
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
File: VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft (raw, json)
Hash identifier: tjbuaennfqkGesf+lBAH0JJUcxR52uQzgVsM0qUiWTQ=
Subject key identifier: 99:C8:91:2D:5A:93:2D:84:6A:E4:80:54:CE:97:B7:63:84:98:E8:2D
Authority key identifier: 54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
Certificate issuer: /CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Certificate serial: 01A10022F88AA8A3D69B4AAE0A71C52EF90D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
Manifest number: 09A8
Signing time: Sat 03 Oct 2026 05:00:54 +0000
Manifest this update: Sat 03 Oct 2026 05:00:54 +0000
Manifest next update: Sun 04 Oct 2026 05:00:54 +0000
Files and hashes: 1: VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl (hash: EgJLFgdVbW/WiL0HsNpSJIwnST9Mc5KuLLnMgdTqWh4=)
2: ygA-wG9tjRbJFuLnohuNyXMjfgQ.roa (hash: mYTcv7dGzDKbqrjt808JcooFhDSFlGdRfp8YaG3pmNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:22:f8:8a:a8:a3:d6:9b:4a:ae:0a:71:c5:2e:f9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Validity
Not Before: Oct 3 05:00:54 2026 GMT
Not After : Oct 4 05:00:54 2026 GMT
Subject: CN=99c8912d5a932d846ae48054ce97b7638498e82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:45:7d:64:f5:37:93:4f:34:a4:2d:13:b3:
2c:c9:53:c5:9c:ca:a8:f1:96:aa:79:10:48:2d:64:
1c:8d:df:bd:d5:d7:56:eb:fd:da:ec:2b:89:18:c7:
54:e4:46:17:0d:13:ff:1b:93:39:ee:e4:2f:d9:03:
20:4c:76:0f:c3:2f:eb:cd:6e:b9:60:33:80:20:c2:
14:68:87:28:9f:2a:2c:6b:76:15:98:fa:a2:8c:63:
ff:d5:a1:9a:99:c6:56:05:60:ae:89:14:bc:4a:2d:
04:3d:9f:cf:dd:63:bc:25:c4:4f:d0:27:a7:49:c1:
6f:30:81:24:74:98:0c:29:9d:3b:c5:ab:2b:f2:ac:
53:e6:d9:13:34:78:e1:29:6e:04:9b:e9:39:ed:fd:
d6:03:a6:36:f0:c7:77:0b:a5:d3:2b:b3:b8:b7:31:
45:d1:81:c5:96:fd:1a:17:f9:e9:1c:6f:85:d9:1d:
8d:a0:ff:4e:57:7f:06:8b:37:22:67:ff:75:6f:ad:
28:4e:1a:8d:04:c9:0c:1b:a1:f1:06:64:d8:62:69:
9b:82:d8:61:38:86:15:d3:83:12:d4:06:3d:65:3c:
ec:fb:34:1e:1f:7b:92:a2:4f:72:b4:ed:0b:51:5b:
a4:21:ff:49:db:1b:7a:b1:f3:04:d2:75:79:54:b3:
17:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C8:91:2D:5A:93:2D:84:6A:E4:80:54:CE:97:B7:63:84:98:E8:2D
X509v3 Authority Key Identifier:
keyid:54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:47:6f:78:8d:e7:9d:bb:b3:7a:c7:4f:0c:33:51:bd:b4:d8:
59:fe:aa:85:6c:83:84:75:ab:a7:2c:05:2d:2d:b3:2e:00:fc:
5a:b7:f2:d4:4d:1a:b1:4c:56:ec:af:9c:19:5b:44:4e:03:14:
e7:c8:4c:74:d3:04:da:c3:74:31:77:60:5d:08:4a:8e:62:59:
9f:f6:fc:e3:0d:15:8f:93:1d:52:fd:06:97:5c:c2:7e:44:3a:
54:25:54:02:f1:32:2f:16:19:07:e3:2b:b0:e8:20:d5:83:93:
24:b2:06:ca:41:32:eb:50:78:3d:07:64:3d:b7:da:ac:08:0b:
bd:39:be:9a:b2:e4:ae:15:6d:b4:1d:2f:6d:fb:30:0f:64:68:
85:9a:88:93:e4:0f:20:29:90:74:d9:e9:c8:2a:65:98:29:19:
5c:d1:a9:6e:c6:0b:3e:3f:5b:1b:1d:61:85:86:0c:75:46:a5:
2d:ac:54:aa:f7:93:eb:d4:07:83:6a:96:d1:fd:dc:0e:a2:c9:
c0:43:c9:c3:c8:59:28:60:cd:66:b0:1f:82:c5:fb:ec:95:49:
70:42:25:2e:a1:1c:16:0c:85:a2:d6:54:3b:cf:48:d2:bd:cd:
71:db:ec:81:68:e5:55:96:8d:f6:e9:5a:2e:21:89:dd:88:ff:
6d:e5:65:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:15:13 2026 by rpki-client