Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: 6kOJJz40dd0Zx/zvzrrDx7rX1sp8avkx5qbcky7DhQE=
Subject key identifier: 26:5E:5C:80:45:B4:F0:F9:33:BE:D0:A4:E6:6E:EE:BF:24:B0:08:AD
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 01A08A8D4D5A67516778450A8010B89417DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 09:01:51 +0000
Manifest this update: Thu 10 Sep 2026 09:01:51 +0000
Manifest next update: Fri 11 Sep 2026 09:01:51 +0000
Files and hashes: 1: 00NnGOjb0Kliq8h03PUkoF2V-mQ.roa (hash: VSJr4YxEOTSjkg/Ic9pjW8DLPur6HW+mqH3Z3+8+mfg=)
2: 7b8ozyWTjDv0dhZ7ua-y_cjPuyI.roa (hash: 38AuHkgBMFf7/nuVWCNssWlQtSQh16b1R73OJQ2+6XU=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: RsSphsS7X/aTtkNTHwLc6Fa8iWKYbDubsvjjaEskECQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:4d:5a:67:51:67:78:45:0a:80:10:b8:94:17:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Sep 10 09:01:51 2026 GMT
Not After : Sep 11 09:01:51 2026 GMT
Subject: CN=265e5c8045b4f0f933bed0a4e66eeebf24b008ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ad:cf:0f:e1:24:91:da:4f:f0:85:74:29:6f:
2f:51:87:f2:32:b5:86:8d:ff:85:bd:4e:cc:91:93:
3a:82:6b:19:ee:74:61:d7:fc:b6:2c:ac:97:ff:e9:
6c:1a:3b:cf:87:eb:80:94:30:fd:c5:b2:50:ad:17:
64:d8:99:9d:8c:e1:23:0c:6c:e9:29:45:d9:7f:79:
ab:24:49:91:dc:1c:ce:99:ea:9a:8d:c2:46:e7:d7:
3f:3c:ac:a9:cd:63:d7:50:0e:0a:bc:81:db:56:4e:
44:10:d5:3e:a8:99:d8:f3:42:5c:9b:db:6f:7f:b6:
0b:05:5d:bd:98:a7:7a:f5:09:1f:4c:d9:26:11:dc:
27:c4:98:15:e9:46:d6:47:27:52:bf:c7:4a:49:ad:
08:ff:25:9d:f6:97:4b:83:a3:9e:eb:85:ee:c0:0a:
aa:7a:0a:e8:6a:09:a8:35:44:fe:ac:03:72:d5:f6:
11:de:e8:a9:a5:86:83:96:ca:57:e6:da:34:02:db:
83:3e:d4:03:43:5e:35:70:26:3b:ad:74:a4:67:89:
01:38:2a:ac:33:02:89:a8:e7:72:f0:c3:d2:38:a9:
7b:98:4e:37:47:7e:6c:49:82:41:44:05:28:e3:77:
c0:38:00:a5:30:c8:ef:ae:61:41:07:e1:b7:96:74:
36:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5E:5C:80:45:B4:F0:F9:33:BE:D0:A4:E6:6E:EE:BF:24:B0:08:AD
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4e:87:a3:c9:24:55:37:7a:07:23:2f:a9:45:fb:de:0f:69:
cb:19:e0:73:9a:70:71:b9:8e:ef:3f:f4:0f:7c:d0:c9:a4:5a:
1f:fa:5b:b8:b4:9d:71:7f:2e:56:4a:27:66:c5:45:ac:76:13:
1d:0a:a6:7e:05:18:cf:2f:98:10:a8:21:3e:bf:94:d6:0c:06:
b7:a5:2b:4d:f2:93:09:57:04:00:e4:44:e6:12:7e:d6:01:ca:
b7:66:25:cc:e5:25:d1:d1:cb:1d:87:73:4e:8e:43:23:da:d1:
ea:95:2d:35:4a:dd:90:b2:17:dd:d7:30:77:bb:ca:3a:05:e4:
6a:73:2e:74:e7:90:77:d3:16:a9:cc:c8:cf:07:46:24:c2:d5:
28:fa:a2:42:f9:1a:03:d8:35:47:25:0c:31:34:33:6a:c8:26:
df:b1:ad:61:33:32:73:4d:6e:09:41:15:ef:dd:6b:7f:a5:3a:
b9:a1:88:a0:9c:50:5e:67:b4:f4:35:57:39:00:bb:3f:8a:d0:
d7:5b:cf:d6:a7:d1:b8:d1:b2:cf:f6:98:c4:8a:91:44:3c:6f:
93:ff:d9:12:33:6e:dd:93:18:b1:f7:99:c6:70:fc:4e:c6:7a:
fe:50:4f:cd:cd:ca:e8:83:dd:43:02:78:6f:46:ed:a3:c8:a0:
b4:f2:f4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:54:54 2026 by rpki-client