Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
File: VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json)
Hash identifier: iX1A9JHcTbTnjN7nd83FT5pLY+sDrYy8XRbW+xJkeW4=
Subject key identifier: 2C:65:E5:8E:9A:9B:26:B0:1C:36:D1:8D:6E:9D:28:B0:35:E9:55:F3
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Certificate issuer: /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial: 01A1103B740AB31145C40CBDDB8A5F9F50FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
Manifest number: 07CF
Signing time: Tue 06 Oct 2026 08:01:34 +0000
Manifest this update: Tue 06 Oct 2026 08:01:34 +0000
Manifest next update: Wed 07 Oct 2026 08:01:34 +0000
Files and hashes: 1: DaB1LuuhaaDKlfey4U7FDWZhtoQ.roa (hash: t842HyrQIRVBFuEeUO2AFrcs14Qa/f6iq2PJVi82Skk=)
2: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: kXhD8Z62w3fzE3O6gpavVjdHps8+JuM3wO2kMvo7QQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:3b:74:0a:b3:11:45:c4:0c:bd:db:8a:5f:9f:50:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
Validity
Not Before: Oct 6 08:01:34 2026 GMT
Not After : Oct 7 08:01:34 2026 GMT
Subject: CN=2c65e58e9a9b26b01c36d18d6e9d28b035e955f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:37:f2:11:61:53:59:9d:1c:d9:40:0c:46:
db:ba:79:85:49:1f:39:5f:a1:aa:9f:ad:b7:9a:45:
32:05:7c:5b:f0:40:90:36:38:98:9b:49:23:b1:c7:
51:f0:6b:87:99:42:ab:bd:a0:4c:a3:45:ee:59:66:
2c:70:82:8c:a2:71:00:6c:ec:30:bc:d5:29:00:23:
46:2b:b5:b7:8e:22:a4:eb:31:42:35:41:eb:d3:45:
e7:59:ca:63:b2:56:5a:95:f3:8b:57:0a:59:7e:ff:
61:4b:cb:f5:86:2c:01:3e:ed:44:20:7e:71:21:5e:
96:2e:ad:9e:35:e7:ed:28:16:14:be:25:11:6a:3d:
fd:46:3c:c0:31:88:c0:1e:61:d3:c8:1b:b8:2e:f8:
db:b1:29:fe:09:56:41:4f:5b:79:94:01:98:28:08:
fb:c7:4e:0b:79:eb:2d:6c:52:b1:39:15:1d:75:2b:
68:dd:87:6d:16:86:94:89:82:3e:ca:0c:07:70:f5:
8f:fa:f9:57:a5:61:46:5e:41:b4:b6:bf:75:c5:ad:
e4:c5:b4:d7:4d:87:99:e1:90:f0:27:c1:27:70:82:
10:20:ab:ca:4c:49:da:09:4d:a4:a1:4a:25:76:78:
16:fa:ad:11:0c:75:25:8b:79:d7:ad:ea:d1:f3:05:
55:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:65:E5:8E:9A:9B:26:B0:1C:36:D1:8D:6E:9D:28:B0:35:E9:55:F3
X509v3 Authority Key Identifier:
keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:36:7b:52:99:ae:c5:de:de:66:56:16:5a:65:94:58:11:cb:
53:2c:36:dd:29:76:90:82:b1:f4:d2:12:e8:9c:50:2c:93:b7:
47:2a:04:4d:b5:b7:41:d2:e3:21:5d:6a:df:16:6e:66:91:3b:
c6:6d:b8:a1:50:2a:bf:93:a2:c3:08:05:4c:47:20:17:51:8d:
9d:56:de:e7:6d:e0:7d:bc:b1:90:f0:c8:26:12:80:a3:c7:85:
e7:57:88:5f:12:26:71:fa:bf:86:88:f4:d8:c3:61:59:69:39:
11:07:36:69:81:db:fb:75:ed:d0:d9:a3:6d:b5:4a:ae:c5:53:
6b:a8:15:e4:7c:4a:cf:84:59:e5:25:47:08:76:51:68:86:87:
7c:71:14:56:84:cf:5a:83:ed:cc:f1:49:e3:a9:84:bc:3e:f2:
a6:cf:eb:5d:08:46:97:d7:09:b7:62:4b:4e:44:22:28:03:0c:
06:01:e4:e2:ad:d1:bb:2a:b4:3c:e2:ff:12:b1:20:c1:d7:b6:
2d:93:99:52:ad:a5:9e:08:9a:53:ec:7a:14:4b:05:c2:3a:82:
2b:9e:d0:8e:2d:86:2e:8c:4d:3f:e7:40:08:ff:b3:10:7a:a5:
89:ce:89:f4:b1:28:c7:da:7a:e0:c7:55:fc:34:08:bc:70:79:
da:47:43:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:44:41 2026 by rpki-client