Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/0-vFFsycPFpWzWuS0K37NUFAMSE.mft
File: 0-vFFsycPFpWzWuS0K37NUFAMSE.mft (raw, json)
Hash identifier: LxSnvceRktUG5AU2RwxGM+QJ/TekWPOYNjVA96WVtfk=
Subject key identifier: 51:20:EC:99:38:49:71:AF:8A:BB:2A:85:93:02:59:57:C1:3B:0C:78
Authority key identifier: D3:EB:C5:16:CC:9C:3C:5A:56:CD:6B:92:D0:AD:FB:35:41:40:31:21
Certificate issuer: /CN=d3ebc516cc9c3c5a56cd6b92d0adfb3541403121
Certificate serial: 01A0404E2A6906E477D9060509BFFD0421BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-vFFsycPFpWzWuS0K37NUFAMSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/0-vFFsycPFpWzWuS0K37NUFAMSE.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:00:59 +0000
Manifest this update: Wed 26 Aug 2026 23:00:59 +0000
Manifest next update: Thu 27 Aug 2026 23:00:59 +0000
Files and hashes: 1: 0-vFFsycPFpWzWuS0K37NUFAMSE.crl (hash: eefKj+hZSY7krAd6xkzJFe9sAd6afjxELM2WQwdvFdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/0-vFFsycPFpWzWuS0K37NUFAMSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/0-vFFsycPFpWzWuS0K37NUFAMSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-vFFsycPFpWzWuS0K37NUFAMSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:2a:69:06:e4:77:d9:06:05:09:bf:fd:04:21:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ebc516cc9c3c5a56cd6b92d0adfb3541403121
Validity
Not Before: Aug 26 23:00:59 2026 GMT
Not After : Aug 27 23:00:59 2026 GMT
Subject: CN=5120ec99384971af8abb2a8593025957c13b0c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:8b:0c:ae:00:b6:16:9c:5c:5f:6a:d5:4d:
01:46:fc:19:05:ae:45:db:d3:aa:0c:77:5e:68:87:
c2:72:af:a1:9a:88:35:dd:e2:59:92:87:f2:92:ca:
f8:a6:d1:35:c8:db:cf:ad:93:75:c7:5a:f8:64:46:
ce:f4:47:47:9d:31:0e:df:4a:46:c0:0b:c8:5f:be:
69:5f:25:5f:83:84:cd:83:ab:02:63:52:52:97:d8:
1d:f7:64:04:20:f0:5b:7d:56:6f:20:8e:a0:fc:e5:
5a:ab:05:e7:a7:c5:32:9d:02:47:b3:08:64:ea:c8:
11:c4:24:8b:a6:29:10:1f:fe:3c:e5:d1:a6:23:91:
29:18:09:a3:68:c6:3f:9d:65:38:76:08:e9:e3:9f:
c6:7c:86:76:e8:a4:6b:8a:5c:0a:ff:22:13:13:f3:
ed:b9:ae:c7:d9:55:b1:39:74:2e:5b:e4:3d:dc:79:
45:3e:f1:8f:52:58:bc:2c:4a:15:3b:a1:55:c1:e7:
b5:b0:bb:32:44:34:be:46:67:85:3a:b6:0d:34:fc:
82:98:d6:db:8e:6f:cc:79:9c:ad:19:68:3f:77:5c:
11:18:86:59:a2:95:61:06:d9:bd:b2:73:c3:25:7b:
8c:fd:1c:dc:e0:15:ce:8a:cb:81:e7:6a:a4:db:cf:
65:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:20:EC:99:38:49:71:AF:8A:BB:2A:85:93:02:59:57:C1:3B:0C:78
X509v3 Authority Key Identifier:
keyid:D3:EB:C5:16:CC:9C:3C:5A:56:CD:6B:92:D0:AD:FB:35:41:40:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-vFFsycPFpWzWuS0K37NUFAMSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/0-vFFsycPFpWzWuS0K37NUFAMSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/0-vFFsycPFpWzWuS0K37NUFAMSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:08:09:16:11:b5:ce:86:14:bf:c6:21:b1:a7:ea:07:08:bf:
bf:16:59:01:ef:ad:e7:e6:bc:3d:6f:f7:f6:71:ca:b9:1d:4e:
f7:7f:61:fd:70:44:96:91:b7:40:9a:2b:48:e7:29:be:6c:47:
62:53:ee:39:68:19:b1:d5:22:63:1e:59:12:99:31:90:67:6a:
85:ce:1b:c1:b9:6f:07:92:d5:bf:bc:a9:df:48:3f:37:40:f8:
90:19:81:ca:e9:78:9e:76:78:e2:7f:86:b1:80:e7:db:3d:a7:
d9:1f:b2:28:ea:15:c0:8e:71:8c:6c:00:fa:38:4f:2a:1c:51:
53:f9:41:62:01:b7:62:d6:2c:ef:ab:85:4b:34:38:2c:fa:68:
6d:5e:55:1e:a8:93:5d:57:f0:db:0a:f4:52:61:2b:9d:b2:86:
b8:18:63:2d:f5:a4:cd:7d:1b:3c:d5:4b:12:cc:8f:78:34:5a:
da:0e:d1:a9:13:00:ac:87:12:11:a6:b2:20:a0:de:29:92:93:
f9:af:b9:9a:e7:8e:e2:a5:81:63:0d:90:fd:88:62:75:52:f7:
92:b8:0d:ec:71:a5:03:bc:b1:05:32:fb:65:b6:be:d7:74:8d:
b4:f6:89:e9:13:b9:68:1d:3e:ab:43:82:03:83:92:55:f0:f4:
4b:9b:a0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:41 2026 by rpki-client