Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
File: vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft (raw, json)
Hash identifier: 8vmYXIxCgCATFm9ZXE4DlPnq6c26ibT82sOieeCGqO4=
Subject key identifier: 7F:4E:66:F9:FB:0A:D6:2F:C8:27:B6:30:CA:EA:06:07:08:C5:06:9C
Authority key identifier: BC:1F:4A:CE:71:99:08:E5:DB:67:D5:C8:7E:F0:54:AA:16:76:92:8D
Certificate issuer: /CN=bc1f4ace719908e5db67d5c87ef054aa1676928d
Certificate serial: 01A0DF8698377CE665BBC2732630C110CBBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
Manifest number: ED
Signing time: Sat 26 Sep 2026 21:02:14 +0000
Manifest this update: Sat 26 Sep 2026 21:02:14 +0000
Manifest next update: Sun 27 Sep 2026 21:02:14 +0000
Files and hashes: 1: 1CjpuaS4rw8ge0-ltXV4l2OX60Q.roa (hash: xS3Tyjiosi2JKWLFjDH1G3QDY2JB3RAWfG149pE1I9U=)
2: vB9KznGZCOXbZ9XIfvBUqhZ2ko0.crl (hash: GUyli4a2c7qm0Nt+uuyzvcARkaF/Erahv6nWYChKX2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:98:37:7c:e6:65:bb:c2:73:26:30:c1:10:cb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1f4ace719908e5db67d5c87ef054aa1676928d
Validity
Not Before: Sep 26 21:02:14 2026 GMT
Not After : Sep 27 21:02:14 2026 GMT
Subject: CN=7f4e66f9fb0ad62fc827b630caea060708c5069c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:38:4f:04:b4:0a:fe:23:d4:a0:f8:df:cb:a6:
6a:28:48:eb:b6:4e:ef:e2:b9:90:d5:d7:09:8e:30:
e5:ca:ff:29:20:06:f5:cc:21:cc:e1:ed:39:ee:0b:
78:73:f5:92:65:04:cb:5e:83:95:ab:83:d8:06:68:
f9:0e:74:b6:cc:dd:6f:0b:2d:af:86:4a:14:24:b9:
e0:31:f8:a1:57:cc:5b:ba:00:4e:7b:ec:68:f0:e5:
ea:2a:18:51:50:46:3d:6a:a7:92:bb:3e:e5:6d:dd:
9d:c4:05:db:65:1a:5c:da:84:fc:79:de:29:d9:a0:
93:1b:40:57:3a:d1:d0:cc:31:11:39:05:7c:ed:be:
09:98:20:98:a8:02:43:3b:26:bb:62:92:49:bf:3f:
9a:b3:4e:10:d5:fd:19:6b:ef:26:8e:33:a5:1d:70:
f2:d2:d2:3e:ed:d8:cf:0a:b3:8f:7c:d1:93:63:be:
51:1f:3e:55:9c:c7:f2:b9:1a:a5:25:52:7f:97:c9:
fa:62:42:e6:42:3c:7d:e0:a4:06:97:ed:91:02:a9:
cb:8f:b7:27:26:60:6c:9f:f1:8b:ab:ab:91:c6:37:
48:dc:b3:6f:24:4c:85:4f:fa:76:9f:fe:78:42:51:
58:ba:d9:54:dd:25:a2:91:94:74:fa:b3:98:05:0d:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4E:66:F9:FB:0A:D6:2F:C8:27:B6:30:CA:EA:06:07:08:C5:06:9C
X509v3 Authority Key Identifier:
keyid:BC:1F:4A:CE:71:99:08:E5:DB:67:D5:C8:7E:F0:54:AA:16:76:92:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9e:47:02:b1:91:b9:c7:18:91:f0:9c:3c:3d:e3:19:75:2e:
b0:48:e3:3e:04:88:f6:b8:57:f6:e4:ff:0d:ab:2c:6f:29:d7:
bf:1f:2e:4a:43:92:86:ae:2e:40:3f:40:90:ef:db:fc:0b:4e:
de:8e:c6:5a:26:9c:84:0c:7d:fc:a9:be:e6:02:26:90:d3:58:
ee:e2:68:49:d4:27:dd:5d:c7:aa:5e:b9:80:eb:fa:01:a8:6d:
04:db:6b:ff:61:aa:ac:34:9a:1b:e3:9e:c4:34:2b:dc:27:93:
b2:d1:bb:34:dd:5d:a0:67:75:2d:64:79:a6:7e:4c:5f:20:6c:
5d:14:de:32:9f:ea:4d:80:61:60:76:5a:34:45:2e:2e:8c:46:
54:71:93:6a:1e:21:0b:9c:c5:bc:61:98:bb:30:48:42:c3:39:
04:80:7c:10:70:68:16:8b:d2:09:cd:e3:4c:b1:73:51:6e:83:
01:c5:fd:ab:be:68:ea:bf:34:93:4f:d6:d4:ee:99:b4:ac:8e:
6b:d8:81:14:3b:79:43:c5:b2:91:c5:79:c1:b4:96:83:8d:35:
09:ef:49:95:5f:db:04:10:e2:b9:1b:b1:87:7b:41:ec:d1:f3:
46:f0:6f:ed:6c:bb:37:5d:12:af:f8:cb:d7:93:03:3c:33:00:
6b:87:a4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:12:37 2026 by rpki-client