Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
File: vlJx8OFYfBRDTySA-RQQGFUHz6E.mft (raw, json)
Hash identifier: w4M8AlDW8zy3Xz+Q34419brIxtOplEUOC+6UzrVwRFs=
Subject key identifier: 71:0F:78:EC:B0:8F:E9:04:EE:5D:14:C0:FA:78:82:1C:38:62:11:36
Authority key identifier: BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
Certificate issuer: /CN=be5271f0e1587c14434f2480f91410185507cfa1
Certificate serial: 01A0F0426B866C59C95ABEFEE0141807DCC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
Manifest number: 1A0D
Signing time: Wed 30 Sep 2026 03:01:19 +0000
Manifest this update: Wed 30 Sep 2026 03:01:19 +0000
Manifest next update: Thu 01 Oct 2026 03:01:19 +0000
Files and hashes: 1: PdCQtFo1MZdYsa-X6x_yCeQP7WM.roa (hash: YWw0xEJYfH26bXcOtAt0QTYng83/pphUu49fNcxHt/0=)
2: vlJx8OFYfBRDTySA-RQQGFUHz6E.crl (hash: YiQXcn5bQnibfQoyPj8rcr/tacFXXNL7kz4xZkX2yLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:42:6b:86:6c:59:c9:5a:be:fe:e0:14:18:07:dc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5271f0e1587c14434f2480f91410185507cfa1
Validity
Not Before: Sep 30 03:01:19 2026 GMT
Not After : Oct 1 03:01:19 2026 GMT
Subject: CN=710f78ecb08fe904ee5d14c0fa78821c38621136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:53:08:c2:68:70:da:7a:a5:59:cd:6a:fc:ab:
02:e1:81:1b:28:da:ca:c2:8a:93:9a:5c:85:74:97:
85:d7:df:bc:6f:83:24:67:94:8f:bb:25:cc:db:1c:
fa:a0:1a:63:e3:20:c3:e0:85:13:c0:f0:a5:7e:91:
58:5d:dc:9a:61:7e:5d:5e:3d:fc:eb:4a:7b:8e:bf:
f0:5b:bb:f9:07:87:8c:5b:4b:e9:7d:f7:50:4c:40:
a2:ec:b2:6c:12:2d:ec:89:7a:23:e9:cc:14:d4:85:
54:09:ff:32:08:75:ab:1e:ff:cf:37:49:2a:e6:90:
b4:52:af:51:09:d0:92:07:51:9c:43:80:65:e8:c7:
0a:95:59:44:13:a8:91:42:0b:79:78:9c:63:bd:3e:
a3:5f:ea:3a:e1:84:9b:6f:27:d8:74:d8:a1:82:87:
b5:2e:82:7d:71:da:b4:aa:57:00:58:94:72:8c:f7:
3b:37:c0:c8:7a:20:02:b5:ed:e6:bd:c6:cc:fb:92:
b1:a2:94:37:eb:85:e0:cf:ec:6a:bc:29:c0:35:0c:
c9:55:93:1f:1e:10:5c:f0:66:48:30:24:2d:f5:6b:
d4:b8:d3:41:06:ae:55:5b:f8:dd:bd:2c:aa:4e:97:
4e:01:e3:14:81:9f:c9:e1:e9:4f:f3:28:cd:79:24:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0F:78:EC:B0:8F:E9:04:EE:5D:14:C0:FA:78:82:1C:38:62:11:36
X509v3 Authority Key Identifier:
keyid:BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:83:2e:0c:73:83:07:c5:db:58:5e:49:11:6e:4c:5c:59:ac:
49:a3:5a:b6:2b:18:48:fb:58:f2:d3:2e:da:e6:ab:1e:a9:b0:
22:20:e6:c3:85:60:cf:89:69:a3:45:d4:a1:18:3b:7d:9d:ec:
d5:84:13:7e:e4:61:08:a0:0c:5e:7a:73:d4:47:df:ad:8b:1e:
7c:83:24:b8:0a:b6:db:b8:b4:9a:f6:54:9c:2a:b8:3f:03:b3:
cf:5e:8d:ba:7f:0d:81:73:52:da:23:a9:c9:6a:f4:b5:c1:9e:
35:43:f6:83:71:d7:53:0f:7f:af:dc:ce:00:b0:fe:be:eb:a1:
f0:82:3a:fe:01:2a:68:5d:65:4e:73:55:3b:74:a5:46:95:d6:
de:7f:93:7c:14:47:35:5a:2c:07:7c:04:6a:3a:40:1e:ec:65:
89:c6:8f:ac:20:c8:55:42:65:8c:46:cf:22:a5:e4:69:c1:0d:
91:92:9a:99:0f:0c:ed:3d:a4:7a:e4:7f:21:b0:53:64:0c:9d:
ea:b2:67:fe:e1:a7:6c:12:90:8d:34:38:a9:7a:42:14:9c:76:
9b:0f:54:20:bc:73:e8:b4:cb:67:c6:37:a1:c8:f1:c0:25:b5:
3b:4f:bb:a8:18:94:b5:53:5c:cd:e8:61:7a:ba:47:16:2d:cf:
04:13:1c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 14:22:47 2026 by rpki-client