Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
File: vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft (raw, json)
Hash identifier: gsf4Gi3cO7+7TU1k9J3/VLpGJUY0L8cVqBHtFjb4slw=
Subject key identifier: BD:D9:68:52:02:C0:B2:35:43:10:85:A3:27:37:49:77:96:B1:5E:6E
Authority key identifier: BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
Certificate issuer: /CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Certificate serial: 01A0CB5967938E9BC9B08D371FAF798C8D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
Manifest number: 09F2
Signing time: Tue 22 Sep 2026 23:00:28 +0000
Manifest this update: Tue 22 Sep 2026 23:00:28 +0000
Manifest next update: Wed 23 Sep 2026 23:00:28 +0000
Files and hashes: 1: _fu8HVCzSvRt0NkeK2yjKWusuWE.roa (hash: vu5AFCJ2gOF+w3Dk+FLPIQg6RZau2UZ0AeeFgZPuej4=)
2: imlyuPj5F5_zGekGu7dPokpqSlA.asa (hash: XoiU9tHBQPgXDyIZK+nHfznEzCBRBvjsJG2xLG4W4n0=)
3: vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl (hash: JL3AQNhrSkspkv47/IMiuzrsKyICYV5nylgsTFQ1CSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:67:93:8e:9b:c9:b0:8d:37:1f:af:79:8c:8d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Validity
Not Before: Sep 22 23:00:28 2026 GMT
Not After : Sep 23 23:00:28 2026 GMT
Subject: CN=bdd9685202c0b235431085a32737497796b15e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:97:e1:66:3d:68:e1:c5:d5:b7:a4:cb:f3:8e:
68:cc:cb:35:ab:11:de:e2:b1:ce:6e:97:8a:e2:d9:
bc:99:d4:45:dd:93:50:c8:a5:81:5e:b1:34:1f:19:
68:03:02:5a:61:e7:52:66:e5:e2:e6:29:87:0f:ef:
06:f9:97:4e:60:35:96:9a:39:22:83:7c:d1:38:bb:
2d:1a:28:ff:64:3f:db:54:02:bd:94:37:78:86:7e:
98:a6:4c:f7:e8:68:51:fb:dd:7d:c6:f3:d7:9e:e1:
54:c3:31:89:53:d5:94:ee:1f:42:75:a6:9c:05:76:
af:31:e9:93:7b:06:17:af:75:fd:7c:3f:25:56:e5:
09:8a:45:b2:bd:d2:3f:a4:80:0e:a1:64:59:dc:2d:
ec:16:0b:a6:6e:ec:b5:c0:ce:9d:69:e8:56:84:00:
47:4c:f3:84:54:e5:14:84:c8:c0:99:54:32:1f:7a:
b8:68:08:b6:5c:dc:8d:15:d5:7b:25:ae:59:56:a5:
27:9b:2e:3a:33:5b:af:5e:a8:77:9c:66:d4:ff:09:
c5:03:69:36:92:03:48:c0:ad:18:54:36:59:d6:d1:
c6:61:2c:5b:6b:88:7a:70:35:16:d0:14:91:df:43:
35:6a:85:45:fd:75:b7:90:7d:d6:e0:60:e7:e8:2b:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D9:68:52:02:C0:B2:35:43:10:85:A3:27:37:49:77:96:B1:5E:6E
X509v3 Authority Key Identifier:
keyid:BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b1:4b:e8:51:7a:42:6a:36:9e:61:6f:72:f4:d4:94:9d:34:
4a:7b:cb:73:66:2e:a8:fc:4c:fe:b9:83:09:f5:70:b0:2f:8f:
19:da:bb:7d:29:99:a8:92:5d:d4:75:41:3c:23:db:69:ec:e9:
cf:f6:84:3d:ca:b5:e6:53:66:53:ee:c5:b9:9f:79:ee:06:af:
4a:81:5a:e1:0c:4a:5c:f9:d0:fa:4f:5a:9f:e3:00:27:a9:06:
2e:81:cc:44:ff:66:e9:d3:30:65:89:01:3a:57:06:dd:40:d8:
11:9e:bd:67:29:72:db:78:e4:5f:a4:90:ae:40:26:8a:6f:f8:
2a:fa:0e:0f:64:18:d2:94:db:25:0d:5e:fb:06:ff:e3:b6:e4:
8e:cd:d7:4d:65:b3:b7:18:5e:11:10:b2:8f:e9:62:4c:ec:bb:
65:c5:07:08:5b:34:4f:d4:37:80:c8:0b:86:b6:21:9a:4d:68:
7d:d6:b1:22:5f:8f:c4:4c:73:15:1d:2a:76:ee:df:42:c0:d3:
40:bf:b9:44:a7:7d:a2:7b:c6:c8:cb:2f:be:d8:24:60:d6:96:
08:eb:2f:8f:92:c8:93:a5:b1:11:f6:65:65:89:36:3e:9b:c2:
e9:5b:3f:d1:f4:3d:3b:e7:f3:fd:f0:f8:2d:a0:d1:fd:42:f9:
be:9f:9f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:16:58 2026 by rpki-client