Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
File: VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft (raw, json)
Hash identifier: 7h0rEaMjmmeyGE6imp7r+OWNbwmBFgqFaPa1nXdv0+4=
Subject key identifier: 31:F1:44:58:7C:CB:66:92:39:0E:E1:EC:A2:5C:50:83:82:C6:C5:A5
Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964
Certificate serial: 019D22150DD867A30CB42C94D6E379D99715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
Manifest number: 06B9
Signing time: Tue 24 Mar 2026 23:01:38 +0000
Manifest this update: Tue 24 Mar 2026 23:01:38 +0000
Manifest next update: Wed 25 Mar 2026 23:01:38 +0000
Files and hashes: 1: UXXtGi4oxNDjahgVbsQFfeZIwU4.roa (hash: jdBHO4Fwd2CUANgRDo6QBZVoktY70KNazlVK3AC+4zE=)
2: VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl (hash: kleKicffOt2DdzOxqd/bC1y2cz4xiVjmsA0nIfsd9aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 23:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:22:15:0d:d8:67:a3:0c:b4:2c:94:d6:e3:79:d9:97:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964
Validity
Not Before: Mar 24 23:01:38 2026 GMT
Not After : Mar 25 23:01:38 2026 GMT
Subject: CN=31f144587ccb6692390ee1eca25c508382c6c5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:85:00:e7:c2:52:46:5c:68:0e:9d:3b:57:
42:8f:09:24:7b:dc:47:e7:00:25:28:cf:0e:30:ce:
a9:36:0d:40:6c:82:37:70:7c:e1:cd:06:08:47:48:
c5:28:6c:a9:90:fe:1a:10:16:81:3b:99:f9:00:0a:
fd:78:6d:82:c8:72:ef:9c:c1:e0:ff:1b:7e:bf:b5:
61:58:d8:5a:c9:68:f6:42:c0:b1:5e:26:d5:94:57:
ad:14:1a:a1:82:64:c8:69:63:2e:7a:92:ac:07:86:
ef:26:10:f9:86:1c:ce:be:64:5d:32:39:e2:92:9a:
72:dd:5f:fc:cd:b8:45:7b:e2:4f:16:cd:34:f8:bd:
3a:d7:fd:67:7c:f2:bb:9e:41:c2:45:f7:23:09:dc:
58:ca:f3:59:4d:a5:64:c9:5d:ab:95:63:43:a7:a1:
8a:37:72:b8:ef:4d:2e:f1:1f:a8:74:d3:4d:f1:cb:
d7:14:9d:61:0a:0d:06:55:a7:94:3f:ed:e4:53:ec:
f0:41:76:fa:3b:27:02:3b:e0:5b:f3:7a:18:ee:40:
75:77:29:8b:e0:09:9b:61:45:a9:9d:eb:d2:94:12:
ff:a1:d7:59:ae:b7:1f:b0:39:09:03:77:61:00:0a:
4d:fa:ea:b6:53:f8:6e:e5:da:cb:09:77:14:f0:77:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F1:44:58:7C:CB:66:92:39:0E:E1:EC:A2:5C:50:83:82:C6:C5:A5
X509v3 Authority Key Identifier:
keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d5:13:37:d9:85:18:e0:d1:17:49:f9:02:32:eb:97:8e:7b:
d1:f4:d9:fd:ab:7c:d6:13:90:c6:17:cb:10:18:0f:41:d3:e9:
75:bb:05:ba:3d:5b:cf:8c:5e:57:e0:a5:3b:0e:2d:31:a8:70:
b5:11:ac:3b:cd:09:b8:4e:da:23:e3:61:5a:25:f6:0e:6e:97:
89:de:8e:63:00:f5:21:0b:c5:83:5e:6e:67:d9:5c:bb:fa:6d:
60:03:44:7b:85:0d:ad:9a:a7:d0:27:ed:85:0b:9c:98:fb:f8:
7d:ac:cc:52:64:25:f0:f8:4f:22:95:16:46:a5:bf:21:7d:df:
48:a2:12:15:f3:44:18:30:7c:a8:45:a2:25:13:f2:2f:f0:e5:
28:e0:fd:4b:fb:2b:d0:20:1e:7e:5f:d8:fd:df:d0:a5:c2:c6:
ee:ee:e8:4d:48:7e:1c:30:73:57:2e:41:86:f6:42:f8:85:3d:
2f:67:34:c7:83:24:dd:3c:b8:0f:44:0d:e6:5e:1f:99:a5:dc:
25:cd:68:9c:69:04:5d:d6:bd:e1:68:3f:e4:8e:5d:6d:58:c7:
9d:1f:7c:7c:5c:bf:54:06:fe:99:5d:32:8f:81:2f:93:c0:da:
02:6a:59:ab:c8:1e:a7:ec:6f:8b:dc:11:35:40:c3:0e:de:1a:
9c:13:f9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 09:55:03 2026 by rpki-client