Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: pta3Kglmp2zwadiF0Jo5JNc9AdXsVrpzCxNJgPog2w4=
Subject key identifier: 4B:0B:8F:9C:C2:70:37:32:6E:F3:CA:75:F0:57:A0:B0:7D:A2:1A:DF
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 019FD72A75A58C31436AD4C68BE8D2E947BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 19ED
Signing time: Thu 06 Aug 2026 13:01:51 +0000
Manifest this update: Thu 06 Aug 2026 13:01:51 +0000
Manifest next update: Fri 07 Aug 2026 13:01:51 +0000
Files and hashes: 1: PSVFcWDsclvNsUoU022_OpYiWTo.roa (hash: aQdUeRuBKi+rDHfkrmS1dmqV6ZktJA8BSCadqiZ5eyA=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: i2g964s2U28m4N2WW53JuArpoRqiVo/a5NZctsZje00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:2a:75:a5:8c:31:43:6a:d4:c6:8b:e8:d2:e9:47:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Aug 6 13:01:51 2026 GMT
Not After : Aug 7 13:01:51 2026 GMT
Subject: CN=4b0b8f9cc27037326ef3ca75f057a0b07da21adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:a6:b9:a0:49:86:e3:ef:18:0e:be:1c:0e:
fe:0a:3a:13:cc:62:89:ee:0c:d2:a0:5f:f9:55:00:
1d:b0:3d:9b:b5:b6:20:7d:f7:d5:86:a1:a1:f8:91:
37:c0:6c:d4:c2:dd:bd:1d:2f:ae:3a:a8:08:1b:12:
36:b8:05:bb:af:f7:de:d5:f9:26:84:d0:73:65:b4:
37:4c:2b:f4:e3:66:2d:ef:8f:69:0e:48:c2:76:f6:
ea:e2:e7:f4:f5:be:a5:d2:9d:46:ae:9c:3b:a7:b1:
c6:03:11:b7:8e:88:87:ab:0e:b7:c0:9c:b7:49:1c:
12:a2:a3:2a:52:27:77:1b:da:0e:3d:7c:f8:38:bb:
25:6e:ba:35:61:a6:4d:49:cf:43:4e:5d:ca:1a:e7:
d2:8c:16:93:2d:40:de:a7:c3:9e:c0:9a:c4:d5:3e:
e3:13:7f:46:66:07:f2:a1:23:f6:7a:de:92:c4:62:
9b:b5:91:28:dd:63:d3:84:3e:09:ec:ac:db:48:55:
8c:7d:b5:83:81:d3:6d:30:04:44:10:21:80:fa:7b:
f5:0d:56:15:2a:f6:47:08:1c:c7:fb:53:65:27:5a:
cd:4a:49:65:ed:29:33:87:05:67:6f:e9:f7:59:fe:
86:84:b5:d7:cc:59:f3:1e:7c:78:99:d0:9a:fb:21:
5a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0B:8F:9C:C2:70:37:32:6E:F3:CA:75:F0:57:A0:B0:7D:A2:1A:DF
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0c:1d:af:d8:69:52:82:f0:1e:a2:8c:02:23:e0:19:23:33:
96:cd:9a:b8:22:8c:f4:ad:e2:cc:38:4b:0a:85:5a:3c:9e:e2:
eb:00:f4:8d:46:e8:4c:54:08:d3:04:9f:c3:12:28:61:ac:98:
8f:d0:b3:fb:e8:bd:44:30:80:65:04:1c:b7:90:d8:51:b8:13:
2c:37:e4:f1:88:5c:c4:5e:7c:3a:d9:3e:f9:5e:ae:6f:06:22:
8a:c4:1d:d4:05:0d:2a:eb:cb:1c:3b:fa:93:02:0c:e1:4b:6d:
39:b5:87:1e:f3:b2:6a:b2:33:03:b2:ec:0b:2d:3a:b8:f8:91:
ab:a5:7a:55:9c:20:a2:11:30:5b:4a:89:5f:53:5b:66:bf:77:
1c:76:a7:0b:c8:6e:8d:a4:ab:8d:5f:b6:95:1b:38:55:27:10:
3c:09:8d:a0:3d:4b:9c:4a:d8:d4:e1:71:01:67:ae:d7:34:09:
6a:ae:30:4c:86:16:28:a4:29:c5:3a:9a:4c:05:fd:8f:33:79:
1a:88:f0:82:80:3b:9a:b3:25:b8:26:10:6a:eb:d7:73:f8:2e:
95:9e:7c:27:b4:b9:99:0d:b2:d4:a7:8d:43:99:6d:07:99:9e:
3b:8d:bc:9c:aa:27:9d:cc:2e:d4:2c:04:1f:76:23:99:3b:b0:
ef:ce:ad:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 21:51:09 2026 by rpki-client