Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
File: vyk4WQ4NABlyVmLUtK5Myew6c00.mft (raw, json)
Hash identifier: OseH6jEwkxIHLJCJQB+ZbdU6jTLivVGoEXs55m7YrOc=
Subject key identifier: 9D:59:8E:B9:4F:EF:C0:6C:56:88:AB:E1:D4:7F:86:3E:E8:B4:DF:0F
Authority key identifier: BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
Certificate issuer: /CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Certificate serial: 01A08B3151296F10B1882BE9D90E50BC0B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
Manifest number: 0CE7
Signing time: Thu 10 Sep 2026 12:01:00 +0000
Manifest this update: Thu 10 Sep 2026 12:01:00 +0000
Manifest next update: Fri 11 Sep 2026 12:01:00 +0000
Files and hashes: 1: 1ct-Ix4vqSryVTwpOe2dk96HqOE.roa (hash: ZHQYlnog1xkIVPDyJbvsnZ9amnNHU1IoPvRVcPKPYG8=)
2: vyk4WQ4NABlyVmLUtK5Myew6c00.crl (hash: kJxvtw1yADNtYgG6M6thPtm3zDhJtB0c6AvPvhGBpQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:51:29:6f:10:b1:88:2b:e9:d9:0e:50:bc:0b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Validity
Not Before: Sep 10 12:01:00 2026 GMT
Not After : Sep 11 12:01:00 2026 GMT
Subject: CN=9d598eb94fefc06c5688abe1d47f863ee8b4df0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:10:25:a3:bc:6d:16:11:e6:e3:87:6e:ed:
d8:7c:de:e2:d7:70:c1:3b:d0:06:98:57:43:92:2c:
2a:b3:f2:c3:1c:ae:60:bf:0c:31:34:be:ff:bb:91:
fc:8e:05:f3:e9:7d:d2:bd:d0:85:9c:9e:94:0c:f8:
37:72:ee:80:06:9e:b2:70:11:19:9c:84:39:09:1f:
a4:25:42:f8:f8:58:79:a5:d6:f8:e3:b8:fb:2e:50:
68:6f:56:61:d7:84:99:a7:1d:22:ab:1f:f1:5a:9a:
fd:d1:28:20:76:f0:3a:0f:24:39:6b:f9:c8:01:97:
92:60:eb:92:64:31:56:dc:27:01:13:58:af:cc:57:
df:0e:b1:29:36:2d:d7:18:fa:ef:8d:0c:08:89:3a:
58:52:5b:71:2d:ba:15:7d:47:9a:23:61:a2:ae:72:
b4:12:f6:09:cd:fd:a4:bf:25:ad:c0:69:da:a9:fd:
0a:a4:b4:fc:32:d1:a0:47:b1:9d:56:6a:c8:b7:37:
bd:62:0c:3f:1b:d8:5e:05:eb:ae:6e:ed:46:e2:ca:
2b:50:d5:aa:c7:63:8e:c0:00:2c:c7:0c:45:10:f8:
0b:28:0a:c5:7f:af:1c:9b:ff:23:48:b7:ce:dc:d8:
b1:4f:ba:98:c0:6b:74:24:3e:6c:e0:d7:b9:9b:5b:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:59:8E:B9:4F:EF:C0:6C:56:88:AB:E1:D4:7F:86:3E:E8:B4:DF:0F
X509v3 Authority Key Identifier:
keyid:BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:18:03:09:5b:ef:b1:cd:61:42:9a:2e:9e:47:43:e4:b4:11:
90:61:09:1a:73:f3:ff:cd:cd:28:29:ed:2a:ca:01:87:c6:7c:
e3:23:6e:a0:9a:83:4a:03:16:8f:ae:08:94:45:f6:8c:c7:61:
0b:43:59:f1:90:69:f6:c6:09:d0:82:b2:c1:d2:1a:4b:96:a4:
b9:3d:9f:32:64:10:73:a4:e1:0b:8d:c6:58:4f:d3:3f:f6:94:
d7:0d:46:73:d4:7c:78:58:71:b4:d2:3f:b6:60:1a:b3:78:ba:
63:13:66:59:41:af:78:e8:10:27:60:79:2d:39:a5:46:ca:f1:
5c:ee:68:5c:38:fd:f4:b5:fc:7d:77:ac:74:09:91:3c:91:96:
d6:c8:92:15:ef:2a:8e:fc:1a:8a:af:b3:ab:a8:d4:ff:97:d6:
ea:c5:08:9c:d1:15:7c:31:3d:7a:38:8d:40:0f:fe:a5:82:3c:
75:05:b2:c0:2c:e9:8e:7f:87:3d:db:0b:f3:a5:ed:6a:37:b8:
86:7d:c3:8a:3a:2c:0a:5f:46:60:5e:e3:f5:e6:91:45:b0:e0:
d7:a8:0d:5c:b6:80:a7:ef:52:f2:3b:6f:2a:66:19:13:d6:d0:
29:bb:b5:18:45:47:ff:74:48:4c:30:57:b2:42:54:5a:b2:ac:
9c:23:5c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:32:27 2026 by rpki-client