Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft
File: vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft (raw, json)
Hash identifier: GNom0kLb8moaZSWpjX/hiupoyQZQJLvHUd6dyPI0b4M=
Subject key identifier: 2A:42:4C:6E:FB:76:92:19:1A:45:1C:8A:8E:E1:9F:34:82:FF:83:86
Authority key identifier: BF:07:FA:84:49:89:13:CD:0A:F2:47:B9:8F:C2:E4:DA:F1:47:F7:E9
Certificate issuer: /CN=bf07fa84498913cd0af247b98fc2e4daf147f7e9
Certificate serial: 01A0D8DEFF725B61F442556557D9CD885FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vwf6hEmJE80K8ke5j8Lk2vFH9-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft
Manifest number: 9A
Signing time: Fri 25 Sep 2026 14:01:28 +0000
Manifest this update: Fri 25 Sep 2026 14:01:28 +0000
Manifest next update: Sat 26 Sep 2026 14:01:28 +0000
Files and hashes: 1: 1--vzy1e-ka0R2VffB1Cs0T0nvBI.roa (hash: BXk8ninGeDuuF8CYBQR72p10jh3CVqnPWA05JGML8xw=)
2: vwf6hEmJE80K8ke5j8Lk2vFH9-k.crl (hash: Ev+tuKFon4Ei8F8N1X0obXhhjc3mtgT3h7XcPYgewwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vwf6hEmJE80K8ke5j8Lk2vFH9-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:ff:72:5b:61:f4:42:55:65:57:d9:cd:88:5f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf07fa84498913cd0af247b98fc2e4daf147f7e9
Validity
Not Before: Sep 25 14:01:28 2026 GMT
Not After : Sep 26 14:01:28 2026 GMT
Subject: CN=2a424c6efb7692191a451c8a8ee19f3482ff8386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:72:19:84:e5:e1:4e:4c:33:83:d9:8b:07:ce:
1d:58:ee:a9:a1:1d:bf:b1:ad:a4:4b:27:0a:f2:6a:
9f:f9:cb:3a:f0:44:76:ed:01:ab:77:4f:90:51:fd:
d6:c2:df:e7:0d:d7:ed:09:33:8c:d2:0c:86:7d:be:
ac:e6:e5:39:ef:1a:d2:40:a7:e4:88:88:55:03:72:
73:8a:1d:64:9a:a0:10:6f:cb:39:17:b5:e7:a4:39:
d0:89:58:db:e2:a3:93:f7:5b:0e:ac:d4:7d:89:3a:
9f:94:30:97:28:a0:4a:25:6f:e1:be:e4:02:0b:5c:
c1:3c:b3:34:86:dd:e1:6b:ad:15:7f:2f:6f:6b:0c:
9c:23:11:c6:61:e8:35:b9:b7:58:e8:56:5e:e2:0b:
75:e0:54:ea:81:1f:2a:f8:3c:7f:44:8a:a0:0f:37:
02:06:62:69:ed:8c:8b:05:c0:7d:92:ac:f9:e1:6f:
4c:72:e8:a7:33:a7:02:c6:d2:0b:15:ca:3e:f9:cd:
05:79:a6:44:d1:79:ca:cf:5e:f8:2b:a4:cf:9a:d7:
eb:d4:56:c8:ee:9a:cc:82:76:28:a5:81:ca:20:46:
18:c1:4f:55:b3:6d:d2:9f:32:e4:75:d4:00:26:82:
61:22:0b:25:16:0d:87:4c:6a:f7:7d:dc:14:76:37:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:42:4C:6E:FB:76:92:19:1A:45:1C:8A:8E:E1:9F:34:82:FF:83:86
X509v3 Authority Key Identifier:
keyid:BF:07:FA:84:49:89:13:CD:0A:F2:47:B9:8F:C2:E4:DA:F1:47:F7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vwf6hEmJE80K8ke5j8Lk2vFH9-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:41:a8:21:cd:28:ac:44:10:44:94:e4:e2:f2:b3:10:6f:5b:
93:59:8d:90:8f:48:e4:f9:1c:6c:fb:c4:7c:e1:14:33:bc:32:
ad:9a:33:f1:13:56:29:57:70:0d:05:30:3a:5b:2a:74:40:af:
59:4b:64:ca:f4:56:17:5f:45:65:e6:25:08:19:b9:29:fa:4e:
9d:31:87:bf:88:05:a8:c5:6c:0b:94:4d:8c:35:fe:e5:96:44:
90:c5:f0:c7:43:ef:3a:c2:22:6e:5e:f6:e2:a5:58:75:bf:6d:
40:76:a2:fa:cf:28:8a:77:f3:cb:da:38:31:93:13:bb:ee:c1:
5a:56:82:0e:02:d0:cf:81:68:23:57:4e:b2:2f:9e:01:6f:2f:
7f:a1:ad:04:eb:62:ff:7f:63:a2:98:ca:6b:b0:1c:f1:6b:29:
ac:25:aa:f8:21:50:fd:68:4e:3a:cf:5e:e3:ee:6b:48:10:70:
5b:37:ec:ef:45:7f:39:2b:96:2b:58:44:03:85:e5:dc:d2:8f:
db:6f:52:e1:d3:b6:39:5a:39:f5:e6:5a:4d:a6:cb:37:27:9d:
02:ee:1c:6c:d3:c0:83:5f:12:42:25:92:65:db:07:ab:75:72:
1a:24:59:ab:13:18:a4:6f:db:7d:df:2b:8c:39:96:84:31:6f:
9a:e6:ee:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDY3v9yW2H0QlVlV9nNiF/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMDdmYTg0NDk4OTEzY2QwYWYyNDdiOThmYzJlNGRhZjE0
N2Y3ZTkwHhcNMjYwOTI1MTQwMTI4WhcNMjYwOTI2MTQwMTI4WjAzMTEwLwYDVQQD
EygyYTQyNGM2ZWZiNzY5MjE5MWE0NTFjOGE4ZWUxOWYzNDgyZmY4Mzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HIZhOXhTkwzg9mLB84dWO6poR2/
sa2kSycK8mqf+cs68ER27QGrd0+QUf3Wwt/nDdftCTOM0gyGfb6s5uU57xrSQKfk
iIhVA3Jzih1kmqAQb8s5F7XnpDnQiVjb4qOT91sOrNR9iTqflDCXKKBKJW/hvuQC
C1zBPLM0ht3ha60Vfy9vawycIxHGYeg1ubdY6FZe4gt14FTqgR8q+Dx/RIqgDzcC
BmJp7YyLBcB9kqz54W9McuinM6cCxtILFco++c0FeaZE0XnKz174K6TPmtfr1FbI
7prMgnYopYHKIEYYwU9Vs23SnzLkddQAJoJhIgslFg2HTGr3fdwUdjeWrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpCTG77dpIZGkUcio7hnzSC/4OGMB8GA1UdIwQY
MBaAFL8H+oRJiRPNCvJHuY/C5NrxR/fpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdndmNmhFbUpFODBLOGtlNWo4TGsydkZIOS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8yYzhiYTktZDgwMy00NzViLTkxZDUt
YzdhODcxZDJkZmEyLzEvdndmNmhFbUpFODBLOGtlNWo4TGsydkZIOS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8yYzhiYTktZDgwMy00NzViLTkxZDUtYzdhODcxZDJkZmEy
LzEvdndmNmhFbUpFODBLOGtlNWo4TGsydkZIOS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEGoIc0o
rEQQRJTk4vKzEG9bk1mNkI9I5PkcbPvEfOEUM7wyrZoz8RNWKVdwDQUwOlsqdECv
WUtkyvRWF19FZeYlCBm5KfpOnTGHv4gFqMVsC5RNjDX+5ZZEkMXwx0PvOsIibl72
4qVYdb9tQHai+s8oinfzy9o4MZMTu+7BWlaCDgLQz4FoI1dOsi+eAW8vf6GtBOti
/39jopjKa7Ac8WsprCWq+CFQ/WhOOs9e4+5rSBBwWzfs70V/OSuWK1hEA4Xl3NKP
229S4dO2OVo59eZaTabLNyedAu4cbNPAg18SQiWSZdsHq3VyGiRZqxMYpG/bfd8r
jDmWhDFvmubumQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:31:06 2026 by rpki-client