Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
File: VzoAKcURHfnMLPUxgnfwEbwpEKk.mft (raw, json)
Hash identifier: eCbyveRkd0/Rrg8kJr9yxvj2lrc2zUkFGEHY+vxlwl0=
Subject key identifier: D8:25:4D:ED:D2:4F:0F:97:12:63:51:EE:32:10:5F:78:61:32:8F:70
Authority key identifier: 57:3A:00:29:C5:11:1D:F9:CC:2C:F5:31:82:77:F0:11:BC:29:10:A9
Certificate issuer: /CN=573a0029c5111df9cc2cf5318277f011bc2910a9
Certificate serial: 01A0F6B324388A2719EFD1DB5E515D94F017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzoAKcURHfnMLPUxgnfwEbwpEKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
Manifest number: F9
Signing time: Thu 01 Oct 2026 09:02:10 +0000
Manifest this update: Thu 01 Oct 2026 09:02:10 +0000
Manifest next update: Fri 02 Oct 2026 09:02:10 +0000
Files and hashes: 1: Hw6fDQFRFN_Ls3115aFzf0vRck8.asa (hash: OsI8RtgpTzCj0b88FzzXfilbNxRb3Sb0tKlLzKAD5M8=)
2: VzoAKcURHfnMLPUxgnfwEbwpEKk.crl (hash: a+Npc4SgJH+XSg5S7qIR4DLWsC4Ru1YkMQ0CvbZTYLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzoAKcURHfnMLPUxgnfwEbwpEKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 09:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:b3:24:38:8a:27:19:ef:d1:db:5e:51:5d:94:f0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573a0029c5111df9cc2cf5318277f011bc2910a9
Validity
Not Before: Oct 1 09:02:10 2026 GMT
Not After : Oct 2 09:02:10 2026 GMT
Subject: CN=d8254dedd24f0f97126351ee32105f7861328f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:d6:85:0e:14:9c:13:dc:d5:b3:bd:ed:d8:
6e:bc:a5:3f:5d:8f:28:c8:ff:f5:d8:89:03:41:88:
61:6e:a5:9f:d1:ec:89:5f:28:1e:9b:55:0d:cb:5c:
9a:63:1e:a2:7e:14:06:aa:9c:98:7e:ae:57:f4:c9:
15:38:26:ff:15:8f:41:3c:8d:e2:6e:28:52:4a:3a:
a8:1a:90:66:ce:2d:94:a7:0c:6a:26:cc:3f:a6:45:
b7:2c:cf:9c:22:4a:36:29:eb:51:64:48:c3:75:60:
c5:28:1a:3e:01:68:0f:4a:5e:e2:d0:20:ef:42:c4:
6d:9f:6c:68:f9:b2:15:8b:f6:07:49:d6:d9:a3:17:
5c:90:4b:b5:ba:0a:f5:30:11:28:98:1b:d6:3e:0f:
10:88:3a:10:f7:1b:3f:ae:db:8e:0e:2b:20:fa:3c:
e6:61:92:09:d9:53:a1:79:14:4c:4d:c8:b2:23:3d:
1a:5c:36:46:84:8b:e6:7c:cb:a2:1e:0a:38:35:7c:
3d:f9:c4:77:16:c9:9d:3c:14:65:3b:53:95:f9:27:
99:17:92:4a:4b:aa:c4:e2:fa:22:80:fc:21:a5:c3:
c7:9b:04:c5:fa:93:c5:2c:fb:a8:80:93:27:4a:f1:
f4:bf:07:15:0e:bf:0f:6a:f8:be:bd:f2:16:02:df:
39:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:25:4D:ED:D2:4F:0F:97:12:63:51:EE:32:10:5F:78:61:32:8F:70
X509v3 Authority Key Identifier:
keyid:57:3A:00:29:C5:11:1D:F9:CC:2C:F5:31:82:77:F0:11:BC:29:10:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzoAKcURHfnMLPUxgnfwEbwpEKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:55:e1:aa:7e:77:ff:65:51:03:1d:a2:13:e6:9e:e1:59:d3:
29:71:95:aa:ce:ca:30:07:45:88:30:bf:09:27:77:a6:a5:af:
34:b2:85:d4:83:93:4f:e4:60:c5:8b:06:19:a2:c5:17:0c:b3:
71:b3:4c:71:e4:6e:49:97:9e:39:c2:99:98:21:2f:3b:f6:fc:
a2:dc:56:f7:40:fe:4f:4d:7b:95:3f:17:52:cf:3f:d8:c4:65:
8b:8a:29:ad:b3:f1:fc:c8:03:32:84:48:72:ff:34:81:45:87:
99:5d:fd:e9:88:d3:eb:4d:80:ea:c9:76:3e:9a:72:0a:29:88:
f3:82:ed:e1:9c:f4:a8:1a:c0:73:ff:d6:68:7d:ac:42:9e:fe:
2c:32:da:d7:1b:e5:02:97:a1:02:5e:a9:07:c9:dd:a7:ec:a1:
3d:7c:95:fc:3e:47:4f:a8:f8:7a:eb:85:f0:75:7d:25:a7:5e:
ce:ce:fc:ea:1b:89:7e:2a:a7:a3:d8:8f:3b:a1:5c:23:c0:85:
4f:fa:f2:22:0a:fe:35:d7:f4:a0:98:37:ba:cf:f4:85:02:0e:
b1:1b:a3:41:bb:0f:65:48:7b:8f:b0:8a:32:78:6c:77:da:77:
94:1e:a1:80:a3:1e:e1:27:2a:cb:6f:16:0c:58:ee:14:ec:de:
36:f1:1a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 00:13:21 2026 by rpki-client