Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
File: VC2XGtPC5DjUoxLRod51GBCspOA.mft (raw, json)
Hash identifier: exXhznNQhlhMH32uDa4oezkkTaaq4UlSnjrzbyHOn0k=
Subject key identifier: 59:AF:1F:19:40:96:C0:E1:84:16:AC:53:04:55:9E:5A:37:C5:D0:69
Authority key identifier: 54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
Certificate issuer: /CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Certificate serial: 01A0ED0ACDD9DCD7E6838F3231EBB5818469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
Manifest number: 1A7B
Signing time: Tue 29 Sep 2026 12:01:43 +0000
Manifest this update: Tue 29 Sep 2026 12:01:43 +0000
Manifest next update: Wed 30 Sep 2026 12:01:43 +0000
Files and hashes: 1: MyEobwPvVlPZfo18i7oAV1Xhf8s.roa (hash: +PGToJCT+bUcRHVwTrA1c0sAhKUye1v74DJg5l+yDRc=)
2: VC2XGtPC5DjUoxLRod51GBCspOA.crl (hash: wA3ky+tFKQdlvhEYFYoukU+G7AxDmRMZY6iFidCwaOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0a:cd:d9:dc:d7:e6:83:8f:32:31:eb:b5:81:84:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Validity
Not Before: Sep 29 12:01:43 2026 GMT
Not After : Sep 30 12:01:43 2026 GMT
Subject: CN=59af1f194096c0e18416ac5304559e5a37c5d069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:14:5a:76:ea:b1:fe:39:e0:0b:a3:8d:7e:
9e:e4:6d:1a:fb:a0:83:49:af:f3:9c:f2:2d:86:e8:
45:2e:4d:fc:98:56:cc:2a:04:19:5a:32:f9:9f:9f:
83:f1:cd:ba:66:f6:62:c9:b1:67:37:f5:7f:e0:fe:
8a:3e:dd:03:03:7d:93:25:a2:9e:6a:53:7f:00:11:
1d:0b:22:ec:4f:a9:1d:c4:71:7d:d3:2c:ab:57:11:
73:6d:c0:36:32:5b:ff:70:7e:eb:46:76:f1:4c:0b:
f7:59:fb:f0:35:92:08:a3:18:1f:67:d3:b1:54:70:
ae:03:6b:71:2d:be:13:e1:ce:c4:b3:d6:3b:e2:0d:
d4:90:84:fd:22:fe:3d:07:08:55:69:d7:15:e5:99:
d2:ba:af:d5:dc:9f:a4:5d:19:03:79:a8:58:4e:83:
76:e9:55:8d:77:ba:31:21:01:9a:98:e5:40:c7:ca:
06:99:c3:8a:64:a7:3f:4a:f8:b1:1a:51:01:0b:14:
96:63:56:c7:b5:ce:73:b4:9e:6e:c4:42:ac:10:49:
8c:c5:88:31:3f:b8:f1:cc:d9:46:60:f3:0c:68:25:
f3:f2:bd:50:9d:a6:bd:16:9f:fe:f8:59:10:77:e5:
d4:da:4a:1d:d3:3d:60:d4:31:8c:45:2f:be:34:0a:
bc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AF:1F:19:40:96:C0:E1:84:16:AC:53:04:55:9E:5A:37:C5:D0:69
X509v3 Authority Key Identifier:
keyid:54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:34:b5:67:cd:cb:5c:03:fe:6d:c2:4d:39:ba:07:a1:07:4a:
b0:67:40:f2:af:13:bd:7b:07:b5:91:ac:70:61:58:60:8c:59:
db:7f:97:5b:90:2f:c8:50:de:e7:7c:91:7e:e2:32:3b:96:b0:
bf:c0:a7:6e:66:86:8a:ce:0c:c3:db:fa:56:1d:8d:60:cb:3e:
6d:42:3e:65:ea:8c:46:85:c0:77:5e:30:84:90:23:a9:19:de:
dd:54:a0:cf:aa:5e:03:8d:ce:c7:53:d9:dc:86:e0:7c:3e:df:
59:54:0b:a9:eb:cc:b1:4a:69:db:5b:3f:8c:f8:d5:0a:ad:84:
a4:43:8d:86:a0:3a:9b:4a:a7:9d:d0:a0:5a:87:5f:b2:0e:e5:
25:3c:76:0f:3a:26:76:96:02:e5:97:cf:dd:7d:69:b5:e7:c4:
20:79:f9:7f:c7:b4:43:d4:4d:b6:2a:f1:d7:e4:4a:c9:18:c8:
6c:77:a8:33:f3:e1:ac:6c:7c:78:23:cb:e0:ea:5b:bf:53:8b:
12:07:7c:90:10:cb:8e:99:3f:86:0a:b6:d3:07:15:33:9b:62:
97:d0:23:7f:73:c9:bb:ca:03:b8:4f:d1:56:8a:58:9f:08:62:
8d:d5:f7:c8:1b:0b:80:67:01:4b:7d:c2:42:20:cd:3a:4b:e4:
6e:7d:b7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:40:31 2026 by rpki-client