Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
File: 1-VA8B1ppBVa9RiEiskaZ4baxkng.mft (raw, json)
Hash identifier: v62pvdB8x/fRfQ5PoMLG5s6b+o0PU6kQmFqD+vXFHU0=
Subject key identifier: AF:1A:6D:90:99:CE:50:49:A2:E9:57:82:AA:DE:FD:07:AE:1C:E2:FE
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial: 01A0D0806F3AAB2DBE2BD829D4E102424453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
Manifest number: 1A75
Signing time: Wed 23 Sep 2026 23:01:12 +0000
Manifest this update: Wed 23 Sep 2026 23:01:12 +0000
Manifest next update: Thu 24 Sep 2026 23:01:12 +0000
Files and hashes: 1: 1-VA8B1ppBVa9RiEiskaZ4baxkng.crl (hash: o/Bn5Hic/JwaYquwuS2dZHEDX0TD+pBarm9igGxmtYw=)
2: otcWIKtbjTrCyo_84vs3wowbaF4.roa (hash: 9VlMOAnXc/ATSpTaKuPtGHL4kHOHZKRnHkwF61ZvPSY=)
3: v_SLn6w6l2mgjrQ3LaZ3RbLwH3w.roa (hash: iLCA29fFNiihWmOcKz9zvu1/0ED29J1vmWFbLXrkxSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:6f:3a:ab:2d:be:2b:d8:29:d4:e1:02:42:44:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
Validity
Not Before: Sep 23 23:01:12 2026 GMT
Not After : Sep 24 23:01:12 2026 GMT
Subject: CN=af1a6d9099ce5049a2e95782aadefd07ae1ce2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:fa:8f:8a:7d:81:97:80:1b:b9:b0:27:a2:
16:d6:c4:25:82:fb:b5:57:69:0b:00:7a:d0:18:60:
a3:24:92:7c:cb:f5:d1:85:a0:b1:83:de:fb:23:0b:
d8:9b:90:15:c2:06:46:0a:21:8a:9a:ca:c3:82:b2:
01:a1:6c:96:0a:fd:b8:06:1b:c7:6f:fb:da:bf:7b:
2b:18:6b:04:75:04:a2:b5:94:bf:1c:5a:d6:7f:eb:
7c:b0:5a:e2:be:b0:1d:ff:7b:1d:67:d9:36:1d:4a:
3f:fa:53:af:78:79:9a:96:c8:04:ed:30:d7:ce:b1:
65:90:52:8a:6f:0e:bd:20:e2:78:4d:c2:d4:da:a5:
d7:1d:d6:3f:6d:9a:05:02:7b:17:1b:f8:53:77:39:
89:5f:0b:bf:67:15:e9:07:1d:1d:10:77:15:c0:72:
22:be:15:33:5d:9a:aa:a5:5c:b8:8d:7f:2a:62:58:
da:95:a2:4b:f6:c9:a1:17:23:ad:7c:31:9d:3b:1d:
0c:3f:53:9e:48:b2:28:08:d7:35:5a:e0:10:36:0a:
0a:d7:53:4f:e2:9a:27:b3:cb:4d:49:52:da:94:e5:
2a:88:2f:86:f6:7c:9b:1c:b5:96:98:71:a3:42:da:
d6:87:d1:0d:cf:ef:9f:f0:2a:61:9c:24:29:2b:9d:
0f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1A:6D:90:99:CE:50:49:A2:E9:57:82:AA:DE:FD:07:AE:1C:E2:FE
X509v3 Authority Key Identifier:
keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e3:24:86:05:5a:53:10:ec:6a:79:f8:76:2e:5b:94:8e:bb:
30:9e:d0:90:52:84:6f:00:d0:0c:16:e8:47:1e:3d:40:04:01:
77:a2:5d:1e:f9:e9:e7:69:2a:8f:2c:d3:bc:34:41:a5:30:9a:
1e:9f:f3:79:6b:70:48:03:b7:3b:30:2d:14:7b:95:c7:85:8e:
88:6a:cf:c4:75:d2:6f:34:51:76:74:87:3c:ff:6f:fa:1e:02:
41:8d:e7:2e:a8:98:96:71:28:b3:15:2d:5b:69:ef:96:06:23:
a5:45:75:5e:7b:ed:b7:a4:03:e4:e2:a1:ba:cc:17:fd:0f:68:
80:a6:18:d7:7b:27:36:5a:2f:00:4d:fe:50:ce:28:43:72:5e:
18:65:b6:9d:09:bc:5f:6a:20:7a:55:9f:be:9a:a4:5f:f2:8a:
d0:58:89:38:bf:2e:f4:09:34:35:20:d8:c6:d7:04:db:01:59:
50:04:0f:e1:7c:42:e9:2a:56:67:94:77:b0:0e:7c:25:42:fb:
95:b4:a9:03:c4:1d:84:6d:5f:13:a0:09:bf:9b:0c:ff:45:e6:
91:b7:9a:fe:4b:3a:e5:8f:f0:5b:14:d6:f0:08:df:27:cc:f3:
b5:56:ef:f5:25:72:03:ca:25:9c:6f:e4:25:e9:47:65:98:b7:
fe:86:b1:3c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDQgG86qy2+K9gp1OECQkRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NTAzYzA3NWE2OTA1NTZiZDQ2MjEyMmIyNDY5OWUxYjZi
MTkyNzgwHhcNMjYwOTIzMjMwMTEyWhcNMjYwOTI0MjMwMTEyWjAzMTEwLwYDVQQD
EyhhZjFhNmQ5MDk5Y2U1MDQ5YTJlOTU3ODJhYWRlZmQwN2FlMWNlMmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8j6j4p9gZeAG7mwJ6IW1sQlgvu1
V2kLAHrQGGCjJJJ8y/XRhaCxg977IwvYm5AVwgZGCiGKmsrDgrIBoWyWCv24BhvH
b/vav3srGGsEdQSitZS/HFrWf+t8sFrivrAd/3sdZ9k2HUo/+lOveHmalsgE7TDX
zrFlkFKKbw69IOJ4TcLU2qXXHdY/bZoFAnsXG/hTdzmJXwu/ZxXpBx0dEHcVwHIi
vhUzXZqqpVy4jX8qYljalaJL9smhFyOtfDGdOx0MP1OeSLIoCNc1WuAQNgoK11NP
4pons8tNSVLalOUqiC+G9nybHLWWmHGjQtrWh9ENz++f8CphnCQpK50PWQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFK8abZCZzlBJoulXgqre/QeuHOL+MB8GA1UdIwQY
MBaAFPlQPAdaaQVWvUYhIrJGmeG2sZJ4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1WQThCMXBwQlZhOVJpRWlza2FaNGJheGtuZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvNGZhNGI0LTdjOTYtNGViNy05OTQw
LTNmMjMxNmI1NTNmNS8xLzEtVkE4QjFwcEJWYTlSaUVpc2thWjRiYXhrbmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzc1LzRmYTRiNC03Yzk2LTRlYjctOTk0MC0zZjIzMTZiNTUz
ZjUvMS8xLVZBOEIxcHBCVmE5UmlFaXNrYVo0YmF4a25nLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeMk
hgVaUxDsann4di5blI67MJ7QkFKEbwDQDBboRx49QAQBd6JdHvnp52kqjyzTvDRB
pTCaHp/zeWtwSAO3OzAtFHuVx4WOiGrPxHXSbzRRdnSHPP9v+h4CQY3nLqiYlnEo
sxUtW2nvlgYjpUV1Xnvtt6QD5OKhuswX/Q9ogKYY13snNlovAE3+UM4oQ3JeGGW2
nQm8X2ogelWfvpqkX/KK0FiJOL8u9Ak0NSDYxtcE2wFZUAQP4XxC6SpWZ5R3sA58
JUL7lbSpA8QdhG1fE6AJv5sM/0Xmkbea/ks65Y/wWxTW8AjfJ8zztVbv9SVyA8ol
nG/kJelHZZi3/oaxPA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:45:05 2026 by rpki-client