Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
File: VvciqIWr65qv-zLadk7wkbWyA0A.mft (raw, json)
Hash identifier: CMfkjakvwVRdFjC60uUsTmEssteXXcXWTXXMC9est0k=
Subject key identifier: C2:08:4B:65:21:16:74:65:CB:F2:D8:DE:FD:75:3C:50:48:6B:DE:32
Authority key identifier: 56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
Certificate issuer: /CN=56f722a885abeb9aaffb32da764ef091b5b20340
Certificate serial: 01A126C318ABCDCC286080B7443FA54CD9DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
Manifest number: 0DBA
Signing time: Sat 10 Oct 2026 17:01:22 +0000
Manifest this update: Sat 10 Oct 2026 17:01:22 +0000
Manifest next update: Sun 11 Oct 2026 17:01:22 +0000
Files and hashes: 1: GIndhU8ELmsNHmG9wjRWuLwz2bs.roa (hash: PQMP13AMPNG5zd/gezY6JmA04bcuMNJCFye1nndg+RI=)
2: VvciqIWr65qv-zLadk7wkbWyA0A.crl (hash: VmMQ2orYJ2g/Z0vzKnn81EiQ38769P5mL+WgpMGZoR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:c3:18:ab:cd:cc:28:60:80:b7:44:3f:a5:4c:d9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f722a885abeb9aaffb32da764ef091b5b20340
Validity
Not Before: Oct 10 17:01:22 2026 GMT
Not After : Oct 11 17:01:22 2026 GMT
Subject: CN=c2084b6521167465cbf2d8defd753c50486bde32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:16:99:27:77:a2:e6:7c:04:bb:91:32:26:85:
a2:b7:2c:be:b9:60:b0:47:c5:8d:06:a8:f8:20:79:
18:e0:71:30:33:50:76:e7:63:93:d9:f7:94:7e:21:
40:d7:d5:22:b0:0c:7f:7d:39:95:9e:be:a6:d7:67:
ef:95:b8:13:92:5c:96:5d:ef:50:53:73:6c:7f:42:
52:a7:fa:ea:dd:13:58:fb:c8:bb:7b:0e:83:ba:31:
24:d6:6c:2e:66:62:04:50:d1:6f:f4:a0:fc:0b:3d:
01:62:84:42:b2:27:b3:39:1e:98:fa:84:23:93:1e:
78:7e:5b:31:b8:78:ef:0e:f0:9b:0a:03:3a:b0:63:
44:9c:bc:38:6f:86:f4:2b:31:bd:ba:96:d6:3d:32:
fe:ae:6c:3b:03:0d:41:68:2c:4c:01:42:ac:07:44:
1f:58:bb:28:13:ae:23:19:76:c7:40:15:27:7d:48:
7f:ef:23:e6:87:8b:9d:31:e4:2e:4b:04:d0:1d:f3:
e7:ef:87:67:a4:d8:7c:87:92:27:dd:e7:00:e9:e8:
e7:f7:c7:50:d5:08:7d:fb:d8:fc:43:70:b1:d3:35:
e9:f9:c2:6d:b6:68:b4:c0:e7:8e:15:d8:1f:16:76:
73:03:74:34:d8:df:e9:61:94:51:e5:d7:4d:11:e4:
c8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:08:4B:65:21:16:74:65:CB:F2:D8:DE:FD:75:3C:50:48:6B:DE:32
X509v3 Authority Key Identifier:
keyid:56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:25:f9:14:a5:bc:84:8e:0c:9d:c9:0a:54:63:d1:5f:54:29:
e7:1d:a9:30:ea:c4:92:ef:2f:a8:eb:ea:8f:ee:24:23:05:ba:
de:98:13:bd:b9:46:00:fd:e6:52:d6:10:fc:de:0c:a4:c2:04:
5a:fa:0f:3d:fd:bd:8d:9c:2d:a7:19:67:65:65:29:8c:f6:5b:
49:15:4e:b8:32:c2:e0:f7:0e:cf:8b:05:5f:37:9e:85:ec:7f:
3e:ea:ec:74:39:b9:ad:27:11:12:48:5c:ce:91:7e:a9:24:54:
3e:97:c0:dc:9f:78:69:28:2c:bc:fd:61:8e:3a:41:74:76:2e:
7c:d5:ce:b9:42:67:e0:84:a0:87:31:9e:98:9c:81:87:90:a9:
fa:ef:10:65:e2:21:95:95:84:e6:dc:d6:84:13:d9:0a:9a:9e:
53:14:78:0f:53:6a:99:bc:e0:c3:82:6f:b9:11:7d:b2:09:f4:
74:64:b8:71:8b:ba:a4:08:5d:44:56:2e:c6:b6:f9:e5:0d:01:
dd:b9:08:6d:8f:0c:8c:5c:77:64:30:e8:4f:87:91:35:6d:93:
62:c0:60:15:8c:f9:de:7e:74:3a:8a:38:51:41:0b:ee:7b:98:
41:42:70:fb:dc:42:5d:79:27:a0:a6:30:d8:fa:c7:71:70:de:
cc:4f:50:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:29:40 2026 by rpki-client