Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
File: v0lCu3vSTK23SF6M6lklCaPH2vU.mft (raw, json)
Hash identifier: CbO3uR2bkXgOb82Biq+ieyn0BzkFdfiHM1caOQR+sgs=
Subject key identifier: AC:2C:D1:CB:40:E8:A3:7F:8D:0E:31:FB:AE:F4:96:41:60:57:E3:86
Authority key identifier: BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
Certificate issuer: /CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Certificate serial: 01A0D7964BEF4EC973923E37CCC2707F019C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
Manifest number: 0FA4
Signing time: Fri 25 Sep 2026 08:02:26 +0000
Manifest this update: Fri 25 Sep 2026 08:02:26 +0000
Manifest next update: Sat 26 Sep 2026 08:02:26 +0000
Files and hashes: 1: 8ZLlXBrRkRmEZavAgVbzhYuPhTk.asa (hash: B0eqzhP1emUlL5EQFCd5dAc0ZKS7qm56hxy/fQh8cL4=)
2: v0lCu3vSTK23SF6M6lklCaPH2vU.crl (hash: 7JusYCOxIX5Br2kHZHj/LKH5BzfzQVexCzpcHP7q3ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:4b:ef:4e:c9:73:92:3e:37:cc:c2:70:7f:01:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Validity
Not Before: Sep 25 08:02:26 2026 GMT
Not After : Sep 26 08:02:26 2026 GMT
Subject: CN=ac2cd1cb40e8a37f8d0e31fbaef496416057e386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:3c:28:b3:dc:65:0d:0b:f0:44:17:5f:78:
f5:1e:1f:97:66:93:1b:18:8c:5e:9c:10:66:e1:90:
3e:2a:33:c2:f9:1b:58:36:50:93:8b:f9:a6:66:e3:
48:05:d6:e3:fb:23:3f:8f:12:ce:39:0b:68:e8:ad:
35:bb:9e:f4:cb:7b:a3:63:57:8f:4a:5c:d2:3d:fd:
8a:ad:46:df:d2:dc:42:6c:01:12:c3:ec:a1:17:f9:
5e:80:5a:54:0d:2c:e9:de:b7:5f:d5:16:48:05:a6:
21:30:2a:5b:5f:cd:99:66:c1:7a:67:39:58:fc:76:
bc:dc:79:62:d1:4b:88:3b:6e:f9:f4:d7:39:cb:82:
84:17:f0:94:32:f8:38:76:68:26:1e:45:66:59:f9:
e7:79:3a:65:8b:4b:e4:3f:0a:49:0e:02:44:0c:89:
2e:69:73:69:46:32:07:72:db:d2:b0:59:f1:16:36:
6f:d8:7c:89:f3:b9:68:0c:05:c7:b0:52:c5:38:67:
ba:6d:30:fa:9f:d0:25:0d:61:f3:8d:94:ec:a7:aa:
f8:70:f4:ae:ae:2b:5c:7b:a2:b8:19:bd:a4:5f:90:
82:62:30:03:3b:12:94:28:1a:25:d3:26:69:6d:87:
b9:0c:e3:ca:63:21:85:54:f3:87:0f:79:05:d7:eb:
ad:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2C:D1:CB:40:E8:A3:7F:8D:0E:31:FB:AE:F4:96:41:60:57:E3:86
X509v3 Authority Key Identifier:
keyid:BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:64:44:76:6d:94:f1:3f:ef:7e:ff:f1:11:68:3e:fd:c1:9c:
d8:e9:24:0f:5e:43:03:d0:ee:47:93:2f:22:d6:03:f5:a3:e4:
92:88:83:c6:6b:6e:64:76:69:58:87:c0:34:a5:7e:93:c4:70:
13:73:a3:22:75:99:61:e1:5e:e4:22:df:8a:14:7f:8f:dc:d7:
dc:a6:88:1a:75:6c:c8:36:dd:35:54:5f:55:71:24:94:aa:3e:
ae:86:4b:e3:e2:32:65:25:c6:29:27:6d:83:fb:75:b4:76:6b:
a3:76:1b:09:6a:53:03:50:e0:8e:e2:b8:b4:28:38:91:5f:d3:
2c:87:21:b5:b9:a6:62:59:4c:8c:9b:bb:19:5d:f4:9c:8f:e5:
d4:44:4b:a7:87:bf:4e:f1:00:fd:ca:1b:1b:23:9e:fe:d4:e3:
3a:5e:26:19:10:5f:fa:67:74:74:94:cd:b8:f2:59:7b:af:c2:
49:4a:a6:c7:55:d2:d2:d9:6b:1c:b3:3d:23:93:d6:c9:be:cc:
3c:e2:82:6b:6f:f3:a9:a9:ac:66:27:0e:38:8f:8f:16:88:6f:
f1:3b:19:22:f7:66:9c:dc:c2:c5:4a:45:f7:2a:21:e0:15:35:
79:ee:8b:a5:ea:6c:08:63:fa:b9:f5:d8:2d:75:a6:6f:30:c1:
67:f5:61:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:41:12 2026 by rpki-client