Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: mrQJ55blaE9UK7/g8RlGSHM67tVtsWr8uV/LDZbWtzw=
Subject key identifier: 81:61:55:04:17:D5:63:78:CA:4E:00:F9:2C:2F:8F:52:2F:C3:38:44
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 01A0E70A1B53A371E49A4432503400930D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 1A7E
Signing time: Mon 28 Sep 2026 08:03:14 +0000
Manifest this update: Mon 28 Sep 2026 08:03:14 +0000
Manifest next update: Tue 29 Sep 2026 08:03:14 +0000
Files and hashes: 1: Og9L-X79pFxCY-PZrsh89NiYOgw.asa (hash: mD3NvocgZjYeAZzNwxBmzTTWsMAM1llMbcLc1vO5R8I=)
2: giX8_ecdQPItnFz-fq6feS4Jd-g.roa (hash: 1ce47GoQT/QAgOwYZvUfKbOA8OpsLu0765OeChH/WJM=)
3: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: GpfqhquJinPRKKjdPhm3HxB+MGNkRM69gbyxwFxDhpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:0a:1b:53:a3:71:e4:9a:44:32:50:34:00:93:0d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Sep 28 08:03:14 2026 GMT
Not After : Sep 29 08:03:14 2026 GMT
Subject: CN=8161550417d56378ca4e00f92c2f8f522fc33844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7c:f8:14:5e:09:ff:83:64:5e:5d:e9:9a:e8:
c5:b5:42:db:07:d0:2d:ff:68:a6:c7:fa:65:75:b8:
8d:b1:f3:13:48:3a:cb:e7:9c:8a:2c:97:b0:66:c8:
35:ee:ad:75:40:0c:5e:1a:7b:9b:d4:99:32:2a:fe:
42:90:df:c0:e4:62:0e:97:84:dd:4d:64:18:23:eb:
e5:58:e4:4f:db:7d:39:3a:27:e3:90:a8:78:b9:83:
ec:20:f4:88:20:fc:cc:9d:48:42:30:0e:b8:4a:86:
ad:64:aa:96:a8:a4:15:e8:3a:8a:75:1c:10:d0:0c:
c1:fe:87:f1:0a:1c:66:b4:d2:aa:78:22:85:45:f0:
1c:55:96:a2:60:64:76:d8:d0:b1:d2:3d:fa:90:0c:
c1:f4:f7:32:32:a4:7a:80:ef:e2:49:cb:18:d9:aa:
98:29:0f:34:b4:1f:57:21:d4:62:ec:34:32:03:7b:
6d:4f:1a:d9:cc:e2:fb:cc:d8:72:e5:42:14:5a:48:
e0:a9:cc:8d:d8:d6:72:43:90:b7:7d:f4:51:1c:52:
52:10:48:3a:c3:01:cb:ef:48:db:e1:fe:71:40:b2:
a6:60:8c:f5:23:c7:3b:34:95:bd:43:22:77:e7:bb:
06:f1:30:47:31:36:5c:9a:91:7b:51:de:bd:10:1b:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:61:55:04:17:D5:63:78:CA:4E:00:F9:2C:2F:8F:52:2F:C3:38:44
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f0:21:9a:53:3c:a2:6b:90:98:12:0b:d0:ba:85:8a:57:3d:
30:32:16:1b:c2:07:46:61:f1:c5:87:96:ee:23:07:4b:15:15:
8b:84:5b:1b:b9:80:34:bb:80:7c:10:a1:08:e4:4b:20:8d:ff:
70:41:3a:7b:b8:c1:67:f3:17:80:d4:2a:29:7a:c7:5f:73:9a:
d5:b9:fd:07:80:7f:50:0c:24:89:ff:23:ec:8f:cd:b2:af:64:
f3:d4:30:0f:e3:4c:05:94:4d:d4:68:76:79:74:57:43:2d:26:
a1:7a:f4:fd:81:21:8a:bb:27:15:bd:2b:ca:15:40:6a:d7:0c:
99:b5:57:25:4c:d7:1a:ab:0c:62:a3:7f:4c:3d:85:6a:67:2d:
51:aa:ab:f9:4b:43:c4:c8:90:3c:04:9c:09:6e:d3:44:ac:d6:
60:88:80:00:ec:b7:4e:3c:6e:3c:f9:4c:03:ca:a9:fb:54:83:
dd:2d:65:ab:89:3d:b4:22:16:12:ac:05:e5:f2:01:66:da:3a:
29:76:66:d2:1c:d7:53:77:21:b9:d5:8e:e7:dd:c8:1f:0f:2f:
88:34:36:5b:82:b0:c8:1c:3a:f3:a7:97:f6:70:e0:59:df:b1:
b0:27:d7:85:01:af:1f:f1:a1:31:fd:50:99:51:e6:38:6a:ca:
60:09:ed:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:33:36 2026 by rpki-client