Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File: vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier: kV+CQHRKG8NdHzETeeNJuk3aKRUcfRiOwNkZwkW6NkA=
Subject key identifier: C0:07:99:84:D3:71:34:67:87:39:1A:CC:4C:43:AC:35:DC:02:0B:7D
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial: 01A0D192920CB01ADD124A1DC48F274FBF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number: 1A68
Signing time: Thu 24 Sep 2026 04:00:38 +0000
Manifest this update: Thu 24 Sep 2026 04:00:38 +0000
Manifest next update: Fri 25 Sep 2026 04:00:38 +0000
Files and hashes: 1: Q2LlNZpjm7QSfpQ8SxDMKPen6fs.roa (hash: +LvudqksRpkI5ThHyJo6o0SESZrwUB4lFuLcKBfvGGo=)
2: lb9dWd03BfnM72HsEUOqMfSXM5c.roa (hash: RJsPG6DuVrowjWLhY1jcZaBG3s9HD98PpDetQPQtNn0=)
3: n8D_NKCQjks2jeuzf-VmDEGhJy0.roa (hash: BxlSKmYiJSjve5WPsQ9b002bw4r8+dfXErMK1Yu3iW0=)
4: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: 2S2NWL058ggqp74hUxtzBx9OX3IqiAJv0CiV4vDnTsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:92:0c:b0:1a:dd:12:4a:1d:c4:8f:27:4f:bf:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Validity
Not Before: Sep 24 04:00:38 2026 GMT
Not After : Sep 25 04:00:38 2026 GMT
Subject: CN=c0079984d371346787391acc4c43ac35dc020b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:1c:63:71:90:e4:8b:07:c9:e5:5f:fd:53:
37:3f:c9:f8:8f:89:92:d0:25:41:0c:fd:ca:9b:13:
a8:bc:2d:97:50:bc:1f:67:8d:b3:fe:9d:cb:4f:9c:
98:fe:83:b7:37:ff:5f:af:5e:a4:15:18:c7:e4:cf:
9d:2c:b9:e4:5a:14:f5:08:d9:61:1e:c7:da:12:88:
2a:99:3d:f1:eb:61:9f:d4:8d:7c:d6:4e:c3:82:bd:
dc:68:82:da:95:62:3a:b2:e7:e1:05:7d:3b:6b:6d:
7f:78:5d:47:3a:f1:de:f5:ee:e8:f4:18:e0:09:e4:
17:a4:48:cb:48:b8:a6:0e:37:df:98:43:82:ea:17:
d7:c6:16:4e:d1:da:83:1f:7a:01:7c:84:54:2a:9f:
e4:92:e6:8a:66:e2:d5:05:ad:53:0f:95:88:3c:bc:
8c:fa:fc:86:54:b0:8c:79:fb:3b:b3:ea:56:c1:c7:
2e:98:5a:29:e5:3c:db:6d:5e:4c:33:ee:73:7a:2e:
bf:26:30:6d:e4:02:df:11:2c:f5:ec:14:fc:1e:af:
b9:50:9e:eb:6e:7e:5d:20:58:0b:e2:3a:5b:87:a5:
f9:38:a5:71:75:8a:36:c8:04:7c:4d:e2:3d:15:89:
e1:b3:a1:bb:ee:13:55:1b:aa:75:b5:d5:ce:1d:f8:
e6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:07:99:84:D3:71:34:67:87:39:1A:CC:4C:43:AC:35:DC:02:0B:7D
X509v3 Authority Key Identifier:
keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:41:16:e5:b2:de:72:ac:7d:ea:a8:60:8c:1a:05:85:73:e5:
ff:ca:ca:17:44:de:97:75:b3:ea:9e:6b:38:7a:68:a1:4a:ca:
d0:d4:8f:56:3a:c6:90:39:03:5c:4a:c1:c9:ba:91:5d:b4:d9:
72:ea:dd:f2:16:84:b6:4c:16:21:51:21:9e:b1:c4:a8:35:ad:
a6:2b:6f:1e:c1:b8:9c:37:f2:a5:6a:df:31:52:30:a3:09:ea:
a6:78:39:e6:3e:af:f5:6e:df:5d:d4:48:84:fd:64:c4:34:14:
c6:a0:93:28:ba:06:07:c7:87:48:7f:dc:78:d4:89:b2:82:fd:
7f:1d:dc:c5:86:e3:2f:39:0f:81:45:cd:6f:a2:bf:97:79:c8:
cc:dd:f9:40:8e:ff:0f:c6:58:c4:1f:86:fb:e5:d7:32:8a:9e:
1d:6e:91:95:b9:be:73:8c:fb:b4:98:4c:94:e5:62:04:0b:3d:
b5:6b:ae:4d:9b:97:14:ca:48:a1:cb:64:a2:5c:63:44:f1:a1:
54:3d:0b:c1:aa:fa:24:bb:69:85:f4:b4:69:bc:20:33:33:81:
e4:c4:28:27:3e:fb:f3:40:5e:90:d5:2b:d9:6a:ac:3e:5f:a1:
35:d2:e1:20:29:5f:97:fe:c4:c7:66:cd:8c:96:70:3b:87:fa:
ee:c2:9a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:39:33 2026 by rpki-client