
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft
File: _vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft (raw, json)
Hash identifier: 6N89EqKnqk6rJQO8WJsvkI64/RmQQTrzwVRelWXIOgE=
Subject key identifier: AF:85:B5:5B:71:91:B7:8E:00:FA:D4:64:83:B6:8A:DF:91:07:66:B6
Authority key identifier: FE:F7:C4:D5:70:C1:7C:9A:86:79:A1:06:34:60:5C:98:4B:95:03:A4
Certificate issuer: /CN=fef7c4d570c17c9a8679a10634605c984b9503a4
Certificate serial: 019DECA40E12873375B7F97D78E6C3EE5BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft
Manifest number: 9D
Signing time: Sun 03 May 2026 07:01:07 +0000
Manifest this update: Sun 03 May 2026 07:01:07 +0000
Manifest next update: Mon 04 May 2026 07:01:07 +0000
Files and hashes: 1: _fyeIxDaafsDWMkS2A3N58AtJkU.roa (hash: H0SeTPFO1ojjf24io8wfPyjJHZQNS+KrdvYRVXD+DL4=)
2: _vfE1XDBfJqGeaEGNGBcmEuVA6Q.crl (hash: hMuRGvj9hARVM+Gg9RUpKHXxN2XDKj3HqDXZAgLIZVc=)
3: lmvQRZHoT7SrToyMEi92PYv4lr8.roa (hash: 54xRyjzzMSSYWcjiwt5uthywu9zHlEe922Syj7kTVbI=)
4: uCsQuS-4rVdPYPXfgacBtl1GxKU.roa (hash: mSrfH4b/LZzb55AU3CME/vQpiQIKZvFXbFgXnOdMHJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:a4:0e:12:87:33:75:b7:f9:7d:78:e6:c3:ee:5b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef7c4d570c17c9a8679a10634605c984b9503a4
Validity
Not Before: May 3 07:01:07 2026 GMT
Not After : May 4 07:01:07 2026 GMT
Subject: CN=af85b55b7191b78e00fad46483b68adf910766b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:5e:ab:60:64:65:dc:7b:35:74:87:fd:05:
0a:85:25:46:ae:9c:ac:5a:53:c4:ce:27:ec:7a:b4:
bf:8b:94:92:49:2c:f2:73:6b:dc:53:c6:b4:c5:43:
f1:86:69:ac:81:30:0c:ec:a2:4b:60:27:a7:f4:58:
b7:7a:38:5d:8c:1b:20:3e:85:9f:bc:d2:78:61:63:
ae:53:82:0d:1f:d4:c5:cc:a7:c1:53:4c:35:57:9e:
17:8e:08:70:53:8f:d6:13:d4:1a:1f:69:5b:f1:ce:
ce:32:46:d2:ce:65:85:25:89:e7:1b:c0:2a:33:d8:
a2:e0:5b:cf:c3:fd:2d:b4:2f:b4:b3:4c:87:91:1e:
1f:91:71:7c:34:7b:a6:9b:f5:02:87:e7:54:d8:89:
b1:e5:45:9c:ba:32:38:3d:64:2a:0b:62:09:a2:64:
7a:de:01:39:a8:d2:5a:d7:8e:73:12:a1:6d:75:c9:
82:2e:c1:1f:d6:7e:ab:6c:b1:12:4b:57:77:6f:ea:
ec:fc:ef:ce:7e:27:8b:14:47:0a:df:8c:3f:5c:02:
5e:4a:8c:1a:b9:01:90:4c:dd:b9:80:6a:fb:48:a9:
2a:63:f2:06:5f:30:a6:4e:a6:62:0d:b0:73:46:98:
a1:02:91:37:62:66:b1:8b:6e:63:41:4a:2b:d8:ea:
37:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:85:B5:5B:71:91:B7:8E:00:FA:D4:64:83:B6:8A:DF:91:07:66:B6
X509v3 Authority Key Identifier:
keyid:FE:F7:C4:D5:70:C1:7C:9A:86:79:A1:06:34:60:5C:98:4B:95:03:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b7:f8:91:2a:16:84:26:62:c8:8e:d9:66:35:d1:10:05:6b:
62:1f:69:94:ee:9d:a2:72:5d:67:0e:47:35:be:cc:ca:37:cb:
2b:06:78:d9:ba:d2:85:f4:87:8f:26:e9:d0:c7:f7:d8:89:62:
12:68:ba:d0:61:ec:e7:fa:41:2b:94:03:33:d0:44:dc:09:1a:
d1:22:57:2f:d9:66:3f:b9:7b:38:91:f3:e3:3f:36:de:09:0f:
03:51:9f:76:48:f5:52:81:84:12:a5:94:88:76:a7:23:ab:18:
96:d1:b2:02:ac:36:40:b7:59:0f:28:c4:25:1b:d8:0e:7c:39:
cd:7f:99:b4:99:82:2e:dd:e0:e0:f3:26:d3:60:a3:c1:6f:c0:
14:86:c2:ad:e8:77:0a:58:73:a3:29:49:5a:c2:41:07:b3:c3:
5f:f5:86:13:2d:42:dc:40:11:66:a4:50:52:07:0c:6f:dc:a0:
b4:5d:40:ae:35:34:35:c8:44:6e:a5:2e:18:f9:10:5e:ac:24:
79:ec:f4:a9:af:de:69:33:ff:a2:ee:a2:a1:d7:1e:ec:e4:18:
be:12:bd:d7:86:95:e6:94:fd:33:b0:0b:23:e3:e5:bd:64:12:
45:12:b9:1f:6b:bc:de:af:05:c5:28:65:21:c4:88:82:e3:69:
80:3c:b8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:08:00 2026 by rpki-client