Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
File: VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json)
Hash identifier: k+oKezaNAxstR1k4eJc40uXMTSlQ0SIuBMQM2fXdQUY=
Subject key identifier: 3E:F5:5C:C2:74:6B:37:49:DB:BD:C0:D7:C3:60:1E:74:4C:58:23:AA
Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89
Certificate serial: 01A08B67E2C23423F6F8788D7B4DF6631D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 13:00:36 +0000
Manifest this update: Thu 10 Sep 2026 13:00:36 +0000
Manifest next update: Fri 11 Sep 2026 13:00:36 +0000
Files and hashes: 1: OK14eevAKdeAPJmbmDqPtR4gKY4.roa (hash: pxijgyk5n8Xjg/9qnmaxeKyE+sgbGdhnse8g+yBaAZs=)
2: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: fkJuaGBcN9PSTlsPms82xJrUGTOo6sMXuuyxNkXlIB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:67:e2:c2:34:23:f6:f8:78:8d:7b:4d:f6:63:1d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c54067385a765b1d5617c43331956fb208e89
Validity
Not Before: Sep 10 13:00:36 2026 GMT
Not After : Sep 11 13:00:36 2026 GMT
Subject: CN=3ef55cc2746b3749dbbdc0d7c3601e744c5823aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:b4:52:1e:5d:e6:4c:83:91:b0:38:f3:89:
8e:51:71:a4:97:0d:f6:5b:d4:a7:b6:9f:c9:52:51:
bd:b4:3a:90:f0:53:ee:8f:c2:b9:cb:ff:bc:d5:e3:
31:60:fc:af:05:1a:ae:b8:35:e8:20:ce:4a:ce:8f:
86:da:bb:7f:8f:d4:4f:ae:f6:77:bb:f8:35:6c:7e:
40:6a:4f:4a:e3:26:d6:e8:81:09:39:0f:7a:25:bd:
02:bb:cc:a1:72:0a:6c:6a:b3:92:a6:ca:3c:f3:ec:
ba:c5:9e:40:b3:c3:d2:ac:aa:63:e6:6f:01:8a:9e:
db:6b:95:89:1f:ba:c1:ec:25:67:8b:66:87:13:57:
95:6d:e7:ca:b8:45:f6:a1:9d:fc:9d:6a:46:4c:c0:
10:fd:b1:cb:3a:c8:d0:1b:4f:b8:80:29:09:31:48:
6b:7f:57:89:ec:6d:ad:09:ef:67:ae:40:43:19:e2:
bd:58:9b:c5:d5:ea:1b:51:56:b5:7c:27:af:f1:09:
34:40:78:2f:62:d2:ca:55:a8:ff:2c:5d:0a:73:10:
5d:80:75:a7:0e:01:c5:e7:96:c9:a1:f2:1b:67:37:
fd:8e:03:8e:18:ed:31:d4:5d:8b:4e:bf:6d:50:4e:
bd:99:d7:57:1d:c1:f9:a5:7a:e0:e1:a4:51:f8:97:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F5:5C:C2:74:6B:37:49:DB:BD:C0:D7:C3:60:1E:74:4C:58:23:AA
X509v3 Authority Key Identifier:
keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:cd:bd:2c:cf:87:d5:de:fc:48:97:31:55:f9:cf:4a:0c:b7:
b6:f1:58:ca:3f:ed:48:54:b7:01:42:99:89:e3:46:53:5e:24:
eb:bc:64:c1:de:f1:2b:04:01:8b:df:2c:45:d0:e3:60:f5:b4:
8c:5d:a6:24:a3:b5:04:b0:48:01:e5:dd:3c:43:e0:c6:eb:06:
68:75:b0:87:24:ca:07:d9:e4:d3:67:24:8f:b7:37:bd:7e:df:
d0:9d:62:0f:15:18:ad:9d:a9:88:85:fc:f6:fe:63:b6:8e:1e:
7f:c0:1b:7c:72:3f:d4:2e:a6:e2:65:b2:0b:13:fc:12:b6:4c:
ea:52:5c:de:4c:7e:d3:c1:4c:4f:67:dd:d9:b7:8b:57:2d:21:
25:08:25:d9:09:e9:91:56:38:45:65:db:34:c5:75:ee:6a:cb:
7b:14:a3:8c:51:9d:a9:01:bc:be:1c:0c:ec:05:3f:16:f4:b9:
2b:48:a4:6f:0f:39:04:b6:f3:b4:31:a1:e0:40:13:98:83:83:
34:fc:96:c8:b4:b2:81:87:e0:e5:f8:fd:b2:8f:2f:1b:dd:ff:
3a:a1:ad:f6:f8:35:bb:47:d6:ea:eb:7a:ac:ef:b0:78:28:20:
80:34:e2:5f:d2:4d:e1:7a:be:89:e4:0f:6a:60:cf:d3:a8:d6:
00:3d:6b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:52:53 2026 by rpki-client