Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
File: VwLHy8I1Jyt6zNez8LDkfGHHXis.mft (raw, json)
Hash identifier: pzsj0uDFribLRJRyU02+YH/l9MHO1ZIeV63TqNER8e0=
Subject key identifier: 7A:35:32:81:7E:1E:62:03:FB:93:BA:22:6D:57:43:79:5C:78:EE:C0
Authority key identifier: 57:02:C7:CB:C2:35:27:2B:7A:CC:D7:B3:F0:B0:E4:7C:61:C7:5E:2B
Certificate issuer: /CN=5702c7cbc235272b7accd7b3f0b0e47c61c75e2b
Certificate serial: 01A155538EC9996EA408837F344BECED425A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
Manifest number: 012A
Signing time: Mon 19 Oct 2026 18:01:41 +0000
Manifest this update: Mon 19 Oct 2026 18:01:41 +0000
Manifest next update: Tue 20 Oct 2026 18:01:41 +0000
Files and hashes: 1: Dv1loStZYAsjb_Af0DKMu_bevS8.roa (hash: Zb9q97rROgQhDovcWngVEaqZebMrRktFUPt7d2lNmQc=)
2: VwLHy8I1Jyt6zNez8LDkfGHHXis.crl (hash: 8swE6LCof0Pd0+GC2iIj4cJxkF+mAM5cEhAqBZD+ZLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:53:8e:c9:99:6e:a4:08:83:7f:34:4b:ec:ed:42:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5702c7cbc235272b7accd7b3f0b0e47c61c75e2b
Validity
Not Before: Oct 19 18:01:41 2026 GMT
Not After : Oct 20 18:01:41 2026 GMT
Subject: CN=7a3532817e1e6203fb93ba226d5743795c78eec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:4c:58:17:b4:49:ed:e9:9d:79:95:ca:2c:
18:f9:f6:81:d4:c0:3a:55:c3:b1:85:3e:f2:d8:a9:
ff:f8:47:76:5f:6e:b3:f7:cb:ed:78:57:ca:d1:c7:
bb:97:c3:f7:c7:5e:54:80:52:c8:e7:5f:02:75:25:
f2:ec:df:d6:b7:af:d3:8f:29:32:fc:ec:09:b7:8c:
17:ee:10:88:44:09:4d:62:ef:08:44:b1:15:b7:0d:
78:84:ac:c1:79:93:dc:54:d6:fe:fc:36:a3:f4:28:
1d:16:21:7a:ac:8b:a7:bc:15:f0:8b:db:76:f8:6c:
99:18:63:6d:18:a9:1d:50:44:8d:3b:55:97:25:17:
f4:3e:ef:0b:d2:8d:1e:09:47:03:9b:3f:89:51:74:
30:83:44:d3:cc:ca:e4:74:ae:61:09:8d:a6:e8:e6:
e1:aa:60:5d:8f:c4:a8:36:78:38:b7:4c:a5:33:0e:
23:aa:55:d3:a0:0f:af:2f:a8:fe:e2:0e:6c:ee:4b:
58:dd:62:34:7e:dd:14:04:40:18:13:2a:0b:30:b3:
54:e3:32:c7:4c:cf:6e:09:db:e9:ef:17:54:1b:72:
f6:91:af:54:1e:df:82:b8:4c:7b:81:9d:1a:35:4a:
52:c0:03:b6:cb:e2:9a:45:cc:bf:59:40:8e:0a:92:
d1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:35:32:81:7E:1E:62:03:FB:93:BA:22:6D:57:43:79:5C:78:EE:C0
X509v3 Authority Key Identifier:
keyid:57:02:C7:CB:C2:35:27:2B:7A:CC:D7:B3:F0:B0:E4:7C:61:C7:5E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3f:22:ae:db:8c:6a:c8:d2:6d:6d:d2:7b:41:02:ee:27:aa:
e0:e2:42:80:3f:a4:88:52:27:34:c8:d2:f8:ca:65:68:21:47:
85:2e:eb:30:c1:a7:e7:32:b3:34:0e:61:b4:3f:c2:64:74:fc:
68:88:14:b0:45:6d:e7:70:8b:3f:4d:84:a5:8a:80:d2:be:32:
4f:12:56:b4:7c:ca:8b:ed:de:ef:5b:af:2e:3a:0d:64:3e:3a:
c3:75:58:bd:c4:7f:c8:bd:60:6b:a4:35:bc:5c:b7:d0:c9:91:
79:50:b0:de:24:42:91:44:b0:4d:bb:7a:31:aa:7d:d0:2f:b9:
ad:19:83:da:97:42:11:13:e4:5e:00:c0:b3:41:28:a5:f4:3c:
e7:bb:37:10:48:14:ea:47:44:72:3a:b4:c3:36:14:59:0e:be:
93:5e:bb:56:32:f5:04:69:3f:38:30:05:1a:74:88:3b:e3:34:
b9:ea:b4:95:14:0a:ff:43:10:bf:b5:3f:c0:38:14:e4:3d:3b:
99:bb:5b:f1:d8:4a:fd:16:a6:c2:35:77:8d:51:52:a5:59:7e:
17:5c:e7:43:f8:6c:40:cf:0f:88:03:2d:72:37:b3:d1:da:78:
60:ab:4b:b3:7b:2a:f8:d5:c7:e3:c4:53:d4:cb:b3:ab:2b:72:
26:e5:fa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:50:19 2026 by rpki-client