Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
File: VC9jP3bo2Krqoytazhaj2zlD2Aw.mft (raw, json)
Hash identifier: lxMD4kLDDHAPFGRlhwx99SLkuN6YWQA/U2EjcvDKnek=
Subject key identifier: 76:63:6E:04:C4:E9:78:CF:B5:B6:CC:25:64:82:CC:3A:A4:33:E0:C1
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 01A0CDEC94A5D931A11460A5707BFC6A257F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
Manifest number: 1A87
Signing time: Wed 23 Sep 2026 11:00:28 +0000
Manifest this update: Wed 23 Sep 2026 11:00:28 +0000
Manifest next update: Thu 24 Sep 2026 11:00:28 +0000
Files and hashes: 1: 35RKWFaAWG0FZ0_sumSRQjo-ZTk.roa (hash: ZVFWp4+g/AarEhCpcB89stJLNFioN0GCQ4WE7V4D3XE=)
2: 3e1aB77stWTp_pcWReBzNO2IJyQ.roa (hash: y600ju7YKSbJWZwn4QGcu4eyhB4Kn+pcLohTFXP1j3U=)
3: VC9jP3bo2Krqoytazhaj2zlD2Aw.crl (hash: YIQqB4iTO8Kc278C52fMBc7cMNoWBFhG6GZUA7ZVBQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:94:a5:d9:31:a1:14:60:a5:70:7b:fc:6a:25:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Sep 23 11:00:28 2026 GMT
Not After : Sep 24 11:00:28 2026 GMT
Subject: CN=76636e04c4e978cfb5b6cc256482cc3aa433e0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:6f:21:1c:0e:95:36:51:1d:70:9e:17:53:
1a:f2:46:ba:ed:e1:df:90:16:e5:d0:b5:bf:24:38:
c6:89:23:c5:de:78:fa:b5:a7:28:85:8a:cf:ea:fb:
71:bf:cb:bc:9c:a4:8a:68:a5:b8:12:ed:a6:f7:95:
53:82:eb:ec:db:bc:cb:d8:42:9d:ca:a2:c5:59:6f:
df:ff:25:d2:ec:23:df:3e:27:84:f1:de:61:c8:8e:
15:df:e1:4f:fc:09:db:be:ee:76:e4:bf:4d:f4:42:
d1:a0:68:e7:c0:86:3a:1c:db:60:fe:92:9f:2b:31:
d6:03:31:77:84:11:17:d8:f2:61:58:fb:7b:2f:85:
91:9b:3b:44:83:4d:68:31:42:36:d6:c6:db:f5:80:
9a:b9:0a:38:8b:1e:34:d4:19:aa:e5:c9:63:34:79:
e6:84:e3:19:b9:88:9c:ab:ea:d5:88:c0:14:a6:e3:
e3:8d:52:a2:4e:36:a7:c2:6c:97:ca:03:1b:b5:e1:
52:77:bf:c9:a1:a3:dc:c8:71:58:8f:d7:a5:0d:0c:
95:75:d9:da:0d:7e:df:34:6d:06:88:4f:54:1c:e4:
43:1d:f3:b1:f5:cc:78:05:41:14:28:38:42:e6:19:
76:11:30:f7:85:5e:2a:cc:16:d7:61:80:4c:81:69:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:63:6E:04:C4:E9:78:CF:B5:B6:CC:25:64:82:CC:3A:A4:33:E0:C1
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:74:41:9c:76:5a:b4:a7:33:e0:1f:94:aa:a1:cc:58:c3:4d:
6f:47:e0:4f:4f:51:c7:87:51:16:d4:7b:19:a1:5d:40:f5:d6:
9b:f5:f8:fe:71:c2:b3:06:92:89:7d:f6:0e:b6:64:10:eb:07:
fb:35:75:3c:c8:72:1e:4d:50:fc:5f:cd:95:31:22:63:f7:4a:
c3:9e:84:95:ba:c1:e3:ab:f7:74:46:fd:a6:1b:ed:78:d7:b1:
2b:1f:98:e3:df:00:ba:f9:91:b4:f1:d0:54:2c:e4:89:d6:c6:
fb:60:ea:5e:87:31:64:fc:69:47:5b:3f:5b:97:93:4f:67:69:
94:e5:c3:48:41:45:12:db:c1:ab:21:4c:99:e1:54:ba:cf:95:
d8:15:c8:5e:4f:67:cb:fe:31:5e:18:ed:d2:40:0c:0b:4d:fc:
c5:cb:3e:1f:b4:43:7b:2a:4e:11:2e:9e:1b:53:2a:4f:a7:97:
f7:6c:8e:c2:ff:c8:f0:b8:6a:ad:ba:2d:76:9c:22:eb:45:43:
7a:13:fd:86:14:02:7b:69:34:72:3f:14:8c:ef:8c:e5:7b:0f:
94:e0:ec:ea:81:2a:6a:80:28:f6:76:d4:cb:f7:d1:32:8d:50:
4b:b7:95:20:74:35:56:93:26:5e:a3:8f:84:6b:f9:aa:47:c7:
c2:7f:99:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDN7JSl2TGhFGClcHv8aiV/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MmY2MzNmNzZlOGQ4YWFlYWEzMmI1YWNlMTZhM2RiMzk0
M2Q4MGMwHhcNMjYwOTIzMTEwMDI4WhcNMjYwOTI0MTEwMDI4WjAzMTEwLwYDVQQD
Eyg3NjYzNmUwNGM0ZTk3OGNmYjViNmNjMjU2NDgyY2MzYWE0MzNlMGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU5vIRwOlTZRHXCeF1Ma8ka67eHf
kBbl0LW/JDjGiSPF3nj6tacohYrP6vtxv8u8nKSKaKW4Eu2m95VTguvs27zL2EKd
yqLFWW/f/yXS7CPfPieE8d5hyI4V3+FP/Anbvu525L9N9ELRoGjnwIY6HNtg/pKf
KzHWAzF3hBEX2PJhWPt7L4WRmztEg01oMUI21sbb9YCauQo4ix401Bmq5cljNHnm
hOMZuYicq+rViMAUpuPjjVKiTjanwmyXygMbteFSd7/JoaPcyHFYj9elDQyVddna
DX7fNG0GiE9UHORDHfOx9cx4BUEUKDhC5hl2ETD3hV4qzBbXYYBMgWmORwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZjbgTE6XjPtbbMJWSCzDqkM+DBMB8GA1UdIwQY
MBaAFFQvYz926Niq6qMrWs4Wo9s5Q9gMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDIt
NjliOTUzYzlkNWFhLzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDItNjliOTUzYzlkNWFh
LzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXRBnHZa
tKcz4B+UqqHMWMNNb0fgT09Rx4dRFtR7GaFdQPXWm/X4/nHCswaSiX32DrZkEOsH
+zV1PMhyHk1Q/F/NlTEiY/dKw56ElbrB46v3dEb9phvteNexKx+Y498AuvmRtPHQ
VCzkidbG+2DqXocxZPxpR1s/W5eTT2dplOXDSEFFEtvBqyFMmeFUus+V2BXIXk9n
y/4xXhjt0kAMC038xcs+H7RDeypOES6eG1MqT6eX92yOwv/I8Lhqrbotdpwi60VD
ehP9hhQCe2k0cj8UjO+M5XsPlODs6oEqaoAo9nbUy/fRMo1QS7eVIHQ1VpMmXqOP
hGv5qkfHwn+ZMg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:16:58 2026 by rpki-client