Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
File: VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft (raw, json)
Hash identifier: cBG3OCPck91iAi2aCvdu/KSAyZndNC7bwjB8QEb+ccs=
Subject key identifier: 90:64:67:C3:60:33:5C:34:83:FF:DB:74:52:E4:B4:20:7F:9A:90:F1
Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964
Certificate serial: 01A108817F0FB6B3A47E162E97F825843ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
Manifest number: 08BE
Signing time: Sun 04 Oct 2026 20:01:06 +0000
Manifest this update: Sun 04 Oct 2026 20:01:06 +0000
Manifest next update: Mon 05 Oct 2026 20:01:06 +0000
Files and hashes: 1: UXXtGi4oxNDjahgVbsQFfeZIwU4.roa (hash: jdBHO4Fwd2CUANgRDo6QBZVoktY70KNazlVK3AC+4zE=)
2: VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl (hash: 1X146j9yKZCafbclobXn78M78Ixm/usVUsyxuur+bVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:81:7f:0f:b6:b3:a4:7e:16:2e:97:f8:25:84:3a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964
Validity
Not Before: Oct 4 20:01:06 2026 GMT
Not After : Oct 5 20:01:06 2026 GMT
Subject: CN=906467c360335c3483ffdb7452e4b4207f9a90f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fe:8b:e8:ac:1d:5d:14:31:af:21:8c:a1:e4:
e9:6c:1b:14:18:1e:14:ef:39:0b:8c:94:85:39:76:
3e:82:a0:eb:ac:ac:f9:5d:39:0d:6d:a3:aa:b9:00:
0e:16:65:11:18:29:1f:02:58:93:16:24:3c:ed:21:
5c:72:9f:e1:95:fa:cf:7c:93:a7:e2:c3:f5:33:07:
1d:00:3d:f9:a0:01:10:bd:4e:d6:e7:5a:af:38:69:
a0:65:74:83:8d:09:6f:ab:4f:b7:39:cf:82:05:27:
34:a7:3a:16:38:42:59:9d:0a:8f:59:28:ca:ec:a7:
a4:e2:c9:65:bd:85:ee:ad:5e:f0:ce:5a:ee:8c:c6:
2b:c6:e1:ca:07:04:84:f8:ef:d4:30:cf:fe:06:54:
fb:3e:7f:a8:07:fe:bb:19:b6:50:8b:29:a5:bf:d0:
da:5a:f8:94:d0:f1:74:17:96:fb:b7:ac:da:59:10:
8f:c9:c8:7c:5c:10:c4:8e:e3:e9:ab:10:3f:9e:c3:
28:02:85:6e:92:31:2b:c2:fc:73:39:5b:24:92:15:
28:3c:52:57:00:b5:5c:5d:db:69:74:c9:e7:8a:23:
87:3a:da:43:b4:48:dd:7c:77:b1:81:20:79:9c:4d:
4a:e5:d2:81:e8:b2:59:c3:6f:a2:c8:dd:1f:61:4f:
9e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:64:67:C3:60:33:5C:34:83:FF:DB:74:52:E4:B4:20:7F:9A:90:F1
X509v3 Authority Key Identifier:
keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cc:a7:5b:fb:8a:19:df:02:47:05:ce:29:9b:d1:0a:fe:2e:
5b:09:6f:3a:d6:19:b4:01:31:3a:bb:03:98:1d:f5:50:06:20:
6e:30:4d:2b:f3:24:ac:f3:09:15:c6:f3:f6:1b:50:50:f4:d6:
f9:57:ba:dd:0d:f1:3c:b3:c0:15:8f:71:08:f9:2d:27:4b:33:
6e:9b:98:f3:b0:59:66:a8:69:fe:76:11:21:d2:72:ab:cc:c4:
7a:f2:15:d6:9e:26:c3:04:f7:42:21:66:35:57:45:f6:66:63:
1f:21:9a:ad:a5:a6:22:12:15:5c:44:93:e0:3c:6d:f3:bd:40:
7f:2b:7d:5a:69:7a:9f:e6:b4:4c:c2:88:56:76:42:c2:00:46:
cc:c2:64:ec:94:77:2f:b5:94:04:63:c8:8d:16:80:2e:88:36:
c7:68:96:87:b7:92:ba:3e:81:92:2f:a3:4b:5a:1f:1d:66:43:
b0:ee:25:c1:ef:9c:01:65:97:69:f9:78:0e:80:fd:d0:53:10:
60:8f:70:fb:8a:22:6a:89:c2:95:b5:a2:c1:aa:8a:8f:37:14:
4e:5b:24:50:18:f0:d1:a4:c9:98:cd:6a:b9:ae:c4:58:9e:23:
5b:f6:4c:fc:3b:90:34:fd:31:4f:94:ee:b7:d0:9f:c4:9b:8b:
d0:57:4d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:40:22 2026 by rpki-client