Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
File: vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft (raw, json)
Hash identifier: 0Vwtbgno6ZTxsIDtCMKhVZPPMUqqtUpeSkUybsU4V7E=
Subject key identifier: F0:EE:57:BD:D4:A6:43:CF:C9:92:61:C5:0B:47:C0:F8:7C:D7:32:2E
Authority key identifier: BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
Certificate issuer: /CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Certificate serial: 01A0D8DF1158FE807E384F008500222DABDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
Manifest number: 09F9
Signing time: Fri 25 Sep 2026 14:01:32 +0000
Manifest this update: Fri 25 Sep 2026 14:01:32 +0000
Manifest next update: Sat 26 Sep 2026 14:01:32 +0000
Files and hashes: 1: _fu8HVCzSvRt0NkeK2yjKWusuWE.roa (hash: vu5AFCJ2gOF+w3Dk+FLPIQg6RZau2UZ0AeeFgZPuej4=)
2: imlyuPj5F5_zGekGu7dPokpqSlA.asa (hash: XoiU9tHBQPgXDyIZK+nHfznEzCBRBvjsJG2xLG4W4n0=)
3: vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl (hash: Z4uD06pr07aoVd1fpojtZ+LmJi+PHTSqEns0iwvCkfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:11:58:fe:80:7e:38:4f:00:85:00:22:2d:ab:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Validity
Not Before: Sep 25 14:01:32 2026 GMT
Not After : Sep 26 14:01:32 2026 GMT
Subject: CN=f0ee57bdd4a643cfc99261c50b47c0f87cd7322e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:dc:dd:c7:b2:5e:a1:aa:11:99:d6:27:04:
8e:71:47:d7:7f:6d:fe:c0:ee:99:e9:8b:2d:2d:79:
06:21:d7:9e:11:cc:6c:35:da:7e:4e:a2:93:07:38:
e2:df:9d:2a:22:76:9b:c2:00:28:98:6a:51:26:8a:
1f:c2:46:df:4b:1f:cb:70:18:07:dd:be:8b:be:96:
68:fc:27:8d:50:44:15:28:39:de:53:37:18:4a:da:
ae:49:37:d2:01:f1:78:56:d1:92:89:10:fe:8c:01:
2d:5b:bc:11:2f:4a:59:d9:d1:c9:f0:8c:ff:f7:fb:
df:bd:fd:9b:77:51:72:d9:dc:c7:09:62:3d:bb:a2:
69:eb:13:a8:a4:55:62:46:9f:b8:33:a2:4a:a3:a7:
da:c0:f4:ee:f6:cf:f3:63:08:7e:8b:42:9c:1e:a1:
8c:11:8b:a4:42:0a:87:94:df:f6:47:cc:ae:2d:bf:
9f:3a:91:1b:3e:15:2f:6a:ee:ba:c5:5f:bb:d3:be:
2d:c4:ee:31:67:5d:56:2d:f2:8e:2f:87:dd:c1:ef:
1a:fa:18:14:0c:41:98:12:e3:1d:53:0c:c5:92:3c:
39:38:58:32:28:b1:20:46:a7:5c:9d:b0:7d:6a:17:
9b:4d:6d:ff:cf:1e:93:c1:39:9c:23:10:6f:18:a5:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EE:57:BD:D4:A6:43:CF:C9:92:61:C5:0B:47:C0:F8:7C:D7:32:2E
X509v3 Authority Key Identifier:
keyid:BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:de:42:c8:a2:86:9d:73:69:40:65:d5:c1:c6:4f:7b:51:61:
b1:fd:7e:d8:b6:23:97:37:45:38:b0:c2:ee:f0:4b:72:bf:d3:
35:6d:92:16:a1:94:d8:59:d6:b4:9b:bf:3d:c9:ab:15:e8:d5:
7a:1b:99:af:6e:f0:3c:55:95:38:c8:f2:b3:30:1c:83:98:bd:
47:a5:43:87:a0:69:8b:d2:8f:16:ce:4a:e1:b2:6a:b5:1a:8b:
cc:9d:68:50:96:87:14:66:b0:72:19:4e:f7:6e:44:16:1d:a7:
ce:8a:22:25:2a:8f:b5:52:bf:77:47:e2:0c:7f:0d:39:86:32:
da:7e:1f:9b:ea:80:da:04:fb:14:14:3c:4d:e3:21:d4:a3:3c:
43:ee:41:10:be:61:cb:04:bb:44:ca:70:cb:4d:45:ac:d7:5f:
28:36:f5:20:e6:ed:d0:40:e3:68:83:75:7b:87:84:41:3b:79:
56:47:5e:e5:c9:e8:5e:30:f7:9e:fb:6f:53:80:13:74:8d:8a:
4a:fe:51:0b:34:06:79:c7:28:39:82:d0:8e:88:ed:a9:69:02:
11:e1:f1:46:11:f8:8e:52:b3:ca:e9:83:27:31:a9:f7:78:c3:
90:80:83:2b:b1:3a:76:25:33:c3:3e:39:e9:3c:2d:3c:c5:62:
b3:14:a0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:41:34 2026 by rpki-client