Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier: mTIfvH1c3Q2ulY2unL0dXXpxISWNMPEh+JlRv0YBzhI=
Subject key identifier: F4:A7:47:F3:9C:B1:0F:DD:A9:CE:BA:94:C2:7B:48:F3:EA:25:2B:A3
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 01A1220A88AF46C3E5D4F182746516640329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number: 1A29
Signing time: Fri 09 Oct 2026 19:01:17 +0000
Manifest this update: Fri 09 Oct 2026 19:01:17 +0000
Manifest next update: Sat 10 Oct 2026 19:01:17 +0000
Files and hashes: 1: 2HdBpWh-50_goW8h6khUnhcxRKk.roa (hash: 9TImXcQ/0dWYKklrZF5PPoqL8egVUtFJy8Sg7tiR7+A=)
2: MoJrBXKuH1WW-h36SgH6MXEtMuw.roa (hash: 27UYuMl5BsEFFPa19TTObdCXrf6pW5VozM0WcapM9K8=)
3: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: +H+FGXH7GxYdqYJCbd0ogBn9s4mBmUm1GXGsskP3r0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:0a:88:af:46:c3:e5:d4:f1:82:74:65:16:64:03:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Oct 9 19:01:17 2026 GMT
Not After : Oct 10 19:01:17 2026 GMT
Subject: CN=f4a747f39cb10fdda9ceba94c27b48f3ea252ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:ab:98:df:87:ca:dd:d3:11:c6:35:32:8b:
46:0e:35:44:2e:f6:c9:12:1e:48:34:62:36:3b:5d:
b9:3a:1e:89:67:d4:78:4b:aa:99:9d:14:d8:da:4c:
3f:bf:de:42:e6:14:fd:77:fb:b8:77:f5:50:6a:eb:
35:09:bb:f9:0b:4d:c6:19:57:2d:a2:1c:71:27:56:
c8:be:8a:e7:33:f8:89:55:bd:f4:3a:c7:b5:14:28:
d8:57:1d:82:76:51:d5:26:23:3f:24:3a:2f:f9:e3:
4d:9f:0d:f0:67:c2:8d:3c:bc:06:03:9d:fc:a4:5e:
2f:57:8c:4e:30:fb:8c:d6:e3:f7:7f:97:7e:c3:a0:
f1:be:e9:77:8c:19:76:c8:19:94:8f:4e:d5:9a:50:
77:b3:4c:02:20:3c:dd:17:7a:ac:d3:9d:b7:95:bf:
13:c8:2b:ca:f8:97:7d:9b:4f:75:4e:56:7a:c8:b0:
a1:aa:24:62:bc:90:35:2b:6b:6e:27:34:91:52:17:
ae:27:6f:a0:da:4f:13:09:ed:8d:dc:f6:82:33:5e:
8b:9f:2a:18:01:25:b9:1a:10:6b:aa:11:8d:30:85:
bc:81:ed:89:f0:37:3b:84:5c:f1:31:43:19:ef:f3:
cc:9f:c6:81:90:a4:fd:6e:44:9a:15:96:a0:3c:c4:
05:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A7:47:F3:9C:B1:0F:DD:A9:CE:BA:94:C2:7B:48:F3:EA:25:2B:A3
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ed:01:88:8e:df:02:3c:80:fb:9c:ae:3c:62:37:21:95:ad:
7e:a1:96:c7:d3:47:06:af:19:50:08:e6:e1:87:ac:76:9b:6a:
f4:c4:f8:df:da:3a:e4:88:41:27:39:31:5a:34:08:ab:5d:06:
d0:f1:75:21:c2:e5:b0:bf:0d:ba:0e:46:5b:c6:ab:a7:32:56:
71:83:ee:8e:61:07:9e:1d:96:ba:22:c0:2a:c1:54:36:14:8c:
c5:7c:5e:73:80:ef:51:76:f3:60:28:67:a1:8c:1d:c5:ab:1c:
04:d5:3c:79:b2:e5:9a:61:e5:fa:0c:e6:93:7e:0d:5b:96:26:
b5:4f:bf:82:56:3d:8a:ce:39:1c:af:c8:b3:b7:d8:90:d3:6a:
f4:0a:ae:db:ac:06:c0:32:2a:b4:06:c8:93:86:0c:99:e5:8b:
28:58:f6:ac:30:52:86:c5:49:21:66:21:e1:60:ef:bd:54:f8:
33:18:37:02:0a:76:a6:e5:a2:03:81:a2:8e:91:a7:25:93:88:
a7:23:04:1b:01:ad:67:b9:e8:1b:17:3d:a7:1e:7f:03:33:d7:
7b:48:97:7b:e8:74:cf:f7:13:c8:4d:5a:b3:38:bd:5d:be:39:
b4:5c:8f:24:13:6a:57:eb:51:28:16:81:27:c7:05:85:4c:26:
58:5e:30:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:17:09 2026 by rpki-client