Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json)
Hash identifier: SOAKm1dpFA3OsC8eaX9QyiDdgHQHZmwVjevvIC7vj50=
Subject key identifier: E4:12:14:C5:3F:2F:DC:CF:B5:C1:CD:CC:C6:B1:BA:4C:94:46:1D:54
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 01A0D26DF85A30DF3AD4CD6E4A1A828B850D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
Manifest number: 1496
Signing time: Thu 24 Sep 2026 08:00:17 +0000
Manifest this update: Thu 24 Sep 2026 08:00:17 +0000
Manifest next update: Fri 25 Sep 2026 08:00:17 +0000
Files and hashes: 1: Ghj2CjsRnY1wb2E-XOvEApJyZ48.roa (hash: aHKmPU0uHBHelzcfZtPfiKhS3Lwo9mN4hfojl5TpX04=)
2: QxYB96hW7JeiMlNYWI5YVU3Mlfk.roa (hash: J9Ep8+ZcHZRXqSI+5YN748t653NofsfWjYhAWlrp/eQ=)
3: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: 9pPFie8ZFnDb274NZ7FHcntbjSAuQsXu6ej0i0+C0fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6d:f8:5a:30:df:3a:d4:cd:6e:4a:1a:82:8b:85:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Sep 24 08:00:17 2026 GMT
Not After : Sep 25 08:00:17 2026 GMT
Subject: CN=e41214c53f2fdccfb5c1cdccc6b1ba4c94461d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:86:10:fa:d5:85:f5:54:88:60:36:32:89:9d:
4e:ad:5a:7c:9b:41:78:5e:09:08:64:9f:e1:48:da:
b1:ef:0a:2e:fa:37:9c:58:40:9d:15:42:21:72:f8:
15:16:f2:9e:37:90:f7:75:d9:d6:fb:b4:9f:7c:ea:
9a:16:77:f0:c3:cf:4a:69:3c:8d:d0:5f:fd:15:b7:
89:33:ce:c2:65:0e:c0:ba:c0:ce:ac:df:6c:f0:16:
28:6e:fd:cd:f0:0b:b6:58:35:db:ea:e1:76:3d:5f:
2c:cf:e1:cc:42:b6:74:2e:42:83:ce:fc:df:70:42:
7a:0e:81:8a:db:88:8f:67:a8:52:f5:d0:fe:76:8f:
0d:14:90:43:53:b7:9c:47:8a:0b:f2:e9:f3:3a:71:
bc:7c:e1:0e:fc:40:62:44:17:7b:f2:42:c9:9e:fa:
a3:1e:77:31:13:e8:21:c3:65:30:61:24:a7:4a:10:
d5:ff:29:b9:4c:53:2c:e7:9c:11:26:6d:a2:4b:4d:
85:57:a8:16:a5:73:e5:00:c7:ed:7a:b2:aa:28:74:
54:cb:07:18:e0:10:90:b5:15:df:29:b9:c6:87:2b:
e5:4a:4f:c2:39:a1:09:42:76:7b:d3:73:17:02:f0:
9a:f6:a5:cc:a9:62:08:ea:bd:67:04:08:78:49:e3:
79:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:12:14:C5:3F:2F:DC:CF:B5:C1:CD:CC:C6:B1:BA:4C:94:46:1D:54
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:49:ef:d7:ac:31:7b:cb:ea:d5:41:79:eb:dc:88:6d:59:5e:
ea:f9:fd:7b:8d:c9:00:f3:81:e9:ad:bf:1f:c9:84:33:2e:a6:
f5:85:18:e6:80:b7:b5:da:2e:02:ba:15:df:da:ca:ba:60:a7:
8b:d0:1a:87:01:6f:16:7c:8f:3e:73:37:e2:cf:d3:8d:cf:35:
c5:da:b5:19:f1:06:f5:89:24:31:99:1d:1f:33:1f:c8:79:e7:
a5:4f:12:1e:d2:b3:4b:9a:92:f4:fc:e4:e2:d7:ea:80:4f:b1:
30:21:82:fa:4f:a1:51:59:0a:6b:e7:7e:ce:4b:73:df:72:60:
86:46:aa:a4:3f:c3:a8:39:00:a8:ee:1f:0f:94:9f:77:de:65:
b0:65:62:10:61:87:5e:5d:41:62:98:4e:1f:44:e9:91:69:cb:
24:c6:2b:d2:e1:cd:3c:ef:be:ee:8b:b3:7c:64:84:bd:36:98:
7a:66:6d:92:c7:9a:cd:2f:5e:86:b1:9d:61:97:c5:49:1d:e6:
e8:84:ea:c2:4d:22:b5:12:10:83:48:bd:24:d5:b3:f0:cc:19:
10:bd:81:8a:64:ca:34:7d:be:76:22:88:e5:e1:d9:7e:87:51:
23:e1:6a:c4:ee:ad:6b:1e:96:ca:6a:0d:28:d2:dc:8b:5d:23:
d4:ce:b6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:43:17 2026 by rpki-client