Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
File: VQt8DIuuYQ9-UZwEhaR3O860jas.mft (raw, json)
Hash identifier: mSAL8Bgq89Y126ha0NO9v4uTcrZ89kfwggRzmI7mBYw=
Subject key identifier: 14:A8:D5:BF:F0:D3:DF:B4:B5:AF:DF:A3:44:5A:FC:91:C5:1B:94:C4
Authority key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Certificate issuer: /CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Certificate serial: 01A0E88917AD911909E8DA5EE2CA0EA66F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
Manifest number: 1A80
Signing time: Mon 28 Sep 2026 15:01:33 +0000
Manifest this update: Mon 28 Sep 2026 15:01:33 +0000
Manifest next update: Tue 29 Sep 2026 15:01:33 +0000
Files and hashes: 1: VQt8DIuuYQ9-UZwEhaR3O860jas.crl (hash: 9lTqZjcvycHerw6GSgLCbhRfSbo0Z6xLxDYul1Lhavs=)
2: Yri4YyNnj9vEbzeMbkLzknKX1jM.roa (hash: l2+YAHSYB7oInXAv9Se95ZujsZdgb43G3fB7F4lj8iE=)
3: b94_pJ3k5-ZUd6KZPqfO7ZHdpLU.roa (hash: erKmQVI75uWQTXvESH3ZhAFTEkV90ZkfOuzHVZORDCU=)
4: bxUJOGzDbjV-xgkeVZsGg7PhFAM.roa (hash: q45eE9k3WP1QL6ev2bsePVxIkJymW9aUUerqRFFx9WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 15:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:17:ad:91:19:09:e8:da:5e:e2:ca:0e:a6:6f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Validity
Not Before: Sep 28 15:01:33 2026 GMT
Not After : Sep 29 15:01:33 2026 GMT
Subject: CN=14a8d5bff0d3dfb4b5afdfa3445afc91c51b94c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:f6:da:99:d6:1b:4e:06:7c:8c:f3:2b:8e:
80:74:2c:f8:bd:2b:28:19:20:76:eb:7b:6d:08:63:
5b:58:54:76:90:2e:f2:80:e0:ec:eb:1b:54:e1:5d:
a8:22:21:67:fb:9d:39:9e:42:39:67:8d:6f:49:88:
d3:f0:87:c6:f9:af:8b:03:08:e7:32:8c:b7:80:95:
5e:0b:10:16:d6:c7:f3:e0:e7:c8:27:0b:07:c8:e0:
78:39:0a:97:d1:4c:c7:a7:6b:cc:9a:9c:b9:1f:2e:
ce:43:83:ee:2a:35:12:d2:88:de:79:ff:ce:01:da:
68:36:90:7e:4a:ce:8f:17:19:5c:38:e5:d9:31:ef:
69:f1:47:9e:a3:ae:99:0e:e8:db:bb:61:c4:d7:22:
c7:b2:f6:96:04:3f:6a:60:17:4d:bd:28:a5:45:ae:
ce:1d:f5:41:1d:b0:5e:7b:33:13:15:7a:4f:34:b5:
ba:d9:2c:19:58:77:f2:ee:5b:bf:43:e2:ad:25:9a:
f8:9c:d0:3c:c6:05:65:fe:8c:94:1d:ac:3b:1d:db:
24:b1:eb:92:ce:7a:69:93:45:83:db:ce:e5:01:bf:
cb:73:42:4d:f6:ad:d7:ac:b5:9c:c8:66:68:1b:e2:
a9:ea:6d:93:33:1d:c0:07:90:77:4a:c1:71:b2:70:
47:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A8:D5:BF:F0:D3:DF:B4:B5:AF:DF:A3:44:5A:FC:91:C5:1B:94:C4
X509v3 Authority Key Identifier:
keyid:55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:95:55:ef:ff:17:31:5f:68:42:86:ef:e0:40:6e:f4:8f:9f:
2b:cf:9d:9c:b4:35:55:ed:84:20:22:b5:a6:ab:41:29:3e:22:
50:0a:f3:e5:2d:3c:ba:f3:b0:00:97:cc:0e:0f:56:26:38:c2:
21:37:d1:49:42:84:21:db:f0:3b:2f:44:48:f0:f2:ed:17:86:
10:26:d6:d6:ea:71:83:ad:66:81:5d:29:73:33:f1:dd:c7:44:
bf:16:24:ca:fe:ab:d7:86:e2:76:30:64:de:c4:33:59:16:a7:
b1:61:ed:20:a5:e5:46:ad:73:f5:18:42:e6:bb:0b:09:92:12:
c1:3b:a1:8b:c2:21:96:ae:08:de:1d:12:3e:c1:e5:92:ef:f6:
ac:f1:59:30:35:5d:ef:10:b4:ca:db:32:8b:ff:bf:91:d7:bb:
6c:39:02:76:f1:9f:9a:9d:73:05:46:9b:a1:fa:f3:1d:c9:ff:
50:d4:cb:80:41:21:5a:1e:2d:37:5f:72:dc:f4:f8:ca:64:bf:
4e:8a:ef:9d:fd:8c:5b:23:af:ea:5b:c8:8e:aa:be:64:5c:a3:
0a:1b:04:9e:70:34:60:57:fb:37:6f:b2:ca:1e:56:9e:d9:9d:
19:f1:70:e9:e0:80:53:04:b8:35:d9:43:ed:22:f5:86:95:f5:
b8:25:9a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:12:51 2026 by rpki-client