Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
File: v1vcQQat3onhzpwyuAeyCC67mUQ.mft (raw, json)
Hash identifier: LCk9vZdyFgscin/WNyYCO8uubWt/EIqcEdqmJjJeuDk=
Subject key identifier: 9F:8F:DA:5D:81:DF:7E:ED:77:AD:63:9E:C5:EA:C2:FE:C4:68:05:A1
Authority key identifier: BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
Certificate issuer: /CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Certificate serial: 01A08A8C2C4E8FBD19DE526B687D36FEE9E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
Manifest number: 1A46
Signing time: Thu 10 Sep 2026 09:00:37 +0000
Manifest this update: Thu 10 Sep 2026 09:00:37 +0000
Manifest next update: Fri 11 Sep 2026 09:00:37 +0000
Files and hashes: 1: 0jpOewhs5al4i2Un15buYjMlNLI.roa (hash: YIUbzKo2xMv9/Z1KjRiKTWnIZ7BfndO4Gvu0b8SDWI0=)
2: v1vcQQat3onhzpwyuAeyCC67mUQ.crl (hash: 6zNJuSvH9epSuj+gLz8NrBuMHvt4/lTQIoaz+BDCPZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:2c:4e:8f:bd:19:de:52:6b:68:7d:36:fe:e9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Validity
Not Before: Sep 10 09:00:37 2026 GMT
Not After : Sep 11 09:00:37 2026 GMT
Subject: CN=9f8fda5d81df7eed77ad639ec5eac2fec46805a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:22:3a:83:19:08:5d:98:a9:95:d6:68:f3:ce:
0b:13:94:92:6c:f9:dc:87:db:ee:8d:58:d1:a9:40:
fa:d0:ba:a2:22:e7:96:42:15:eb:bd:15:b9:08:b4:
30:4d:77:dc:4e:2f:42:44:65:48:ef:d6:e5:93:8b:
bd:9e:80:ba:00:b0:be:ea:aa:d5:79:87:d3:63:1b:
a4:46:0e:4c:3f:8d:fe:57:31:e5:54:c6:29:7b:e7:
28:9a:a2:6c:6c:81:87:0e:71:96:87:61:8b:09:e0:
90:29:88:8e:14:66:d5:84:a8:c9:e4:86:df:04:d8:
f2:9d:13:9d:fd:27:cb:35:b1:61:de:2f:8d:73:27:
d7:a7:aa:ba:6e:2d:c3:f4:21:3c:36:48:97:39:5c:
b6:5e:33:18:e6:18:6a:7d:7d:bc:bb:d8:b7:13:ac:
bd:91:22:7e:06:8f:0c:b9:82:42:7f:7f:69:07:da:
80:7d:03:c4:54:4f:f2:7f:b3:55:2f:ea:e8:d6:48:
d1:1a:c5:16:5f:17:92:7d:61:80:3a:c6:a7:16:21:
4d:e4:14:4e:6f:1e:d5:6f:95:16:99:5a:b7:1b:59:
e8:3c:f0:23:51:46:17:70:6f:f4:2a:0b:c7:af:d4:
ef:65:dd:84:56:3c:3d:d2:fe:b4:14:af:f0:5e:2a:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8F:DA:5D:81:DF:7E:ED:77:AD:63:9E:C5:EA:C2:FE:C4:68:05:A1
X509v3 Authority Key Identifier:
keyid:BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ac:fb:4f:50:ba:bf:1f:f7:a1:68:4a:6d:63:4a:b3:b6:5f:
c4:fd:cf:fe:43:df:52:fb:ee:5c:04:1b:70:11:dc:50:93:c2:
9b:26:45:62:33:b4:06:e9:6d:36:15:82:d6:58:ff:30:26:30:
74:45:8c:f1:60:4c:6e:39:59:c8:05:41:96:a1:68:94:d6:7d:
9e:e8:de:39:88:cd:73:22:97:c5:be:74:2e:03:e5:39:76:21:
ef:a5:26:11:d4:5e:56:7a:d9:3f:db:dd:ef:61:11:67:f8:6f:
c0:bf:1b:7a:8f:8e:9c:a1:ce:d5:ab:c1:a0:24:d4:bd:00:0e:
6d:1a:8a:03:ca:b9:b2:56:de:b9:7c:bd:bd:2c:16:ab:0a:e5:
87:25:37:43:be:32:db:d6:94:07:09:bd:3d:db:f5:08:84:a2:
52:a1:24:61:5a:4a:31:15:29:1a:b4:a1:1b:58:74:d7:1e:8c:
ee:0b:56:41:9e:03:f5:a4:25:57:33:08:0b:a3:ac:ce:c2:9d:
27:74:16:8b:92:f3:af:45:01:c1:ef:be:03:39:4c:5b:cd:07:
d3:39:55:2b:ab:ff:21:7e:82:1b:26:48:59:e3:63:81:ce:9a:
6b:72:b7:a2:6e:0c:1e:4a:09:25:3e:17:82:ae:04:dd:6b:68:
63:65:b8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:47 2026 by rpki-client