Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
File: VvciqIWr65qv-zLadk7wkbWyA0A.mft (raw, json)
Hash identifier: eJFwhtUZ7N/W5+vfbJPULrnUjRv8jPnJW4XY3hQ59Dw=
Subject key identifier: D1:4C:C1:74:B6:CE:FD:90:65:75:5A:62:5F:8E:04:1F:8F:20:CB:E5
Authority key identifier: 56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
Certificate issuer: /CN=56f722a885abeb9aaffb32da764ef091b5b20340
Certificate serial: 01A13824537C0BEB1BC23BB5118A73F213AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
Manifest number: 0DC3
Signing time: Wed 14 Oct 2026 02:01:07 +0000
Manifest this update: Wed 14 Oct 2026 02:01:07 +0000
Manifest next update: Thu 15 Oct 2026 02:01:07 +0000
Files and hashes: 1: GIndhU8ELmsNHmG9wjRWuLwz2bs.roa (hash: PQMP13AMPNG5zd/gezY6JmA04bcuMNJCFye1nndg+RI=)
2: VvciqIWr65qv-zLadk7wkbWyA0A.crl (hash: 8AiFf2OTdaYwYflAwhB+djW7joETlBXimSiuA83YOeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:24:53:7c:0b:eb:1b:c2:3b:b5:11:8a:73:f2:13:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f722a885abeb9aaffb32da764ef091b5b20340
Validity
Not Before: Oct 14 02:01:07 2026 GMT
Not After : Oct 15 02:01:07 2026 GMT
Subject: CN=d14cc174b6cefd9065755a625f8e041f8f20cbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:02:37:d2:71:76:d9:b0:91:c4:5f:d5:2e:
0b:d7:08:ef:10:08:5a:33:84:c5:06:d4:12:ab:70:
78:0f:81:08:d1:f7:5d:41:7f:d1:34:ba:bd:af:77:
0e:3b:79:ed:3b:71:5b:5f:08:c3:05:1c:b7:40:5f:
b7:7d:ec:9c:47:85:96:ea:2f:f8:51:be:e6:e0:20:
fd:10:11:6a:14:5e:89:21:0e:32:1d:f8:07:e9:58:
7a:88:cb:3a:59:bc:9c:bc:8c:57:c7:18:fe:ee:ae:
d7:02:6b:e1:b3:9e:90:35:c2:0e:c1:72:61:e9:58:
eb:27:f3:00:03:b9:2b:a4:aa:a7:51:e1:31:7e:59:
4d:41:33:28:29:a2:95:6f:a8:24:33:77:c9:a1:e9:
03:ff:69:7f:ba:86:c9:33:67:5c:af:9d:a9:6a:a5:
5b:47:77:5e:4c:c6:f5:72:86:1e:46:1b:2e:1d:8b:
f2:2c:de:83:fa:ac:e9:e4:4e:90:c3:3a:c8:ef:ce:
83:12:43:05:68:5f:38:d1:c7:64:93:f8:42:28:f5:
4a:20:dd:0d:0b:48:f7:f6:75:05:21:53:c6:7d:74:
1a:c4:81:d3:11:d8:a3:e4:19:b3:50:65:57:ae:0c:
4d:cd:b8:5e:88:7f:1e:d8:83:7b:3b:e3:a5:52:14:
fd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4C:C1:74:B6:CE:FD:90:65:75:5A:62:5F:8E:04:1F:8F:20:CB:E5
X509v3 Authority Key Identifier:
keyid:56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:1f:47:2e:a0:3c:e5:83:88:28:18:85:7d:a5:e7:8c:f9:ef:
ef:de:ba:f1:5c:75:aa:c6:7d:b1:ed:69:1b:fc:21:65:2d:82:
dc:72:86:17:9f:fb:11:0c:4e:62:17:94:b1:a9:75:67:e5:e7:
d2:91:21:ea:d4:19:d8:2c:b7:97:87:83:cd:c0:83:a8:7f:9c:
91:97:14:80:35:e3:95:fe:2d:22:c4:0c:99:31:d1:58:6b:63:
c2:1a:14:39:a0:37:cb:66:06:30:52:c9:57:82:e1:f4:b1:7e:
9f:ee:b7:e0:61:65:94:b1:37:9d:ff:e6:ad:f9:24:74:2a:a3:
23:cf:f8:05:42:42:bb:fa:a0:4a:69:97:13:f3:0f:ac:2a:45:
6a:bb:0d:8c:38:a7:f5:f6:a7:5a:0d:dd:51:31:97:d3:fc:0a:
8f:b4:ea:17:b7:61:28:1e:25:9d:ea:a9:f2:12:40:50:42:37:
3d:89:8a:62:c2:2a:d3:6a:f7:79:93:49:f6:40:10:15:16:0c:
84:59:07:c4:7d:e2:ec:f2:9f:0b:d5:10:aa:a3:c6:a4:e3:bb:
d5:31:9e:94:84:d0:b0:3a:25:1f:00:51:e8:2d:77:fd:60:03:
3d:f9:3f:71:00:69:2f:55:a4:a0:c1:72:2e:81:43:fe:7a:82:
e0:f8:ba:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 07:29:00 2026 by rpki-client