Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json)
Hash identifier: VSY93S5mgo2gKwMy6wJt2gB3/2Bh5IWdraR/H1y7pEY=
Subject key identifier: 26:27:1E:AD:37:3B:D5:9A:84:F2:A3:B8:5A:DF:0F:DF:62:CC:98:B9
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 01A0D45D2BBCCCFE7B892C8523E41EACC6DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
Manifest number: 1497
Signing time: Thu 24 Sep 2026 17:01:10 +0000
Manifest this update: Thu 24 Sep 2026 17:01:10 +0000
Manifest next update: Fri 25 Sep 2026 17:01:10 +0000
Files and hashes: 1: Ghj2CjsRnY1wb2E-XOvEApJyZ48.roa (hash: aHKmPU0uHBHelzcfZtPfiKhS3Lwo9mN4hfojl5TpX04=)
2: QxYB96hW7JeiMlNYWI5YVU3Mlfk.roa (hash: J9Ep8+ZcHZRXqSI+5YN748t653NofsfWjYhAWlrp/eQ=)
3: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: UBqX46B74co5ZdEdbR4fugKCZ05tog9nRkflBWyTb9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:2b:bc:cc:fe:7b:89:2c:85:23:e4:1e:ac:c6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Sep 24 17:01:10 2026 GMT
Not After : Sep 25 17:01:10 2026 GMT
Subject: CN=26271ead373bd59a84f2a3b85adf0fdf62cc98b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:8b:37:ec:95:81:f5:95:f1:c7:c8:ea:0c:
ad:35:7f:97:ce:04:64:25:fa:a1:21:7a:2a:58:3b:
f3:11:94:73:f2:0e:2b:a8:96:3d:03:26:76:b2:13:
eb:62:ae:77:e4:4a:9d:9e:8d:db:82:31:8c:8e:41:
e7:7a:95:fd:aa:1e:43:96:e1:8c:4e:1d:41:5f:4c:
20:e2:c9:0d:50:3a:1b:bf:11:8c:62:ac:0f:ab:24:
54:3a:46:06:68:b1:64:9f:58:de:dd:b0:b0:02:fe:
f7:06:7c:98:0b:16:0b:3f:7c:3f:67:e7:57:b8:38:
28:ba:ad:da:2f:d6:cb:a4:70:15:52:be:da:d1:e2:
28:6a:7f:49:01:da:4e:29:2f:bb:7c:2e:17:ad:ec:
b3:f8:4d:a5:1d:49:a7:18:2e:b8:7d:58:12:81:2f:
2d:1e:59:32:e6:6f:40:7d:66:a7:f7:23:73:2a:0a:
b6:25:66:f1:9e:5d:4d:b3:d7:be:83:52:d5:37:0e:
30:ac:d8:9e:98:1f:f7:66:cf:07:70:4d:ec:b3:a5:
d4:84:e3:78:ff:95:56:20:40:bc:b8:88:66:62:41:
e4:f6:91:52:a0:46:a9:2e:fb:c0:e1:82:04:a4:22:
62:cb:cd:c5:26:80:31:f5:72:58:1f:c7:8c:ca:5a:
e7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:27:1E:AD:37:3B:D5:9A:84:F2:A3:B8:5A:DF:0F:DF:62:CC:98:B9
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6b:86:d8:47:ce:5b:2b:10:d5:61:6b:5a:0b:f1:61:7f:18:
fb:43:de:ae:88:35:ce:8c:4f:eb:93:23:c4:17:f0:e2:47:3b:
0a:31:5c:9c:34:c3:32:ec:07:63:cc:58:e8:cf:fe:49:33:ba:
89:fd:6b:de:d6:59:6b:32:98:48:47:bd:02:4f:10:97:e5:78:
44:15:44:86:b2:13:93:5a:1f:ca:08:98:f3:ad:53:8e:68:48:
47:6b:a7:fa:98:ab:99:87:ac:f6:8e:e8:95:6f:54:7f:ee:29:
88:69:d9:42:b1:49:d1:c6:f9:aa:d6:6d:69:eb:dc:09:65:f7:
4b:e2:db:12:d4:c3:7c:5b:bd:01:33:83:13:fb:0d:8d:06:14:
d4:35:3f:1e:fd:49:d9:cc:6c:48:31:e9:19:c5:a2:96:1e:9e:
64:0c:dd:4f:b5:7c:7d:e6:e3:91:35:da:66:34:86:ed:8c:39:
0b:58:b2:08:e8:77:ba:f7:6f:ca:65:61:25:b7:9f:41:e6:75:
55:39:1f:79:32:de:a7:b3:18:4b:52:f6:ec:5d:0c:cf:60:58:
9b:86:38:55:90:b4:fb:c4:07:c8:7f:bf:d8:25:2f:a2:78:7a:
54:26:e0:d1:1c:96:9f:e2:25:ee:61:0d:fb:34:04:6a:93:15:
98:37:f3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:44:45 2026 by rpki-client