuej4=)
2: imlyuPj5F5_zGekGu7dPokpqSlA.asa (hash: XoiU9tHBQPgXDyIZK+nHfznEzCBRBvjsJG2xLG4W4n0=)
3: vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl (hash: gP0B33UGWCjIhB5Al0yAGfNqCEkjU3W/pi8PudL5GLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:c2:da:7b:ff:41:87:ee:60:d3:23:8c:33:1f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Validity
Not Before: Sep 29 08:01:22 2026 GMT
Not After : Sep 30 08:01:22 2026 GMT
Subject: CN=e4755ed380a078e5c2dd653a7f2ca48622fd7d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:75:9d:dc:8c:f9:b3:90:0a:6d:c7:36:17:
21:58:62:34:94:6f:c3:ff:c3:0d:b3:83:96:90:94:
88:5c:bb:d3:bd:89:35:ba:4c:2e:5e:59:0f:67:20:
86:1d:77:bb:ac:ae:ea:51:ed:21:2f:af:91:ae:9d:
61:e8:82:31:54:4f:e7:63:28:fd:71:2e:08:f3:8e:
99:88:d5:c9:e9:f2:17:cc:33:6a:c5:c5:42:e6:d6:
0b:2d:3d:7e:7e:30:5c:ae:83:7e:83:7d:a4:98:1a:
b9:0b:dc:1b:17:6f:01:c3:59:ce:51:bb:16:f1:a4:
7a:ca:71:80:39:6d:57:f8:f9:b2:da:8b:d9:b9:dc:
e9:f7:5e:4b:c9:11:83:49:c8:a4:8d:cd:47:b2:fa:
bd:af:9a:3b:13:12:2e:f2:ca:10:82:cb:6f:b6:fc:
ab:b2:90:58:55:16:c0:cf:0b:57:69:96:2d:a5:5f:
25:fb:bf:df:c5:82:dc:66:e3:8a:bc:65:3a:5b:18:
6f:e7:86:76:71:b3:7b:b6:d9:c0:1a:85:84:36:0b:
dc:4b:16:10:72:36:95:10:27:61:a4:40:e6:0d:10:
fd:d3:b5:a6:ba:28:0a:6b:90:92:f4:1d:9a:7d:b0:
41:c3:8b:fa:d4:8f:e4:b2:f3:27:f6:ae:9a:60:97:
f9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:75:5E:D3:80:A0:78:E5:C2:DD:65:3A:7F:2C:A4:86:22:FD:7D:67
X509v3 Authority Key Identifier:
keyid:BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f8:ab:9d:e7:37:8e:fa:36:9b:99:df:1f:77:05:2a:e9:a5:
1c:3a:97:8e:fe:a8:54:61:ea:5c:15:51:7d:7b:8b:e0:ae:53:
87:7d:c8:0d:b2:06:0f:4c:06:39:25:ec:83:cf:e5:d2:a0:13:
a1:a8:3c:c2:49:a4:8a:eb:fa:d2:87:7c:a6:d6:3d:df:b6:3c:
a5:b8:2b:98:1a:3a:ba:91:54:61:96:07:e6:7c:88:87:67:10:
80:33:f0:5a:15:2a:6b:e9:98:d2:a1:61:c0:c8:64:a3:53:4f:
97:1c:bb:44:8e:22:63:ea:dc:42:32:fd:3a:22:64:a5:97:e0:
ab:9f:d3:4b:c7:c0:e1:68:10:3a:a9:67:c2:7c:fe:ab:73:d7:
83:47:2d:11:c9:5d:16:f9:ae:21:f2:39:36:68:95:f4:9c:d5:
81:17:01:e1:4d:0f:fb:c3:d7:b3:4f:f1:77:0e:f6:26:41:c4:
0c:70:fa:30:99:51:ec:6d:4b:9b:9d:f2:61:6e:0d:ab:9f:78:
af:81:c3:21:c0:e7:cc:a4:94:50:ac:5e:66:75:47:06:58:13:
7b:80:eb:af:98:fa:e5:4d:88:03:5a:8a:9f:29:33:9a:6c:71:
9b:88:c4:3e:77:06:05:fb:d1:b7:e8:e7:55:b5:12:4b:4f:15:
e8:d9:a9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:44:53 2026 by rpki-client