Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json)
Hash identifier: aMXH6UbQeeo99q3yMzrf3jtUx52b5wmXiHNBNEZItr4=
Subject key identifier: 99:8A:20:70:B8:DE:33:A4:61:28:21:BF:DA:02:0A:6B:14:EB:7F:12
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 01A1DD5E0FAE6EE5A4CD9578C5A7C648E7A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
Manifest number: 1522
Signing time: Sun 15 Nov 2026 04:01:31 +0000
Manifest this update: Sun 15 Nov 2026 04:01:31 +0000
Manifest next update: Mon 16 Nov 2026 04:01:31 +0000
Files and hashes: 1: Ghj2CjsRnY1wb2E-XOvEApJyZ48.roa (hash: aHKmPU0uHBHelzcfZtPfiKhS3Lwo9mN4hfojl5TpX04=)
2: TJCXtcNQHbcpm26ywvTJgyF4t7c.roa (hash: Anw9nCC0dCNtJrk9wWN7XS4c1TkpZ/+wtFBY2ICI1TU=)
3: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: LOtljTFliuuyCHr8ZviHZJIrTaghEqn0Qw7mnxX8ttU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:0f:ae:6e:e5:a4:cd:95:78:c5:a7:c6:48:e7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Nov 15 04:01:31 2026 GMT
Not After : Nov 16 04:01:31 2026 GMT
Subject: CN=998a2070b8de33a4612821bfda020a6b14eb7f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:12:b7:a7:e5:ae:89:06:19:d4:65:86:d5:
48:52:e9:97:10:35:d4:29:1d:f6:f9:20:f5:d5:d5:
0e:51:24:7b:77:26:c5:3e:59:d8:71:be:8e:0b:35:
26:e0:89:e7:99:4e:b0:26:e2:86:d1:e1:f3:55:9b:
28:3c:a2:e5:47:cf:81:4c:99:2a:06:be:33:99:cd:
2f:f2:65:3e:2e:ea:c0:f5:d5:28:e6:b2:1c:75:c6:
82:96:c9:99:5d:42:bb:0a:f9:49:83:67:31:5e:f0:
92:9e:ab:11:fc:37:90:9f:10:c3:e3:05:eb:2e:71:
e5:6a:0c:f3:2d:f1:7f:f2:e7:1c:42:e5:50:39:b8:
4c:27:c7:c4:e5:15:33:6e:14:3a:b4:55:e9:c6:02:
ba:a6:40:33:c2:09:67:cd:89:a1:19:6a:0b:84:c4:
a2:a5:b2:1e:9d:c4:7e:52:4b:bb:6d:2f:02:5c:5e:
d9:b9:d8:07:b6:38:8f:fe:8d:1e:b7:87:d6:ac:8d:
47:58:c5:44:91:35:1c:bc:fd:8c:57:60:a3:23:53:
21:0c:f2:09:5f:87:92:cd:53:78:28:1d:63:2e:3a:
10:e4:55:1f:3d:79:4e:86:e4:4f:af:f5:35:2e:26:
c7:ef:44:27:cf:78:38:ea:23:cc:2a:a8:8c:44:e5:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8A:20:70:B8:DE:33:A4:61:28:21:BF:DA:02:0A:6B:14:EB:7F:12
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0b:4f:53:b4:8c:d8:1b:15:26:aa:d3:36:d4:f5:b6:24:c9:
7b:a7:66:20:92:9f:29:93:28:d4:7b:b3:b5:e5:82:a0:c4:15:
09:43:2e:48:28:10:7b:f8:90:3c:9f:a1:fe:33:60:01:70:4e:
fc:31:bb:b4:3a:cc:9d:62:19:dc:b1:04:02:ca:1d:02:e2:18:
0b:59:db:a5:36:4f:71:9d:80:6c:28:7f:ca:bc:4d:a0:c4:91:
3d:23:ee:ce:ef:b0:d3:af:68:46:ab:1b:ba:1b:ec:17:15:7a:
7c:ef:c6:83:33:a5:0f:c8:a9:e2:f1:1d:8e:15:a1:a2:d9:5a:
71:66:16:e2:5d:f1:b5:f3:0a:c6:a6:e8:45:9a:c5:e7:1b:42:
d1:90:08:12:59:4b:c0:0f:82:ad:68:7c:f5:24:15:d2:be:56:
80:42:4c:0e:19:1c:9d:47:1a:62:d0:ca:aa:7e:1f:12:af:b9:
df:57:be:59:f9:8c:bb:cc:df:82:3a:7c:ef:d1:76:e1:11:69:
af:01:8f:21:b9:87:e8:b8:5f:be:0c:d8:75:49:30:9b:8b:3e:
bf:28:57:a3:e4:14:ab:ae:1f:50:af:f1:10:e0:db:34:1d:f8:
5f:0d:6e:c1:81:da:df:cc:1c:46:b8:1b:10:0e:59:12:08:eb:
a0:b0:d7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:50:41 2026 by rpki-client