Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
File: VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json)
Hash identifier: RS1Hn2qajHUqS1HzrME6Z/PCTi3OL1ChwU4vE92oAx4=
Subject key identifier: A4:BE:4A:EB:D8:C1:03:C2:CC:63:AF:48:F6:46:E3:76:C2:77:14:0C
Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89
Certificate serial: 01A18864FD3432C2E14FDFCB24CC32E80CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
Manifest number: 1ACD
Signing time: Thu 29 Oct 2026 16:01:22 +0000
Manifest this update: Thu 29 Oct 2026 16:01:22 +0000
Manifest next update: Fri 30 Oct 2026 16:01:22 +0000
Files and hashes: 1: OK14eevAKdeAPJmbmDqPtR4gKY4.roa (hash: pxijgyk5n8Xjg/9qnmaxeKyE+sgbGdhnse8g+yBaAZs=)
2: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: wNS9MFYK5o1G4Sq7yGPHGjmnfLtiGWWJAPotih22wLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:64:fd:34:32:c2:e1:4f:df:cb:24:cc:32:e8:0c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c54067385a765b1d5617c43331956fb208e89
Validity
Not Before: Oct 29 16:01:22 2026 GMT
Not After : Oct 30 16:01:22 2026 GMT
Subject: CN=a4be4aebd8c103c2cc63af48f646e376c277140c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:41:de:e3:43:a4:49:3a:bf:56:d0:c7:c5:
97:5a:f9:25:2c:b2:ec:79:cb:d9:1b:f8:28:e1:15:
f9:b8:0e:4d:87:e5:3c:56:73:88:d0:08:7c:37:58:
fc:8b:ea:24:ab:3c:4b:54:bb:52:f3:87:c3:b5:92:
a9:e6:1f:41:92:a4:55:99:9f:6c:0d:ab:58:94:38:
6c:9f:a8:6b:4f:ca:33:83:63:83:53:ec:b1:6b:89:
10:60:4e:c9:d8:b2:cc:48:aa:c1:5a:01:52:5d:57:
3f:13:01:18:d7:ec:8f:09:fd:f9:89:44:46:04:f5:
f3:3a:c4:53:ba:01:e6:e6:da:ba:4b:72:35:3b:b9:
fa:31:f4:f0:a7:27:c8:d3:f7:40:0f:73:11:24:63:
17:66:4a:2e:24:f6:5b:75:52:25:8d:a9:d1:f4:42:
80:b9:ef:e3:c0:e2:02:cf:6a:85:45:9e:56:13:ba:
4c:6d:66:56:af:52:7f:c3:59:96:22:2b:50:36:33:
ad:b2:77:c7:8a:61:d1:96:b9:7e:1e:3f:e2:f9:b5:
fc:86:a4:46:0e:d9:71:2b:79:5a:3a:f9:8d:85:8f:
b4:97:af:05:72:76:67:70:ba:fb:34:98:87:7b:77:
0b:f3:cb:f6:af:e0:74:aa:3a:c0:b5:9b:82:16:24:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BE:4A:EB:D8:C1:03:C2:CC:63:AF:48:F6:46:E3:76:C2:77:14:0C
X509v3 Authority Key Identifier:
keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1f:5a:b6:d3:07:d4:b6:96:27:d3:35:c7:8d:41:8e:c8:ac:
09:a0:01:f1:6b:60:d0:c6:eb:ce:f5:98:5a:f4:0d:ab:29:90:
90:0b:06:65:27:ac:61:0b:f3:b8:ec:20:20:e5:8b:d4:fc:c6:
1b:8f:85:20:e1:a0:fd:a9:2e:f8:e4:9d:12:5d:21:1e:9f:b5:
39:13:e9:71:0c:be:af:7f:30:3c:10:5d:df:12:cc:e4:c6:22:
f6:07:c5:51:4d:48:14:c0:b2:ad:59:2d:95:f5:29:e9:ef:4c:
8e:d9:39:d9:90:4b:32:2f:22:d9:35:5a:f8:54:c8:d4:62:b5:
50:39:91:6d:fb:26:4e:dd:1d:5e:ba:38:2a:09:20:ac:ca:a6:
7d:22:ec:fc:85:d4:8d:a4:b4:a7:8e:37:aa:1e:40:28:3c:d4:
ce:ef:37:96:a3:48:89:a8:40:9a:08:56:3e:d2:84:96:56:09:
ce:fe:01:56:20:e7:c3:d2:52:df:93:b8:71:16:0c:df:a4:18:
f5:4f:b3:1c:0d:f6:49:bc:f2:cb:36:44:2c:21:90:33:3b:65:
83:55:cf:f6:86:3b:1a:19:73:1d:f8:90:d1:60:e2:d5:fd:dd:
7e:d0:2d:b7:69:55:de:f8:7f:4b:a5:15:f6:88:96:b4:43:9e:
38:00:76:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 01:36:13 2026 by rpki-client