Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft
File: rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft (raw, json)
Hash identifier: K2ysySKcF6zLRO3JMPY+VxcqXTYYDQCNDNHvDo+FI98=
Subject key identifier: 91:86:4C:E1:64:B7:0A:B9:50:1C:B4:42:B1:20:43:55:6B:2D:CA:EE
Authority key identifier: AD:5C:E5:53:00:60:70:FE:08:03:70:AD:FB:94:4E:D2:9B:7D:94:11
Certificate issuer: /CN=ad5ce553006070fe080370adfb944ed29b7d9411
Certificate serial: 01A08BD60B7D3F8972A2DA130A5F0C4496CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft
Manifest number: 0133
Signing time: Thu 10 Sep 2026 15:00:55 +0000
Manifest this update: Thu 10 Sep 2026 15:00:55 +0000
Manifest next update: Fri 11 Sep 2026 15:00:55 +0000
Files and hashes: 1: Di2m4-5_QDl5Rldoh59q9lj5dCY.roa (hash: GNTOuw95a8w2YtoMmrRI/JIWU21DxcdrGmYPu8oxIao=)
2: rVzlUwBgcP4IA3Ct-5RO0pt9lBE.crl (hash: TBt61b/dT3QLwSb10NK9Nf0yVFMvhjmIhi78XVxJ390=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:0b:7d:3f:89:72:a2:da:13:0a:5f:0c:44:96:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5ce553006070fe080370adfb944ed29b7d9411
Validity
Not Before: Sep 10 15:00:55 2026 GMT
Not After : Sep 11 15:00:55 2026 GMT
Subject: CN=91864ce164b70ab9501cb442b12043556b2dcaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b5:63:a4:7c:dc:d3:4c:28:eb:b7:f9:54:6a:
63:08:cb:e6:43:64:e8:16:18:48:7d:fe:f4:ad:a2:
23:c7:de:28:0f:07:b3:ad:fe:1f:b0:2c:39:4d:c7:
03:17:94:45:72:a6:01:77:8f:e0:d7:db:40:78:c3:
82:d4:dd:9e:16:3f:51:3a:1b:a8:7d:94:0f:77:81:
84:a2:1d:dc:b3:ef:45:ff:77:c4:85:25:ee:bc:62:
e2:29:31:39:47:96:12:16:0a:04:4d:c5:57:c0:1b:
6f:fd:11:4c:4a:b5:27:ca:c5:85:d1:66:f1:15:a1:
52:d5:4c:44:7d:9f:46:20:39:63:e1:13:49:31:7f:
7c:7e:32:27:24:02:6d:06:62:36:33:6b:9e:c9:42:
7b:34:89:00:7c:cc:5c:92:fb:af:8a:95:b8:64:8f:
aa:62:9c:b6:0a:0d:f7:1c:1a:eb:3b:cc:9a:48:40:
8f:6d:08:99:88:26:68:e0:9b:a9:21:c4:3b:c0:a5:
b6:e1:62:0e:d1:37:72:e6:61:b8:4b:19:ea:ae:13:
62:0f:73:ae:26:cb:32:34:ef:99:63:22:34:83:d7:
fc:88:69:16:46:e6:f1:ac:22:d3:d4:d9:dd:0b:9d:
b6:89:b7:4d:65:e9:f6:6a:08:4f:71:26:3b:1b:39:
29:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:86:4C:E1:64:B7:0A:B9:50:1C:B4:42:B1:20:43:55:6B:2D:CA:EE
X509v3 Authority Key Identifier:
keyid:AD:5C:E5:53:00:60:70:FE:08:03:70:AD:FB:94:4E:D2:9B:7D:94:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b7:8d:96:0c:7c:a7:d9:70:bb:34:e5:cd:9e:02:03:1a:7b:
8d:2d:6e:8f:ed:68:e8:19:b1:2b:18:5a:e9:9d:fb:b9:17:be:
11:09:eb:c4:2d:a5:e0:54:bf:17:80:0b:15:11:2d:a7:93:84:
15:f7:58:52:23:c1:2f:cb:f0:cf:8c:e0:23:4e:82:fb:cd:2d:
1a:01:75:4d:e7:4a:ed:68:a5:4e:bf:e0:71:35:23:2f:46:51:
63:a4:45:1a:d2:41:c6:ed:21:06:b4:f6:6c:5a:ac:c0:92:34:
f8:a5:0b:25:7f:6c:ed:a6:14:31:c0:cd:1c:26:06:4d:9c:a4:
a3:6f:d6:83:db:64:55:6f:44:fd:29:f4:55:55:23:5e:d9:be:
fd:4f:4f:53:4a:cf:10:28:b3:1b:88:2b:1a:bf:7f:66:d1:ea:
58:c4:e7:a6:89:8f:09:0b:9e:86:25:dc:39:e4:42:ce:76:e3:
70:b2:44:06:9d:93:79:d7:33:94:78:b3:8c:bf:69:a7:c1:91:
39:d7:eb:7b:0e:6e:36:74:4b:1f:7e:57:60:6c:5f:e2:ae:ad:
9f:f0:78:06:af:68:e4:94:98:cc:66:02:c0:36:bd:1f:08:cc:
51:e9:59:b8:e5:01:d9:a2:f0:d1:d5:01:b1:2f:ea:7b:51:1e:
c3:e6:ba:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:20:50 2026 by rpki-client