Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
File: vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft (raw, json)
Hash identifier: uak8ZCkhu9ryZfvmuVdxru8NK6/VfCIEi7utmjSXalo=
Subject key identifier: 46:AC:14:17:62:3F:F6:DC:54:13:6C:00:21:F8:03:CB:80:BB:72:B2
Authority key identifier: BD:73:23:20:47:E9:F9:70:1D:81:F7:11:BC:73:D5:DA:7B:FA:13:52
Certificate issuer: /CN=bd73232047e9f9701d81f711bc73d5da7bfa1352
Certificate serial: 01A08A55D8957C2C3F32BC9DC54E81CF2278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 08:01:16 +0000
Manifest this update: Thu 10 Sep 2026 08:01:16 +0000
Manifest next update: Fri 11 Sep 2026 08:01:16 +0000
Files and hashes: 1: AU8OktUluDemDAVdWC4o1rs1CnY.roa (hash: RjEeTRpnG44Tfxlx6Pp88uWbFbQRVFzej/AZva1uDPU=)
2: Xwqqp3SPpvDNyBAEMp0e_66cQro.roa (hash: tn/0MbER8l+l1ARfId/kyPTPuy7cjy7LSRHD6/peBik=)
3: vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl (hash: 5Xe6ytLTMPxsKlCYjAqWM274kzWV4ZqkDwBruL/mdsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:d8:95:7c:2c:3f:32:bc:9d:c5:4e:81:cf:22:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73232047e9f9701d81f711bc73d5da7bfa1352
Validity
Not Before: Sep 10 08:01:16 2026 GMT
Not After : Sep 11 08:01:16 2026 GMT
Subject: CN=46ac1417623ff6dc54136c0021f803cb80bb72b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:e1:36:07:5b:1b:86:4f:3d:a6:69:7a:67:
be:d7:79:16:10:d1:d0:34:07:87:83:6d:21:af:c8:
a5:7d:90:51:4f:ed:c0:0f:6f:0f:7c:d1:0e:df:32:
88:45:6f:e6:03:61:4b:8e:b9:95:43:19:93:28:91:
21:e3:89:99:68:24:cd:ed:81:93:19:4e:2d:c6:49:
99:97:8a:d0:76:fa:80:c0:7a:63:4d:c0:b8:7b:00:
c0:70:8e:c1:b2:50:61:77:ce:3c:c6:fd:01:36:f1:
5d:e1:02:56:c7:2e:44:9b:bd:62:2f:a7:a2:07:2b:
97:fb:53:70:d2:54:11:05:52:b1:af:e9:92:62:a4:
29:41:77:54:9f:91:d1:21:42:bc:73:cd:10:42:64:
50:d6:b2:b4:92:a2:31:4f:6e:e0:2e:4e:bc:a9:0c:
78:68:db:41:cc:ec:26:e7:03:ad:8b:ca:7d:b1:48:
9d:80:76:36:b3:d3:40:77:62:3d:2f:46:0d:f8:e4:
11:50:9d:65:89:07:28:34:32:95:ef:bb:2b:6c:40:
d2:61:50:33:34:9e:21:3c:e7:dc:dd:8b:8f:c8:a1:
6a:37:ca:5a:cf:24:0c:dd:6a:7e:a8:f4:dd:f1:83:
48:37:a4:3e:f8:32:3a:ac:02:6d:84:04:6e:8e:1b:
b6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AC:14:17:62:3F:F6:DC:54:13:6C:00:21:F8:03:CB:80:BB:72:B2
X509v3 Authority Key Identifier:
keyid:BD:73:23:20:47:E9:F9:70:1D:81:F7:11:BC:73:D5:DA:7B:FA:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2e:0d:f8:e4:52:2c:0e:cf:fb:5b:48:05:63:64:e1:29:92:
52:6b:53:2a:fe:14:06:91:69:2a:08:f8:42:cc:d5:49:f4:ba:
9f:54:7d:87:5d:57:0c:89:58:f2:30:ab:e6:66:08:8b:55:aa:
fc:38:e0:0e:18:ac:08:b2:7b:39:0b:1f:94:47:d1:c9:b8:d5:
ab:62:1d:7e:dd:35:ca:d2:74:85:fb:60:92:be:f6:5e:ec:d9:
fe:f1:78:88:b5:d9:2c:ad:58:ef:29:e9:b2:3a:70:89:af:01:
2e:ff:a5:ce:da:ce:4a:55:e2:ff:ed:68:30:6c:dd:23:27:3b:
46:c6:ad:a3:79:b1:e7:11:cb:ba:23:fc:bc:7a:10:2c:92:45:
61:19:e3:ea:9d:bc:2b:0b:a8:ed:3a:62:ec:8a:a0:2d:3f:04:
06:0d:43:b0:eb:d1:56:b6:39:c0:75:6e:7a:bd:b7:ee:5d:69:
8f:75:a2:70:cc:e5:36:b2:74:b7:2d:5e:03:8a:3a:32:8b:4c:
4b:91:a1:3a:7c:9e:6d:e2:98:29:9c:73:2c:d4:76:c6:aa:f0:
a4:1e:81:8c:37:12:1e:36:27:5a:26:d9:95:43:4b:09:b1:f3:
23:a7:a2:15:ce:5e:bd:39:be:1f:05:40:e0:17:c1:d2:ac:1a:
9d:1a:56:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:18:44 2026 by rpki-client