Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: hF4XMTeqR1r2amu/8UUl49g1VdU8WF8wBxlzwFSqxzY=
Subject key identifier: C0:C0:E6:95:C1:7D:61:99:C8:DA:AE:5C:EC:B9:19:DA:49:B3:F7:BD
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 01A0F869DB655AEF2F8FBED01BD9789B3C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 1A87
Signing time: Thu 01 Oct 2026 17:01:22 +0000
Manifest this update: Thu 01 Oct 2026 17:01:22 +0000
Manifest next update: Fri 02 Oct 2026 17:01:22 +0000
Files and hashes: 1: Og9L-X79pFxCY-PZrsh89NiYOgw.asa (hash: mD3NvocgZjYeAZzNwxBmzTTWsMAM1llMbcLc1vO5R8I=)
2: giX8_ecdQPItnFz-fq6feS4Jd-g.roa (hash: 1ce47GoQT/QAgOwYZvUfKbOA8OpsLu0765OeChH/WJM=)
3: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: 69J7K1xLC3eDrnGumeHrnvSjVGa7hedABBljm582IaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:69:db:65:5a:ef:2f:8f:be:d0:1b:d9:78:9b:3c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Oct 1 17:01:22 2026 GMT
Not After : Oct 2 17:01:22 2026 GMT
Subject: CN=c0c0e695c17d6199c8daae5cecb919da49b3f7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:ec:e6:63:be:1c:6d:49:0e:c9:da:14:83:
04:ca:1a:82:f4:7c:4e:51:e4:03:f0:1b:63:2f:8c:
0b:6d:1e:0a:2e:ba:f9:21:ba:a9:5e:f5:32:f9:2a:
f7:95:66:0e:a0:c4:71:cd:0d:f8:28:ea:66:bb:8c:
ad:9b:12:e3:43:e9:d0:37:90:e7:6b:ee:18:4f:f0:
0c:63:1a:47:fb:ce:62:91:5b:99:66:a4:a0:f9:03:
42:85:a7:c4:36:ae:2b:a4:88:26:d6:4e:0b:2a:1c:
1f:c3:b9:89:c9:5d:3b:9b:8d:82:1c:3f:3d:23:4a:
c3:c1:f1:82:c1:ac:f5:73:4f:0e:3a:de:e1:73:27:
b9:77:3e:03:e0:85:08:a3:23:b9:32:8d:4c:cc:d9:
53:60:82:6d:e5:06:ea:d9:5b:c3:f3:54:c2:cb:61:
36:fa:86:7e:2e:7d:25:3f:44:58:5d:85:e3:2f:5d:
c1:45:82:7a:40:dd:a8:40:6e:50:8d:4a:57:17:af:
91:b1:3c:de:9e:18:64:d3:93:94:e7:1f:4b:6b:f4:
1b:69:57:db:49:3e:54:fc:c9:d8:7d:a1:40:f5:af:
51:dc:34:12:a8:2a:a8:93:f6:c7:49:49:70:49:6d:
66:ad:25:af:45:7d:ce:71:85:ff:aa:2b:0d:8b:4f:
08:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C0:E6:95:C1:7D:61:99:C8:DA:AE:5C:EC:B9:19:DA:49:B3:F7:BD
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:54:47:d8:c4:7d:d0:c3:d4:6b:8d:d9:8e:eb:a2:61:3d:85:
8d:10:3d:20:28:95:d9:92:40:bb:88:b7:b0:47:99:f2:56:a5:
c8:f9:85:14:06:cb:dd:9a:da:f2:15:c6:1d:45:03:19:ef:71:
4f:62:c0:50:03:9d:a1:57:6e:24:e7:d9:fd:b5:ec:76:4d:b9:
61:71:a0:6a:e6:7d:a6:fa:c9:af:1d:e8:3e:56:b3:b4:a5:52:
dc:5a:66:38:0d:6a:1a:57:a7:bd:40:fb:4e:77:49:49:9e:69:
b8:f1:85:89:2c:1a:41:b4:80:24:18:6a:95:e7:c6:e2:30:a4:
83:36:fd:4e:41:54:05:7d:67:04:8f:3e:de:18:56:5d:4a:46:
f2:aa:70:53:78:31:81:19:9c:76:ee:d3:c3:e5:e4:60:37:ac:
74:6d:38:26:e0:7f:dc:9e:23:1b:07:9f:af:cd:f6:f0:bb:10:
a8:34:c2:ea:fc:90:4e:9e:8f:84:64:d7:58:7a:bb:0f:08:cb:
e6:f3:71:82:06:a3:3b:88:d3:d2:7e:ed:d5:b9:c5:8b:b9:dd:
5f:be:94:b5:bb:37:b4:0f:25:4a:e1:4d:72:7f:d7:61:2d:2c:
d4:1d:fb:ee:ce:95:37:a9:06:c8:ca:2d:e1:dc:54:7d:3c:d8:
39:a9:8c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 10:43:55 2026 by rpki-client