Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
File: vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft (raw, json)
Hash identifier: j0qwdmgoJR2SzcGLv24Of6y6rod6rVxoe/kmgnEz2ug=
Subject key identifier: 89:1E:BC:24:26:82:64:7C:05:CE:5C:70:56:E2:CC:39:DE:1C:62:F3
Authority key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
Certificate issuer: /CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Certificate serial: 01A05968AC494CF0DCEF9720DB4586DA3482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
Manifest number: 1A31
Signing time: Mon 31 Aug 2026 20:00:27 +0000
Manifest this update: Mon 31 Aug 2026 20:00:27 +0000
Manifest next update: Tue 01 Sep 2026 20:00:27 +0000
Files and hashes: 1: vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl (hash: n9n8lD7hAICPe54eaceZRas+R/321CxD6EXHiGS7+fo=)
2: zzDkvJaiRpsmi6O7kaXorv8G2lo.roa (hash: U4Wz/U8KhaG7QlShrJHjPRkbJ49L12u0oJF2UhXulFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:68:ac:49:4c:f0:dc:ef:97:20:db:45:86:da:34:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Validity
Not Before: Aug 31 20:00:27 2026 GMT
Not After : Sep 1 20:00:27 2026 GMT
Subject: CN=891ebc242682647c05ce5c7056e2cc39de1c62f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:0a:3b:94:3f:39:8a:f0:e6:ef:81:93:53:
5f:48:a4:cc:66:92:73:47:24:02:18:d3:3e:0e:5b:
b4:32:2a:25:93:2c:9e:df:b8:fb:14:a8:da:b4:af:
14:41:0f:5b:f2:b3:98:73:c6:20:0f:1e:fa:46:1e:
c3:43:6c:72:82:92:28:e8:24:61:19:b1:7b:e2:bb:
7e:60:f6:9f:30:88:9d:e7:91:6b:35:45:f3:22:31:
26:0b:65:e3:00:13:56:a9:f4:e5:38:66:d3:57:29:
5b:c8:48:33:15:5a:52:40:12:5c:7f:79:f7:88:f6:
12:5e:46:bd:e7:a2:cc:5a:df:9e:1c:09:13:97:90:
7f:f8:5e:02:f9:2d:00:16:40:1f:dd:3a:af:7f:76:
15:f5:e3:fc:55:3e:12:57:8b:ad:bf:c2:47:f0:6a:
22:23:fa:c7:2d:da:20:dc:d9:fe:f4:5c:c6:39:6c:
c5:d1:c5:4b:a7:15:4a:42:aa:70:8a:da:76:70:dc:
b6:5f:b1:d8:fa:c8:f6:25:54:0e:d3:55:47:89:34:
ad:20:23:10:cc:84:4d:e7:d7:02:18:06:ac:f1:d5:
86:62:b4:21:a7:4b:90:c1:01:eb:a2:ec:46:27:1b:
ed:41:fa:a2:72:6f:f3:f5:05:37:38:da:d5:e7:56:
1c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1E:BC:24:26:82:64:7C:05:CE:5C:70:56:E2:CC:39:DE:1C:62:F3
X509v3 Authority Key Identifier:
keyid:BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:98:4b:54:28:15:58:37:bb:71:3f:91:d5:77:af:25:94:7c:
0e:a2:fa:8b:81:0a:d6:c9:97:c4:a1:d8:6a:d2:93:28:43:f7:
c4:a9:1d:2a:28:35:f9:6a:9a:b0:42:89:d8:1e:33:92:38:44:
c1:1a:9a:78:ed:ea:85:73:9c:51:55:83:f5:cc:63:02:ef:fd:
ef:f3:ac:93:79:27:9d:33:5f:d1:06:51:c7:9b:4a:99:db:6c:
43:ee:91:82:93:d9:74:a8:4f:1f:b6:ed:b2:72:21:f4:25:a9:
2a:e2:11:f0:7c:80:29:ea:9e:ab:8d:bb:16:87:d3:fc:52:38:
96:2d:5b:ad:94:79:47:7e:9e:42:c7:88:29:48:2c:25:ce:34:
5c:97:3d:fb:65:37:57:bf:80:8c:51:b2:9b:8c:60:14:1c:b5:
40:00:6c:be:ba:e7:d7:3a:e6:58:d2:5e:c2:3b:ae:6e:4b:33:
cf:b3:16:80:5d:45:27:39:e7:2b:bb:ff:30:7b:cd:37:64:2f:
87:94:5a:e6:9f:de:85:13:39:7e:55:ca:f4:c5:4f:b6:2a:bf:
64:10:54:89:db:1a:11:c2:b8:a4:d0:15:e8:16:b7:ce:3d:12:
6c:a6:24:5f:84:47:79:7d:10:48:fb:b8:f7:af:43:1e:70:a1:
df:43:55:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:57:51 2026 by rpki-client