Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
File: vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft (raw, json)
Hash identifier: FPutGVqDSvG+XUHLF/VBfFPdbF6eqxPo6LM43aMjLM0=
Subject key identifier: 66:AC:D1:57:4D:DA:52:40:CB:94:D2:12:8E:7D:54:DA:B4:B8:07:A8
Authority key identifier: BC:1F:4A:CE:71:99:08:E5:DB:67:D5:C8:7E:F0:54:AA:16:76:92:8D
Certificate issuer: /CN=bc1f4ace719908e5db67d5c87ef054aa1676928d
Certificate serial: 01A08A8D9D9383778BA1FC8354F738A912CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:02:11 +0000
Manifest this update: Thu 10 Sep 2026 09:02:11 +0000
Manifest next update: Fri 11 Sep 2026 09:02:11 +0000
Files and hashes: 1: 1CjpuaS4rw8ge0-ltXV4l2OX60Q.roa (hash: xS3Tyjiosi2JKWLFjDH1G3QDY2JB3RAWfG149pE1I9U=)
2: vB9KznGZCOXbZ9XIfvBUqhZ2ko0.crl (hash: CliFEiyxMCPNAq607Ap1HQ0qqEKFX8Vpval4J7xQDCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:9d:93:83:77:8b:a1:fc:83:54:f7:38:a9:12:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1f4ace719908e5db67d5c87ef054aa1676928d
Validity
Not Before: Sep 10 09:02:11 2026 GMT
Not After : Sep 11 09:02:11 2026 GMT
Subject: CN=66acd1574dda5240cb94d2128e7d54dab4b807a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:9d:ee:41:8d:a4:f0:9d:01:11:ea:a4:1e:
e9:2a:97:a6:8c:41:39:43:2c:85:7f:94:ef:78:0d:
2b:ee:15:94:a8:e0:94:5d:18:38:dc:31:ad:a2:60:
b4:da:75:17:cc:14:c9:be:56:54:86:32:37:d4:0e:
0f:08:c5:a9:da:12:0e:ae:bf:24:60:da:41:34:bd:
8d:b9:eb:18:10:21:d4:d0:a1:80:42:cd:a5:47:4a:
ca:59:09:a0:05:18:c8:c9:57:ee:20:8c:0f:b1:a8:
1f:51:70:4f:e3:ad:4d:70:85:20:b8:50:d8:da:40:
dc:68:1f:85:38:21:38:4f:45:d2:02:0d:65:76:e0:
a8:4c:86:08:01:c8:e6:b1:50:99:f2:92:7f:f0:b2:
69:86:0e:b1:f1:d5:8c:86:15:5c:8d:55:aa:e5:c4:
3c:38:16:7a:01:75:9a:38:99:64:64:43:8f:57:66:
f9:3b:83:aa:d8:51:0a:9c:d8:88:65:d7:48:62:f1:
8d:08:51:f7:3a:9c:50:e4:7a:4b:a2:a3:d3:6f:79:
fb:75:d0:40:ac:7e:41:34:2a:0f:d1:a5:e8:e5:91:
6b:6f:da:db:46:84:25:31:4b:66:5d:49:45:15:ed:
f7:7f:37:1b:ef:1c:bd:41:80:ed:66:97:21:96:d7:
a5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AC:D1:57:4D:DA:52:40:CB:94:D2:12:8E:7D:54:DA:B4:B8:07:A8
X509v3 Authority Key Identifier:
keyid:BC:1F:4A:CE:71:99:08:E5:DB:67:D5:C8:7E:F0:54:AA:16:76:92:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:28:82:0c:bf:13:78:f2:1f:82:42:21:56:29:d2:46:f7:9a:
f3:a6:18:db:40:44:18:2d:5b:f1:db:d1:89:29:38:ca:7b:54:
5a:ff:86:2e:b9:c4:ef:94:0f:34:4c:d8:7e:ce:58:71:f3:07:
9f:15:64:1e:50:db:5c:ba:76:e0:dd:bb:7b:30:ca:87:7e:22:
10:f2:ac:43:08:31:f8:b5:86:af:84:fb:75:87:60:e2:aa:37:
b2:6f:dc:8a:07:49:32:8a:1a:d9:eb:56:00:cb:bf:0c:35:68:
a2:97:c9:54:ae:68:36:49:df:7c:9d:ed:d2:f2:71:98:35:01:
98:a2:79:b0:bd:72:3c:a4:19:03:b8:8f:b6:5d:c2:dc:ab:d6:
6f:29:49:20:b5:75:3b:c2:08:03:98:5a:b5:41:4b:bc:39:68:
b4:9f:02:a8:f6:63:ca:55:de:2f:e2:ce:c7:a2:93:f9:fb:ed:
7a:45:d6:e5:50:c3:a3:f7:33:2d:6d:ae:8f:dc:92:35:99:cf:
da:68:62:8c:49:3d:c8:4e:b7:f5:bf:0c:32:37:45:2e:d5:52:
f0:0f:0d:f5:d1:56:e7:33:4c:ed:f8:85:57:af:51:8d:1c:30:
b0:d5:56:b9:88:a2:2c:6b:af:18:dd:a6:12:fc:a0:e1:f0:94:
fc:4c:7b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:31:00 2026 by rpki-client