Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
File: VlIv9fvKiFRLh6NC_veNHJH8_ds.mft (raw, json)
Hash identifier: oh0aozoVyvUsjtyLPrzN9jsRwUA9ol3IpAvxh9qEu60=
Subject key identifier: 13:83:1C:FE:3E:B9:2E:A1:00:75:81:1F:F4:07:B0:3D:EA:EB:48:13
Authority key identifier: 56:52:2F:F5:FB:CA:88:54:4B:87:A3:42:FE:F7:8D:1C:91:FC:FD:DB
Certificate issuer: /CN=56522ff5fbca88544b87a342fef78d1c91fcfddb
Certificate serial: 01A0D494622CF04B812C6D089B30EA738BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
Manifest number: 0258
Signing time: Thu 24 Sep 2026 18:01:29 +0000
Manifest this update: Thu 24 Sep 2026 18:01:29 +0000
Manifest next update: Fri 25 Sep 2026 18:01:29 +0000
Files and hashes: 1: 5KONAqD1frCRl3iURxlCjgsNLOg.roa (hash: tGnKJ+BSY1DMf6D9UEKBenHfaVs3CddfA0kG2ueymKY=)
2: TrfwfhcY8GGswLkgJrkJWsWSAlc.asa (hash: zmO01xmmzNKQw6cPo8ZkDqbcz8cu3YAmuN8CJGkozWA=)
3: VlIv9fvKiFRLh6NC_veNHJH8_ds.crl (hash: ndjzdJtSffe6eGrZI85zkfcHW/6JTvXVAUBPPxFwvZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:62:2c:f0:4b:81:2c:6d:08:9b:30:ea:73:8b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56522ff5fbca88544b87a342fef78d1c91fcfddb
Validity
Not Before: Sep 24 18:01:29 2026 GMT
Not After : Sep 25 18:01:29 2026 GMT
Subject: CN=13831cfe3eb92ea10075811ff407b03deaeb4813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1f:45:0b:c3:0b:57:bd:6d:9f:00:93:5c:e9:
1a:ce:19:36:6d:bc:b8:64:38:3f:b3:5a:b9:be:2b:
5a:58:65:dd:42:91:bf:9d:97:2a:87:ac:6f:c7:a1:
21:b4:1f:42:78:08:42:a8:1d:69:01:a2:55:09:0d:
04:ce:32:54:83:c9:55:21:a8:b4:ae:96:f8:47:5b:
2f:5f:f1:df:6a:a4:72:4c:0e:e9:57:fc:24:10:fd:
ea:79:c4:de:a7:3f:32:5c:1e:8e:c2:64:f9:de:f0:
80:ab:af:9b:9c:33:9a:3f:2b:46:73:40:61:f3:24:
4b:d6:c2:cd:57:b1:5c:8c:2f:a4:ce:65:8f:92:02:
e4:b4:40:33:30:7a:83:e4:35:53:ad:95:03:f9:5b:
0d:ce:58:51:a6:4c:b0:8a:91:45:04:42:d9:23:c3:
a7:eb:0e:ff:19:bb:29:78:77:5f:f4:87:fa:5c:fd:
18:3b:94:c6:6c:36:12:03:7e:22:c1:d1:1f:2c:3a:
35:25:a1:1a:12:0c:1a:9e:f6:8d:78:9f:d9:8e:36:
45:74:b0:f9:79:37:e5:55:e4:a0:8d:12:d3:71:7d:
2d:3c:87:e0:29:ef:86:19:fb:8e:21:fc:69:76:ae:
4d:66:a8:32:bb:16:9a:ab:5c:59:78:db:6b:60:29:
d1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:83:1C:FE:3E:B9:2E:A1:00:75:81:1F:F4:07:B0:3D:EA:EB:48:13
X509v3 Authority Key Identifier:
keyid:56:52:2F:F5:FB:CA:88:54:4B:87:A3:42:FE:F7:8D:1C:91:FC:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:97:cf:15:f3:ba:cf:e8:47:87:1a:8a:ab:7c:a1:19:b3:83:
9a:69:16:68:68:0e:56:d0:a2:92:b0:19:8c:22:23:be:87:af:
50:f0:98:28:fc:5a:df:ec:43:9e:f8:2f:47:0e:5d:60:ed:05:
38:68:00:79:6d:35:d4:bf:96:f9:cf:f9:ef:b7:cc:87:b0:f0:
40:4b:03:c1:68:70:2d:f2:8d:b5:fc:ca:21:e5:11:3c:0f:85:
96:26:75:dc:38:6a:4b:60:25:65:52:8e:12:a8:d3:2a:c5:eb:
30:34:e6:56:22:17:fd:ae:fb:14:e3:6a:35:69:b2:9e:ad:81:
ae:71:74:3a:87:d6:4f:19:14:9d:a1:e4:ed:f1:7f:7e:a5:49:
02:ec:15:4d:69:5a:69:6d:e4:69:9a:8a:bd:a7:bc:e6:21:b1:
c1:53:8f:11:12:53:b9:8f:56:42:4c:1e:ba:c8:3a:48:a0:3f:
60:da:7d:dd:94:54:3b:21:1b:d8:37:dc:7d:e6:3e:3c:5a:94:
4f:ac:6e:ed:e1:2b:6a:04:fc:ed:71:ce:61:d7:b9:31:c4:27:
52:f0:ff:28:c2:06:d6:a8:00:77:af:22:78:ba:8d:7a:f7:ad:
ad:a2:00:87:c8:d8:2a:4c:ac:3b:d2:8c:10:13:ce:4f:68:14:
59:59:a8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:56:15 2026 by rpki-client