Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json)
Hash identifier: J4zzBeJWN16L4o6lOVicemQuWLWntmpLFWfFEOzqozY=
Subject key identifier: 9E:98:B8:BB:DF:A3:6B:96:BB:6F:BB:CB:51:A6:04:72:8C:C7:7F:62
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 01A08B9F672300D1D976855DB762D2EAC2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 14:01:14 +0000
Manifest this update: Thu 10 Sep 2026 14:01:14 +0000
Manifest next update: Fri 11 Sep 2026 14:01:14 +0000
Files and hashes: 1: V8PCFPrTValkKCiDtwNotmUAoXc.roa (hash: 3Er2ggdCtrhD3DqnQo2BCMQ9XdtanYYog/Rbw/HvLzg=)
2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: KtSFCYEWyYGT6Wtyq4q6bKmsx71+ByPDN7VFu7DOu2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:67:23:00:d1:d9:76:85:5d:b7:62:d2:ea:c2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Sep 10 14:01:14 2026 GMT
Not After : Sep 11 14:01:14 2026 GMT
Subject: CN=9e98b8bbdfa36b96bb6fbbcb51a604728cc77f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c8:47:10:78:23:41:8a:19:fd:34:8c:00:cb:
87:56:1b:8a:db:7c:39:6f:1e:e0:e7:1c:41:5b:5a:
33:55:cf:8c:2b:ac:b5:95:11:79:b6:11:6e:b2:0e:
7a:03:3f:fe:cc:3c:de:52:a6:e3:9c:49:03:4b:93:
1f:28:66:e2:b5:44:81:58:17:08:f6:b4:24:34:3a:
98:57:80:8d:0f:c4:5b:ad:3c:ac:aa:ea:fb:b5:c7:
62:f7:62:0d:8a:14:05:98:23:88:56:9b:19:e8:3a:
0d:85:a6:6a:84:01:d3:68:39:66:7c:02:07:7d:18:
0e:1b:06:9b:fd:69:04:4e:b3:12:35:1c:4b:d7:97:
84:15:17:f4:a5:07:10:c5:3d:0a:71:2c:16:88:78:
bd:5c:55:c1:ab:a8:d5:f6:fe:8b:2b:b9:b0:ff:db:
61:17:8c:5d:c6:6a:21:6d:c8:82:bf:0a:1c:ba:d9:
38:44:76:08:51:90:78:12:f6:65:e3:4e:e0:bc:8f:
55:83:89:0b:84:95:d0:dc:25:3f:66:ce:13:6e:e7:
da:62:af:e5:d1:f4:e0:61:02:f8:65:f5:bb:77:16:
3d:dd:05:92:ac:f1:6a:8b:e0:c7:2d:47:e9:49:95:
8a:77:ab:24:60:fd:37:b9:a6:9d:8b:5a:31:61:2f:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:98:B8:BB:DF:A3:6B:96:BB:6F:BB:CB:51:A6:04:72:8C:C7:7F:62
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:85:23:25:1f:08:96:98:87:87:84:f6:d0:cf:94:c9:54:e2:
5d:f9:1e:12:19:42:8f:e3:0e:0f:f1:88:a6:ac:8c:67:ee:e0:
eb:7b:e9:82:0c:0c:76:c2:04:e7:04:c8:71:a1:b5:4b:29:03:
7b:9d:be:7a:02:03:9f:4b:97:46:f3:6a:5a:da:25:6d:9d:56:
d2:ee:75:ed:2a:de:46:28:29:af:16:7b:af:c8:d1:55:ad:77:
83:14:ec:5d:5f:a8:de:d5:3c:ce:25:75:22:09:1c:de:d6:86:
c7:8d:0f:fc:d7:85:9c:18:c5:da:b8:71:1f:b1:5b:ff:6c:b9:
cb:32:13:0b:9f:4e:fe:85:ec:43:a0:68:20:28:97:9f:ad:7c:
a6:b6:6d:0d:74:b3:4c:ea:0a:40:a0:78:a4:1c:25:6b:c4:81:
81:18:3b:fd:0b:0b:25:f8:a1:e5:ca:c5:4c:57:bb:02:9b:c2:
3b:98:53:eb:04:56:a4:83:30:c0:5a:0c:a0:7a:9c:35:87:9c:
3c:14:3f:a8:04:ab:1e:b2:22:36:45:b6:23:32:e6:7f:66:9d:
0c:1b:74:e3:8a:86:b0:c6:1c:44:4f:ac:c5:89:1b:a2:08:9f:
9f:88:1c:77:b3:35:d3:fa:da:dd:db:94:03:a9:1f:8d:14:d6:
b2:12:ce:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:53:48 2026 by rpki-client