Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier: /CEMXl2C0aaT6E2khhpm5p6JUFkRD6YajwPvuEsphs8=
Subject key identifier: 71:22:61:E7:70:41:D3:0D:3B:A6:87:E0:E8:74:E2:65:25:54:9E:B8
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 01A11C3EDA6B70F2286C641B14B73ACA2DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number: 1A26
Signing time: Thu 08 Oct 2026 16:00:43 +0000
Manifest this update: Thu 08 Oct 2026 16:00:43 +0000
Manifest next update: Fri 09 Oct 2026 16:00:43 +0000
Files and hashes: 1: 2HdBpWh-50_goW8h6khUnhcxRKk.roa (hash: 9TImXcQ/0dWYKklrZF5PPoqL8egVUtFJy8Sg7tiR7+A=)
2: MoJrBXKuH1WW-h36SgH6MXEtMuw.roa (hash: 27UYuMl5BsEFFPa19TTObdCXrf6pW5VozM0WcapM9K8=)
3: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: fzQAKtBuKHV3CIMNwe+vldc/JXwO1Hfb2OSq6iaU3BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:3e:da:6b:70:f2:28:6c:64:1b:14:b7:3a:ca:2d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Oct 8 16:00:43 2026 GMT
Not After : Oct 9 16:00:43 2026 GMT
Subject: CN=712261e77041d30d3ba687e0e874e26525549eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:38:fa:f1:99:cd:c0:5e:bb:4d:40:70:e8:
c6:51:a5:90:9f:a0:34:d7:4f:0f:1e:44:b4:b6:55:
2f:3d:ed:b1:f8:e6:c1:6f:8f:14:32:5d:9a:02:08:
eb:81:58:d5:63:be:7b:2d:70:77:2c:42:88:47:dd:
a4:3c:6e:7e:e3:71:8c:a9:34:d2:a0:91:2e:47:c1:
68:b9:1c:88:40:de:a7:c5:e1:c6:d6:61:fb:97:d0:
b0:d5:db:85:70:be:96:22:91:b3:83:cb:eb:e1:73:
e2:36:40:7c:a0:5b:b1:e6:3c:54:2d:f4:d2:a4:3a:
6b:04:6e:9d:25:99:60:55:ad:fa:24:b5:84:59:57:
b7:f6:82:95:0c:8d:ba:a3:64:af:41:4c:bb:e2:1d:
8e:b5:85:7c:b4:1f:d5:c3:15:0d:89:54:1f:7e:6d:
28:4c:53:b9:4a:f7:6d:fb:bb:9f:a2:b1:c9:a6:df:
a0:e0:a6:d7:ec:5c:2a:10:93:4f:3c:cf:64:2d:63:
1a:58:13:c0:07:09:ee:26:c1:86:90:d1:d2:0e:f5:
8a:78:2a:7f:b5:22:9b:83:74:e1:0d:d5:f6:22:25:
e2:ec:97:67:c4:46:8e:ea:19:9a:d0:7f:26:36:7e:
34:60:e0:64:fe:b4:ae:3f:1a:ef:a5:b5:f9:04:b3:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:22:61:E7:70:41:D3:0D:3B:A6:87:E0:E8:74:E2:65:25:54:9E:B8
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:92:68:cc:62:8a:4a:cb:f1:b0:36:03:10:ed:fe:c3:31:d4:
f8:f6:63:b1:58:da:40:37:d6:cc:da:08:9b:5c:d2:ad:1b:11:
0d:c0:b5:2d:36:4d:98:28:5a:7c:c8:c7:46:66:bb:55:61:e8:
5c:a1:b2:fd:23:5e:32:50:24:03:84:d1:60:9d:d4:a0:78:ba:
46:c4:9d:43:ad:34:e5:04:13:65:87:5d:0a:0a:27:c1:13:8a:
bc:1e:39:23:8e:31:67:5b:d7:44:68:9c:80:be:30:7b:57:69:
ed:9f:b3:41:d8:48:f8:b7:2a:86:48:76:9e:4c:70:b6:b9:79:
9c:02:2d:c1:79:4c:7e:20:91:b5:ec:17:c0:db:b5:12:e6:0e:
ea:7c:38:95:d5:d0:a2:7c:38:17:4d:7a:9e:f7:e8:c5:9e:0c:
59:b0:3f:b2:a2:04:46:e4:f2:e2:0a:78:19:93:b9:c7:39:cc:
06:fb:8c:3e:e6:b2:ba:8d:95:d9:f1:95:1b:95:24:45:99:b8:
9b:5d:37:4c:ce:58:95:4c:5c:46:43:07:7e:1e:e3:b7:a0:5b:
6d:f9:b9:59:09:72:57:da:c0:bd:dc:36:d4:8c:0c:61:91:54:
3e:8f:6a:51:59:52:d7:6b:30:e6:2f:5a:3a:2f:9b:b5:9b:03:
52:f9:87:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:56:03 2026 by rpki-client