Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier: aSl+RZp/id0nRSHehSSKaT9TuZdYgIt4oFDQcQ0mrzQ=
Subject key identifier: 9B:E2:93:2D:5A:1A:CE:F0:ED:3C:01:C8:E2:A6:E8:76:3F:47:01:20
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 01A08CB1FA5CFDF7296024749AA4F2885DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number: 19DD
Signing time: Thu 10 Sep 2026 19:01:09 +0000
Manifest this update: Thu 10 Sep 2026 19:01:09 +0000
Manifest next update: Fri 11 Sep 2026 19:01:09 +0000
Files and hashes: 1: 7w9615nIUak6j9qKBSemLYUs4lE.roa (hash: UXmWoVxNa8W/M8yy0s9ag8l2H1J69QCKdRwDtmWIJD0=)
2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: NhPzHfgCMeWUhuG1wtJ9QVGff310M7IsZ387htgu8ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:fa:5c:fd:f7:29:60:24:74:9a:a4:f2:88:5d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: Sep 10 19:01:09 2026 GMT
Not After : Sep 11 19:01:09 2026 GMT
Subject: CN=9be2932d5a1acef0ed3c01c8e2a6e8763f470120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:fd:d0:dc:be:b9:31:5c:b7:ff:d2:59:a6:
a4:b4:6f:cb:16:d5:69:18:96:a0:7b:68:d9:ab:f6:
b9:1e:b8:0d:f2:fc:d6:4b:48:85:ab:9a:b6:92:a6:
a6:c0:b5:29:2d:bf:94:94:dc:17:a5:9f:f7:92:b6:
85:9c:e7:00:22:7e:6e:c6:fe:38:a0:a1:21:6f:9b:
34:86:52:41:a6:28:08:06:be:be:42:a4:66:b6:50:
03:49:c1:cb:d9:41:9c:05:8b:4e:e0:87:cf:e1:2b:
26:33:10:38:79:03:1a:dc:8b:f9:f9:ba:28:3f:00:
fe:f9:c0:99:0d:29:45:bf:de:c8:f9:db:2a:f9:4a:
81:c9:28:90:77:e3:00:15:dd:3b:c1:f1:bd:98:00:
b8:46:38:ca:5c:ce:54:43:69:be:88:54:93:f4:50:
d9:59:19:23:5d:2f:7f:28:ef:14:16:25:db:c7:7d:
6d:24:b2:c4:00:70:3a:39:8f:25:04:9a:63:9e:6e:
b7:41:9b:0f:e4:ba:42:36:59:e3:5b:ad:ad:a6:49:
0f:d8:bb:6e:50:82:99:78:5d:77:dc:3e:f6:ee:51:
dc:c4:40:96:7c:74:d3:42:89:be:e9:13:48:97:38:
d4:43:47:98:e3:d4:90:67:2c:3a:31:ff:af:a8:67:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E2:93:2D:5A:1A:CE:F0:ED:3C:01:C8:E2:A6:E8:76:3F:47:01:20
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a0:e9:a9:72:6a:e8:73:0e:16:89:9f:75:8a:db:81:a9:de:
01:ac:81:be:d6:19:83:63:fe:b1:47:98:6a:fb:a9:8a:bf:7f:
74:74:ce:09:ac:19:77:89:84:28:0c:24:1d:19:ac:dc:2e:fb:
ae:b0:51:8d:a2:a1:fe:c4:80:a5:a1:ba:f8:dc:4c:f4:44:47:
7a:ee:9b:99:9a:a7:13:c0:31:73:17:86:62:5d:08:1e:e5:e6:
36:df:bf:4c:61:96:a4:42:3b:16:ff:b1:75:3c:fa:fc:ac:55:
2b:6a:2b:07:ce:c4:a6:20:c4:ad:56:88:ed:8e:32:2c:60:ef:
c6:bf:30:7c:f8:4a:2d:b3:fc:80:e8:21:bb:01:dd:17:b8:34:
03:fb:cf:e9:bd:5c:5b:4c:d1:1d:19:74:45:0a:10:f4:c7:43:
22:a0:31:bb:93:2b:c6:24:ab:eb:a7:a5:8a:5c:47:e2:d7:8c:
01:b2:d1:b9:30:6b:44:56:7d:64:59:6c:88:f3:f6:e2:03:e1:
fe:9d:bf:30:6e:db:40:c0:ab:61:2b:a3:ae:92:67:af:22:92:
08:aa:72:eb:b3:17:30:db:36:ec:62:96:2a:c5:3b:9d:4a:72:
25:6b:3c:88:05:4c:13:8d:f7:69:1f:4c:5d:dc:ec:fb:9c:40:
3f:f1:1c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:48:13 2026 by rpki-client