Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
File: 1-VA8B1ppBVa9RiEiskaZ4baxkng.mft (raw, json)
Hash identifier: +V0yVcBcu7BKhSkcwshP2Zj+ySKNAA0tV7VU8S5HvK0=
Subject key identifier: AD:A3:75:A9:D1:01:9B:DC:65:E8:C0:A0:5C:24:DD:89:94:E3:BD:33
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial: 01A140839F4A7E641EFF53E6F02CE43D5C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
Manifest number: 1AAF
Signing time: Thu 15 Oct 2026 17:02:10 +0000
Manifest this update: Thu 15 Oct 2026 17:02:10 +0000
Manifest next update: Fri 16 Oct 2026 17:02:10 +0000
Files and hashes: 1: 1-VA8B1ppBVa9RiEiskaZ4baxkng.crl (hash: xV+5T72Y6UJSkfF47OdqKEj4SbAZbPb0kel+B2x3Gns=)
2: otcWIKtbjTrCyo_84vs3wowbaF4.roa (hash: 9VlMOAnXc/ATSpTaKuPtGHL4kHOHZKRnHkwF61ZvPSY=)
3: v_SLn6w6l2mgjrQ3LaZ3RbLwH3w.roa (hash: iLCA29fFNiihWmOcKz9zvu1/0ED29J1vmWFbLXrkxSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:9f:4a:7e:64:1e:ff:53:e6:f0:2c:e4:3d:5c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
Validity
Not Before: Oct 15 17:02:10 2026 GMT
Not After : Oct 16 17:02:10 2026 GMT
Subject: CN=ada375a9d1019bdc65e8c0a05c24dd8994e3bd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:0d:cf:27:a9:8c:83:79:ad:70:87:36:e1:
7f:4f:5e:d0:04:b0:a1:17:c2:c1:13:5d:62:e7:6f:
b0:1e:3b:3e:68:af:ee:07:7a:50:46:64:21:dc:60:
b5:cc:0c:28:60:d9:a1:bb:63:3a:62:a5:aa:3f:69:
88:de:79:88:26:d0:ff:44:d2:52:73:14:b3:c0:8d:
ec:d6:a8:18:2c:d7:7a:7e:21:e5:a2:b1:89:ab:b0:
97:8a:70:8c:79:1d:fc:da:1a:c6:83:41:58:e1:7c:
a1:6f:4b:a4:77:f0:2f:90:2a:43:84:ce:c6:48:f1:
cd:6c:d8:f7:d6:77:9e:30:fc:ee:99:a5:0f:78:4a:
b4:28:b1:d8:13:ee:3b:5f:13:94:8c:48:4a:d9:b3:
f9:ba:e2:96:96:df:a9:8e:9e:f9:de:20:fe:ad:30:
f5:c2:ae:59:4f:2c:94:14:ac:95:9a:82:1e:55:d1:
5e:00:25:95:bb:c3:e0:61:99:b7:32:64:67:b6:81:
4e:da:ed:38:48:57:52:26:aa:70:13:84:80:59:08:
c2:6b:71:d2:39:75:77:0c:3e:d2:52:ce:f4:28:76:
bd:ff:63:94:04:11:56:fd:95:eb:8a:a7:b0:4f:54:
8d:a0:c5:92:2d:06:9a:fa:ed:0d:db:8b:3f:36:88:
3b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A3:75:A9:D1:01:9B:DC:65:E8:C0:A0:5C:24:DD:89:94:E3:BD:33
X509v3 Authority Key Identifier:
keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:bc:7c:e9:fd:38:5c:9c:d6:d4:b0:13:48:79:1b:b0:ca:b1:
99:5c:ca:57:ad:33:c5:33:a4:b8:aa:04:5c:02:d7:3e:36:d9:
28:9b:d5:ec:a1:c6:71:a7:a1:86:58:8c:6c:e6:0b:8c:6d:bb:
d3:3c:4b:3f:20:fc:4c:f8:27:e8:1f:e1:a4:d4:d4:2b:1f:50:
e5:b6:ed:37:2a:b0:71:bf:d6:bb:0f:e9:6f:ac:9d:d0:8f:5b:
a4:e9:bf:90:06:9d:ee:78:60:83:ca:22:7b:ca:68:35:98:ae:
e9:e5:a2:38:d3:a3:c8:9f:92:db:65:31:87:a0:d3:64:7b:5c:
53:7c:d0:ed:a9:59:e0:4b:9d:ea:1c:7c:d8:35:82:6e:88:be:
06:e3:3a:99:ba:c9:ec:e8:25:74:8b:90:84:00:db:c3:9d:81:
d2:3a:6f:b6:40:79:dd:06:f4:e6:e0:ca:fe:5b:85:60:e0:35:
c5:92:f6:4c:d0:91:3e:56:4c:dd:3b:22:0f:a0:0c:57:70:80:
59:2f:5c:2b:97:18:02:81:c6:a4:36:cd:59:2a:1e:5d:2c:b0:
f8:eb:90:1f:18:a4:fd:92:ed:44:78:86:07:b2:1e:7a:53:d4:
72:e9:d7:9d:9a:a8:31:d6:e6:ef:cc:f6:76:5c:fd:c8:25:f7:
08:19:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:48 2026 by rpki-client