
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
File: Vr1_at_sbUTRbT4_eY4_K9INo_8.mft (raw, json)
Hash identifier: iztkUV3yZujp7yh9tD1sgvgvgE9/FB1hbFT3+cxIPBo=
Subject key identifier: D3:45:2C:80:B5:A0:DF:4C:D9:F2:E8:17:94:E4:84:F0:31:E2:E5:D6
Authority key identifier: 56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
Certificate issuer: /CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Certificate serial: 01A12FFCFE31D654936DD59E43D6388555EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
Manifest number: 1A9D
Signing time: Mon 12 Oct 2026 12:01:11 +0000
Manifest this update: Mon 12 Oct 2026 12:01:11 +0000
Manifest next update: Tue 13 Oct 2026 12:01:11 +0000
Files and hashes: 1: TvG3Q6EJi73UFGx8HGDQbEV3WNc.roa (hash: Qu2IYNlx3K5ylZfshukrlEjDYd3s5hf2xdzeBfabSNs=)
2: V7ODURGwxz4tURBL4H9BoCPbplc.roa (hash: lDSKkdtVb6mF6CecrHvF/q0QF6YgykJ09spaIwO99EU=)
3: Vr1_at_sbUTRbT4_eY4_K9INo_8.crl (hash: yz4nGs3MHKP+YJXIA7pu65AhbqAvGA0n6/yVLJPbI44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:fc:fe:31:d6:54:93:6d:d5:9e:43:d6:38:85:55:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Validity
Not Before: Oct 12 12:01:11 2026 GMT
Not After : Oct 13 12:01:11 2026 GMT
Subject: CN=d3452c80b5a0df4cd9f2e81794e484f031e2e5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0b:38:59:64:0c:37:b0:3f:36:56:b4:73:21:
d3:8b:76:27:d1:5c:33:06:cb:cc:85:fc:0d:3a:a5:
42:6a:af:dd:01:17:cc:5d:3f:75:f9:e6:4e:b0:f8:
31:8e:0c:b4:60:9f:4f:6e:f3:42:e7:d2:89:9c:e4:
97:74:2e:d2:78:78:fb:9b:30:f5:22:b6:81:a4:e5:
3c:83:be:ee:6e:76:1a:89:bd:2b:62:47:71:fb:ce:
cf:cd:d0:ad:77:8c:7c:7d:cd:23:6f:cd:c2:13:26:
2f:7b:28:dc:1c:c3:8a:bc:6f:3b:47:02:72:ea:66:
8a:ea:f6:46:55:84:ad:2f:c1:a3:5a:3f:f8:fc:df:
0a:bd:bf:f5:81:2d:04:74:0f:87:92:98:e6:78:60:
4e:13:d3:99:c4:71:99:32:4a:ca:b1:bb:ef:e8:14:
0e:a4:c7:c7:c4:96:5c:b1:61:d9:5a:ce:18:44:1f:
a0:f3:dd:ec:89:99:92:aa:5a:85:e1:98:47:5a:46:
c4:0b:a7:b9:00:8f:95:bf:aa:cf:aa:de:27:85:78:
b3:cd:4b:18:3c:12:72:44:a0:23:bb:41:d7:ff:2a:
ee:bc:ea:02:bb:1e:8c:e9:62:ee:17:ee:d0:9a:2d:
ad:2c:51:d2:1b:b5:41:98:92:de:c0:ef:fc:5e:99:
83:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:45:2C:80:B5:A0:DF:4C:D9:F2:E8:17:94:E4:84:F0:31:E2:E5:D6
X509v3 Authority Key Identifier:
keyid:56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5f:66:5e:b2:b7:76:2a:a0:18:f2:7b:34:59:84:d8:67:a8:
3a:ce:46:41:f5:2c:a9:ce:c5:0b:8c:1b:ae:9d:8f:60:77:9d:
17:f3:66:bb:9f:6e:c1:1f:16:17:4d:06:93:1b:45:1a:8d:bd:
73:02:57:8b:6f:ca:71:55:21:c6:51:e2:ca:7f:02:a0:0c:13:
4d:85:55:78:eb:52:38:46:59:a9:a2:60:9c:46:bc:fe:5d:4b:
af:56:b8:64:ea:61:11:94:3d:f8:dc:01:f4:67:4a:ba:07:ce:
cb:77:86:1a:65:8e:e1:ed:95:ec:4d:6d:30:c2:93:5f:5a:f9:
d7:1c:69:c4:6d:17:ff:a6:f2:97:ab:6e:89:3b:10:ad:46:6b:
db:af:71:04:b9:09:b6:db:84:07:32:f0:c8:d0:43:90:e0:a9:
39:99:83:0a:60:81:9e:c5:d0:f4:4e:4b:13:65:77:8b:22:6b:
39:d1:4c:27:4d:5d:26:84:94:bd:a8:54:6f:81:17:2d:2c:cf:
3e:c5:82:99:73:17:29:b8:6d:f3:29:3d:dd:c6:2c:c1:39:65:
7e:fa:98:2a:a3:52:12:bf:be:06:05:05:22:9d:ea:d0:78:e5:
b8:a5:84:d4:3c:b2:3e:f7:70:53:fd:f1:cd:76:25:94:d6:6c:
cb:22:95:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:48:06 2026 by rpki-client