Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
File: VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft (raw, json)
Hash identifier: 099iW+azfzjCWIE9zrWgVYj+gLnnIiUV20VeTjzXMMs=
Subject key identifier: 40:2C:56:EA:7D:5C:1B:E2:7A:2A:F7:40:B0:F7:AE:6B:98:85:14:C8
Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964
Certificate serial: 01A117F475D012936C5B0CC8FB689A4EB676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
Manifest number: 08C6
Signing time: Wed 07 Oct 2026 20:00:59 +0000
Manifest this update: Wed 07 Oct 2026 20:00:59 +0000
Manifest next update: Thu 08 Oct 2026 20:00:59 +0000
Files and hashes: 1: UXXtGi4oxNDjahgVbsQFfeZIwU4.roa (hash: jdBHO4Fwd2CUANgRDo6QBZVoktY70KNazlVK3AC+4zE=)
2: VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl (hash: LZO2qie0bxFTD7u5ykqT7p6dBFIrpqpYeDfRiosoqw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:f4:75:d0:12:93:6c:5b:0c:c8:fb:68:9a:4e:b6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964
Validity
Not Before: Oct 7 20:00:59 2026 GMT
Not After : Oct 8 20:00:59 2026 GMT
Subject: CN=402c56ea7d5c1be27a2af740b0f7ae6b988514c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:c3:67:00:9b:72:83:e3:82:ac:be:73:59:
55:1d:3a:cd:b6:fa:e8:67:ab:bb:67:b2:ee:94:7e:
7b:be:e9:eb:3a:63:fe:b5:10:41:69:09:12:d3:f8:
a4:b2:4c:ff:c6:6a:24:13:9c:b0:9c:31:cd:2c:0e:
4d:b1:43:43:28:29:5d:b3:f6:5a:c5:63:96:ba:07:
c1:06:98:74:f2:b4:aa:d5:89:84:1b:f1:6a:81:27:
25:8d:9f:48:a9:e5:ed:ed:c6:d5:07:be:8a:f0:87:
76:e2:c5:d5:92:1d:aa:bb:3e:0f:b5:31:06:6f:9b:
6a:88:ff:33:ce:44:85:d4:8c:38:b5:da:23:38:99:
ab:c3:a8:da:76:4c:a7:1c:cc:d2:3e:7f:86:8d:63:
f6:2b:51:2f:68:23:66:92:c5:4b:ff:36:10:75:f0:
d2:e3:97:79:b4:a2:a4:c3:ad:be:11:77:01:bc:c5:
56:e4:6b:66:9c:a0:05:0a:ab:2d:ef:58:1e:a0:78:
f6:52:75:3c:c4:6c:7e:9e:59:3b:f4:86:14:85:42:
56:c8:de:33:ed:28:4e:9c:24:48:46:8c:22:46:41:
8f:71:17:e6:bf:32:97:e4:57:5e:76:1d:30:8c:c4:
ae:2a:f5:5c:e3:32:45:92:03:84:28:1b:55:82:5e:
29:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2C:56:EA:7D:5C:1B:E2:7A:2A:F7:40:B0:F7:AE:6B:98:85:14:C8
X509v3 Authority Key Identifier:
keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a9:7f:ec:c1:3d:f9:4e:3c:a9:81:dc:76:f5:39:73:a9:34:
47:8d:07:62:5e:57:71:4b:89:7a:43:d2:cb:c1:22:34:63:01:
f2:cd:5b:e0:f4:66:3c:44:e3:b5:76:2e:9c:64:84:af:cb:76:
13:07:bc:59:c0:5d:b0:0b:9f:40:9e:9f:27:0c:1d:05:4b:4c:
26:b8:cd:dc:94:93:71:d4:f9:62:bc:bf:91:c6:90:f6:2b:f0:
9c:fe:f4:e8:e9:b6:0b:a8:8a:c2:ed:de:c5:9a:f8:0e:e2:ff:
9c:27:7b:fa:a5:59:a8:00:45:98:68:81:8d:40:94:b3:5c:af:
19:9c:c5:be:a8:25:e6:00:f9:1e:fd:af:db:3b:91:ed:94:db:
84:c6:84:f8:85:7f:89:2c:86:dc:40:0a:4b:7e:91:f0:e7:72:
6a:34:ed:1a:3f:1c:c4:72:f4:73:9f:b9:96:7c:7f:e4:ca:31:
25:f6:7b:e8:ec:e4:8f:3b:94:15:65:5f:ba:a8:ba:cb:41:92:
53:f1:99:c7:8c:91:25:e8:3f:14:7a:73:fe:0e:9b:5e:7b:4a:
88:3d:94:bd:77:63:64:96:bc:61:88:94:e1:53:f9:46:c1:cb:
9e:da:74:ee:1e:01:ab:a3:de:a4:21:94:90:c5:0d:cc:df:79:
27:62:dd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:56:48 2026 by rpki-client