Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
File: vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft (raw, json)
Hash identifier: auY7ZvJwinFZ7YoQDLgu2sVQfqJK0hYsHX7l4W+GARk=
Subject key identifier: 9A:70:6C:B1:05:1B:41:4A:E3:BF:83:46:67:1B:49:C6:B7:33:0F:2E
Authority key identifier: BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE
Certificate issuer: /CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
Certificate serial: 01A0D682A1E069D9F8B9A76C7E117AD7DA0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
Manifest number: 0D3C
Signing time: Fri 25 Sep 2026 03:01:20 +0000
Manifest this update: Fri 25 Sep 2026 03:01:20 +0000
Manifest next update: Sat 26 Sep 2026 03:01:20 +0000
Files and hashes: 1: 3ch1Jb7sFGYOGbilPvREcxXxE6k.roa (hash: J6u00YHUjiuGwv/53UMv+yM4klhV4JggG1AUNdLNZVQ=)
2: mNC5GkRzpe0TcIftq03m_ZQlLiM.asa (hash: l/sJ49tKEXd94Ikw8096y/GdUHEWeA7yG1kPodLn6rw=)
3: vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl (hash: wg+MXWzHdk5Gns+NXyMyQGpgVxL16asAe23T9c8mpq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:a1:e0:69:d9:f8:b9:a7:6c:7e:11:7a:d7:da:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
Validity
Not Before: Sep 25 03:01:20 2026 GMT
Not After : Sep 26 03:01:20 2026 GMT
Subject: CN=9a706cb1051b414ae3bf8346671b49c6b7330f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:c2:d2:d4:0b:ff:dc:86:5b:ed:36:07:05:
ed:bb:3e:1f:0c:23:cd:24:64:08:b5:59:a0:51:10:
47:ab:a1:c8:be:11:02:11:87:4b:47:5c:7a:fb:ef:
4f:68:4b:1e:30:db:e3:38:89:c2:19:90:d0:a9:9f:
c2:a2:f4:67:d1:a1:83:e5:2c:70:2f:38:e9:20:fe:
99:81:98:52:4d:a9:0e:90:ad:13:c0:d3:60:05:f5:
7c:13:66:f8:99:11:43:4f:e1:17:be:b6:e0:14:0e:
95:b6:de:b1:91:e2:ef:67:4e:31:42:57:36:34:79:
73:c0:33:82:d9:45:5b:de:2b:6a:b4:a7:67:c9:d0:
62:57:0d:9d:2b:7e:19:41:de:51:ac:af:b7:c4:78:
54:e9:7b:06:ed:a1:1e:e5:24:67:7d:84:53:bd:33:
9c:d8:63:c4:68:6b:46:dc:37:02:ba:06:25:7f:26:
06:23:23:6f:aa:d9:00:0a:ba:42:80:12:af:2c:99:
62:15:12:a3:f2:15:d9:7d:41:63:ac:11:8a:34:20:
28:0b:ee:e0:1c:b6:68:d0:5b:05:6a:ad:3f:44:d9:
7d:64:0c:6f:28:1c:42:cb:4e:68:b9:20:f6:62:e8:
83:a1:55:a3:e7:47:c1:93:75:d4:34:a2:08:e1:d9:
0a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:70:6C:B1:05:1B:41:4A:E3:BF:83:46:67:1B:49:C6:B7:33:0F:2E
X509v3 Authority Key Identifier:
keyid:BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:32:69:8e:fd:e7:cc:05:0e:41:b4:71:91:d2:bb:c2:58:5b:
b1:e7:57:c8:3d:01:47:45:cc:3a:7c:84:ae:74:58:45:e4:77:
23:05:da:e5:2e:74:f5:20:34:e9:c9:eb:8b:a3:23:c8:ff:6b:
ad:17:ba:9e:46:76:64:68:75:e1:a9:c7:4d:c2:db:f9:42:7e:
c8:f6:8a:d8:ff:da:a7:b6:b6:9b:89:fb:b1:f1:b5:63:bb:76:
e7:ac:8f:4b:f5:89:0e:83:c1:4a:7b:90:41:95:cb:12:03:b6:
7a:ac:6d:c7:bf:84:6a:8f:3d:34:6a:de:7e:e6:3f:4b:ad:cc:
62:c9:98:1d:d6:1a:04:98:d8:21:2d:7f:dc:e2:6b:e6:ea:97:
1d:68:e7:3a:96:0f:ad:2f:fe:90:fa:b9:d2:45:d6:4e:4f:32:
f3:01:1f:61:96:ef:85:be:1e:8d:cd:95:3f:3e:66:de:49:d3:
70:45:29:f1:18:b5:78:a7:46:92:8f:08:a7:cb:8c:7f:d4:57:
84:82:46:e7:42:c7:9e:20:d3:69:bc:f5:14:b4:d1:7f:46:1b:
73:51:2f:84:31:e2:dd:5c:b7:c9:1a:e0:87:48:e3:23:09:b8:
f7:98:e7:5e:42:d6:27:c0:b3:c1:fa:43:71:c7:1c:b4:38:09:
19:9d:c7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:17:34 2026 by rpki-client