Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
File: VC9jP3bo2Krqoytazhaj2zlD2Aw.mft (raw, json)
Hash identifier: u8MsfxsBjysCzsdHZVtbb370/zT9QAFZCiUMpgy6BuA=
Subject key identifier: 48:03:5E:DE:6B:27:6A:29:EC:61:F3:1F:07:6B:BC:89:C5:1D:81:72
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 01A0D7969B38B36767A0AAF6292E106EDC24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
Manifest number: 1A8C
Signing time: Fri 25 Sep 2026 08:02:46 +0000
Manifest this update: Fri 25 Sep 2026 08:02:46 +0000
Manifest next update: Sat 26 Sep 2026 08:02:46 +0000
Files and hashes: 1: 35RKWFaAWG0FZ0_sumSRQjo-ZTk.roa (hash: ZVFWp4+g/AarEhCpcB89stJLNFioN0GCQ4WE7V4D3XE=)
2: 3e1aB77stWTp_pcWReBzNO2IJyQ.roa (hash: y600ju7YKSbJWZwn4QGcu4eyhB4Kn+pcLohTFXP1j3U=)
3: VC9jP3bo2Krqoytazhaj2zlD2Aw.crl (hash: qOi8KalYlEmX+ix0t/8MZAnIuy/UGTVyBkGpfAPWt3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:9b:38:b3:67:67:a0:aa:f6:29:2e:10:6e:dc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Sep 25 08:02:46 2026 GMT
Not After : Sep 26 08:02:46 2026 GMT
Subject: CN=48035ede6b276a29ec61f31f076bbc89c51d8172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9f:6e:67:ce:a2:8e:48:66:ce:b4:ad:f4:a7:
dd:c3:81:30:65:2c:86:f7:d6:bf:3a:1b:fc:a3:34:
79:39:62:7c:fd:2e:26:ae:91:a9:b2:1e:b6:9f:4e:
24:64:03:a0:08:0a:e8:dc:7a:b5:0b:fc:f4:27:5e:
b3:97:34:28:57:16:70:39:d3:86:36:be:f8:a9:ed:
17:f4:1c:0b:48:98:bf:e2:7c:75:28:56:3f:c6:9a:
31:e3:85:4a:07:21:7b:2a:5d:8f:14:c6:ac:91:18:
fe:d1:98:df:8f:da:98:8a:c6:80:50:13:b8:3c:15:
42:f6:f9:55:5c:55:e3:e8:90:a0:88:4c:5b:34:4e:
da:5a:d9:e7:06:9b:1a:34:40:48:5b:10:fb:f2:3a:
46:d8:62:72:00:9f:0f:56:dd:0f:54:30:00:a1:79:
18:f4:22:87:4f:58:c6:da:c9:aa:28:83:d1:b5:a2:
83:15:7a:cc:11:b9:d8:5a:7e:00:21:58:ee:38:14:
99:9f:ec:db:cc:8a:df:be:f4:3e:6c:96:3c:b0:64:
8d:bf:60:f7:ef:15:57:ed:5f:a6:d9:07:cc:d5:3d:
b9:6e:c5:e3:62:03:9f:38:49:d0:9c:95:78:8f:7a:
61:2d:9e:f0:21:80:f2:e2:7f:57:90:21:a9:8d:8f:
e4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:03:5E:DE:6B:27:6A:29:EC:61:F3:1F:07:6B:BC:89:C5:1D:81:72
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:62:4a:a1:c5:ad:43:3b:42:49:88:e8:fc:62:de:1d:aa:69:
6f:c7:0c:65:f7:60:d6:96:49:3e:01:ee:03:d8:05:6d:5d:7c:
79:86:e6:37:aa:d6:cd:39:f5:42:01:f0:1f:e3:bc:ba:76:5b:
c4:e4:2b:db:e6:50:40:25:b1:a8:ed:ec:c9:95:b5:0a:e8:5f:
30:f4:a8:a3:d2:b3:a8:08:aa:46:e0:f0:43:08:fb:47:06:08:
ef:dc:b0:2e:c7:e1:8e:fc:97:59:fb:44:07:07:6c:fb:1c:27:
e4:f5:60:39:c9:ac:b5:b9:57:01:12:6e:25:64:8d:05:1b:f1:
aa:ef:c8:cb:bc:04:20:e7:ca:cb:8d:28:74:2b:f5:53:c8:1f:
ab:b7:97:2b:6d:8a:d6:b1:50:67:b7:9f:ad:64:1b:6a:80:5e:
b0:0c:5f:b8:57:d4:29:ed:07:0b:0b:09:75:31:e7:08:7d:9a:
cf:14:72:09:89:07:8c:76:71:1c:a9:65:88:00:19:2a:2b:a2:
6c:c2:78:52:2c:d9:80:a4:68:4c:58:ed:35:0c:f4:3f:91:36:
18:0b:98:c3:2d:81:52:c8:0d:87:e2:8c:8e:1e:b6:e7:71:31:
3f:f9:fa:af:1d:47:24:15:08:23:b4:b2:f6:fb:4b:58:65:7d:
e3:9b:8f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:25:37 2026 by rpki-client