Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
File: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft (raw, json)
Hash identifier: 9qqWf+OCksjyU0+ZOpYZ21Fpb8QKuN9Ekf5Rtk5Ez1Y=
Subject key identifier: 9E:AB:73:50:87:F9:AA:F7:59:6B:45:A7:E1:94:9A:30:8C:6B:74:0A
Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
Certificate issuer: /CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Certificate serial: 01A06EDEB1A1E7BC1F69624E6E33DD71CC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
Manifest number: 1A3B
Signing time: Sat 05 Sep 2026 00:01:23 +0000
Manifest this update: Sat 05 Sep 2026 00:01:23 +0000
Manifest next update: Sun 06 Sep 2026 00:01:23 +0000
Files and hashes: 1: E-AZAYW2qhUsuxgQihaSy4RhoY0.roa (hash: l+7T0JWdCWQ5tKjG5dZn2DS4OH6HFvOG8YRDG8ncZNg=)
2: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl (hash: v9zS8OzIGLD2X+7wJB1L8EunK62Wk9TuxlrIiS5fhpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:b1:a1:e7:bc:1f:69:62:4e:6e:33:dd:71:cc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Validity
Not Before: Sep 5 00:01:23 2026 GMT
Not After : Sep 6 00:01:23 2026 GMT
Subject: CN=9eab735087f9aaf7596b45a7e1949a308c6b740a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:86:fe:ba:3b:87:ed:a5:e4:4a:6c:86:cb:
83:84:6b:d8:4f:4e:29:28:22:8a:73:cc:97:d8:32:
4d:df:56:82:68:b6:0f:61:51:53:14:4e:22:cb:a2:
9e:41:c9:67:0e:27:b1:9a:98:ed:db:ef:5d:5f:d9:
eb:82:8f:bf:40:5c:6f:3f:78:9f:87:17:9a:cb:fd:
16:2c:79:d4:fb:8a:99:40:3a:5e:95:7a:f6:ce:3c:
71:bc:0d:1c:22:ea:d7:3e:33:ee:8e:c7:64:69:2c:
1e:0e:58:14:f1:a6:a1:e4:c3:76:86:df:6d:3c:44:
63:28:83:47:f4:01:14:e9:68:16:9d:f1:da:48:48:
9d:89:8c:a9:bd:08:27:ad:3e:5f:41:6e:b6:d2:2b:
73:fd:3b:b4:f2:2a:84:c8:6f:9e:f1:52:aa:1c:f4:
ee:6d:c8:25:7c:6d:b9:5f:6f:4a:aa:a9:22:8d:3d:
09:c6:3b:d3:35:7e:ea:5c:54:a8:3a:cb:c7:fb:74:
db:b2:de:c1:82:a7:f5:48:74:f3:c6:cc:d6:05:29:
66:4e:14:87:18:53:1a:53:fc:91:f2:27:89:f8:8d:
c3:bc:1b:6d:c8:84:17:90:78:6d:a9:c4:e6:a6:24:
74:a4:53:f2:d9:5d:2c:47:73:5a:65:8e:4c:e5:cb:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AB:73:50:87:F9:AA:F7:59:6B:45:A7:E1:94:9A:30:8C:6B:74:0A
X509v3 Authority Key Identifier:
keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d0:fc:89:0d:ce:45:23:85:d5:04:5a:a8:d1:6b:3d:02:0a:
cd:c4:a3:28:67:62:d5:43:3b:fb:a2:7e:f7:fe:0b:b9:4c:eb:
27:c0:3f:5c:47:12:84:41:05:a5:bc:78:94:39:70:81:80:06:
e4:75:77:e1:ab:fe:50:4f:09:6c:db:18:e8:a7:bc:df:1c:08:
61:32:29:d6:5b:ad:02:76:87:2a:0d:e9:8d:6f:09:1c:f5:a6:
6c:a1:cf:32:fb:18:11:0e:a8:a2:13:3f:79:91:57:15:25:39:
39:d6:40:6f:c5:e5:2a:85:c6:d3:78:a1:45:04:d8:3c:e3:6e:
50:41:6c:6b:b2:2a:51:20:79:f8:16:a9:99:ba:62:52:b8:b6:
40:49:56:6e:9b:71:b8:a7:61:74:a4:26:ca:eb:13:b5:27:ad:
f1:91:e5:90:cf:0b:ac:a4:3a:5d:7e:7d:42:e9:06:f2:d7:ba:
9b:57:3e:50:c2:5a:3f:d7:3d:5b:f4:d4:8a:11:34:18:64:74:
92:93:28:b1:a4:f3:28:79:16:e1:5c:2b:eb:27:8b:88:dd:3d:
d3:09:74:40:70:fd:1a:49:16:34:47:52:33:df:16:57:0e:c2:
3a:28:bf:3c:a6:92:75:09:6e:f2:80:c9:ed:3f:d1:b4:1e:e3:
fc:ee:4f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:51 2026 by rpki-client