Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier: Bh1OHXpPru/+H78scuIkpULFdeMQT8/a6fVmEQFKe78=
Subject key identifier: C9:B7:98:7A:04:89:CE:0B:39:F4:75:3E:55:82:E1:AC:FC:19:F9:2D
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 01A0D0EDE0B3530E69CD6FB3EEDDCCA1C9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number: 19FF
Signing time: Thu 24 Sep 2026 01:00:45 +0000
Manifest this update: Thu 24 Sep 2026 01:00:45 +0000
Manifest next update: Fri 25 Sep 2026 01:00:45 +0000
Files and hashes: 1: 2HdBpWh-50_goW8h6khUnhcxRKk.roa (hash: 9TImXcQ/0dWYKklrZF5PPoqL8egVUtFJy8Sg7tiR7+A=)
2: MoJrBXKuH1WW-h36SgH6MXEtMuw.roa (hash: 27UYuMl5BsEFFPa19TTObdCXrf6pW5VozM0WcapM9K8=)
3: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: 38uIbdqFzlsI9kDn1nnyaEpengii4FgIBVfIhIY1Bgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:e0:b3:53:0e:69:cd:6f:b3:ee:dd:cc:a1:c9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Sep 24 01:00:45 2026 GMT
Not After : Sep 25 01:00:45 2026 GMT
Subject: CN=c9b7987a0489ce0b39f4753e5582e1acfc19f92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:4a:d3:d0:75:10:f4:53:5e:be:43:41:5a:
49:df:43:6d:ef:63:13:4c:31:d8:52:24:a1:f3:39:
a9:76:33:2b:85:92:d2:c3:6f:ea:60:ae:ed:01:7d:
4a:d0:ba:62:6f:c1:da:96:9d:80:6f:c8:6c:96:a4:
dc:a7:27:d6:d6:5e:6b:1a:86:15:99:69:cc:16:37:
1f:ae:e4:e0:3a:96:72:e0:26:78:45:29:b5:93:b8:
83:62:18:07:8f:6d:1e:aa:16:4e:37:4d:92:f9:a2:
94:74:ec:63:56:10:f0:fa:89:5d:57:29:8a:bd:04:
29:3c:91:75:9c:9e:e5:b9:ed:2c:93:31:23:a9:9f:
12:60:d5:12:e4:bc:af:1f:80:49:a8:62:9f:24:cf:
53:db:54:6e:b8:30:27:06:66:7c:5a:8b:2a:f9:e2:
5d:c3:44:76:26:68:97:24:2d:08:15:2d:02:44:10:
41:26:ba:a4:95:9e:0e:d7:ed:ac:1d:9f:55:d7:5f:
95:71:d8:64:ba:4b:f1:85:b6:ff:43:38:9c:bb:44:
b9:cb:24:e8:29:44:31:56:e2:21:fb:49:2a:6d:fc:
b6:1e:ac:28:9a:31:66:4b:11:a4:b5:29:5c:75:b1:
00:7d:0c:9f:d7:94:ab:7e:e1:40:79:ff:3e:5b:97:
44:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B7:98:7A:04:89:CE:0B:39:F4:75:3E:55:82:E1:AC:FC:19:F9:2D
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3b:44:a7:d7:e6:5e:73:78:72:eb:9d:16:5e:de:97:07:21:
01:c4:1f:dd:a0:8b:7d:d0:f1:3d:45:64:02:ad:22:34:12:30:
d8:f2:48:8f:e3:f6:b4:90:e9:b2:c9:5f:36:07:6f:40:40:3e:
32:77:6f:25:18:72:17:6d:6b:19:f1:f6:54:38:12:5e:9a:29:
1d:b1:3f:46:5e:e7:ca:d4:12:4e:d2:76:66:bb:59:19:cd:54:
28:23:60:48:79:bd:91:48:a7:92:62:07:55:f8:0d:76:7e:3f:
e1:ad:f3:e4:24:da:3f:a6:fe:f1:2e:ac:25:0e:83:b4:9a:89:
7b:3b:a9:0e:7a:40:96:ff:11:c8:86:29:24:2f:fc:68:87:5e:
65:93:62:2a:12:31:2d:7b:0c:e9:fb:2a:ee:62:40:86:9a:99:
c0:35:ea:d9:f5:e7:fb:d0:27:d8:c1:0d:5e:d5:2a:88:b9:51:
a9:32:89:9b:b9:2c:4b:28:92:24:e8:f5:d0:0b:94:ab:80:43:
80:e9:c5:2d:2d:90:51:50:57:0d:11:7d:1f:b8:99:e4:4b:64:
b9:74:cf:75:eb:18:76:e9:c0:8c:59:aa:a0:10:b8:16:e6:ab:
e9:17:ae:fe:d8:c4:02:59:7f:6e:ad:ac:72:7f:d5:08:68:40:
60:d9:17:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:54:29 2026 by rpki-client