Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier: irJRSJTJuF0yil3Qz/z+qaNXGAXdIYB5XMAE83okDoU=
Subject key identifier: 08:6C:13:02:1C:F7:BB:BF:A3:E8:E8:EB:0B:46:4E:55:7B:83:5A:35
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 01A0889E75DD0D66770C1704DBE845B04993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number: 0D95
Signing time: Thu 10 Sep 2026 00:01:21 +0000
Manifest this update: Thu 10 Sep 2026 00:01:21 +0000
Manifest next update: Fri 11 Sep 2026 00:01:21 +0000
Files and hashes: 1: GrwS7z5skQLr1kWHFgshe5BTW1o.roa (hash: y+YqbBQOH20V6aaG8Rd/FbsV1PT5JFszmedwpyqgIUM=)
2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: llQ8bPAQwn44vwQIh5uoqgG0o3VI2D74fM5jeGm4nmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9e:75:dd:0d:66:77:0c:17:04:db:e8:45:b0:49:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Sep 10 00:01:21 2026 GMT
Not After : Sep 11 00:01:21 2026 GMT
Subject: CN=086c13021cf7bbbfa3e8e8eb0b464e557b835a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:dc:68:f9:48:15:31:66:30:a3:1b:b4:ac:
67:15:24:c5:1d:e6:7d:d5:b1:6a:b9:2e:07:ed:49:
17:8b:36:30:c1:95:2f:4b:a6:95:b9:b6:35:70:ca:
cb:d5:73:5c:da:81:95:1f:91:a1:03:1a:f1:cb:f5:
47:1b:8f:fd:d4:9f:fa:ed:94:d2:0d:82:dc:da:6d:
34:d0:c2:12:2f:59:67:ec:95:71:fe:06:e6:2d:9f:
37:67:b1:63:de:14:ca:29:76:62:46:ae:07:f3:8c:
d3:bc:bd:51:3c:84:d2:d2:3a:59:00:18:09:40:5d:
21:9c:53:ab:85:83:89:2f:6b:8a:54:6d:c2:9b:81:
7c:03:c5:f8:cf:be:98:bb:44:7c:70:4c:bd:1e:2d:
4e:93:88:0c:29:77:00:83:f0:90:e8:38:40:26:3e:
92:00:84:fc:f1:05:6f:c1:20:92:d5:b9:00:be:2b:
64:4e:1a:24:55:d7:02:13:91:ae:9a:fb:c2:30:58:
74:96:3b:e7:55:ff:f9:7a:9b:ea:39:7c:b1:eb:56:
cd:51:e5:3c:23:5f:5e:b3:62:8c:84:7a:ab:76:b2:
42:86:bc:59:e3:2c:2b:e8:b8:d3:b1:de:21:57:79:
05:bc:14:07:28:fa:d8:9c:94:7c:14:3e:b9:9e:3b:
72:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6C:13:02:1C:F7:BB:BF:A3:E8:E8:EB:0B:46:4E:55:7B:83:5A:35
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:88:3d:21:30:38:80:f4:33:5f:38:04:9f:4f:68:76:68:76:
8a:51:35:11:71:0e:93:8f:bd:39:6c:c6:b6:63:ba:8c:a7:11:
e3:6d:4e:b5:d6:0e:9f:5f:f3:0a:14:07:f5:c0:a5:89:08:fa:
b2:0b:17:f8:c2:a9:cf:60:7e:77:46:89:32:fb:83:32:a6:af:
97:05:75:c0:c7:f8:35:db:d8:e4:63:d6:77:32:10:bb:c0:17:
5c:14:00:0d:14:15:88:bb:e8:64:08:0f:30:69:2d:4c:89:16:
11:d0:31:1d:55:11:c9:64:61:1e:29:33:a3:1b:0f:8c:6e:d7:
0b:6a:bc:e5:14:21:ec:ef:c5:72:17:77:db:8b:95:b2:48:9c:
ea:4d:7a:61:89:e2:47:2a:77:e3:9b:48:8b:f7:fe:06:76:6b:
cd:bc:64:19:d8:4f:28:49:e6:c6:d4:cf:7e:b6:92:42:77:e7:
81:53:26:c9:8d:cc:97:f0:e9:44:35:ab:bc:58:53:ab:6f:8d:
35:d9:d4:57:49:3a:3c:88:73:1f:c2:23:04:13:7a:54:aa:bc:
21:2d:99:b6:86:2a:d8:d8:08:f3:48:31:7b:e9:17:55:73:77:
55:36:1f:9b:9a:12:8b:c8:db:75:7c:93:e4:29:7e:0c:e7:a1:
ed:1f:c2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:13:49 2026 by rpki-client