Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
File: valtAqgi9GJTwq7mgEQdWsJ8PfU.mft (raw, json)
Hash identifier: cRhLQnlmu3K5LZQbtwZ9bMY4KyfLb5xcMYAobAH4cEE=
Subject key identifier: CC:4E:0E:2A:85:2B:F6:30:BB:F6:F6:EE:5F:D4:66:23:48:08:04:46
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Certificate issuer: /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial: 01A110A972BFE5210514DB60EBF25D5645C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
Manifest number: 1A98
Signing time: Tue 06 Oct 2026 10:01:42 +0000
Manifest this update: Tue 06 Oct 2026 10:01:42 +0000
Manifest next update: Wed 07 Oct 2026 10:01:42 +0000
Files and hashes: 1: EhydGNTB-hB89eN92UxIng6UVZM.roa (hash: gWjLjnj1fBxsYuib5uZNn6bhDyaTmXoH7T7zFvCCLkU=)
2: PEaB6XQK_JSckDUEH_ZUUvy4XJs.roa (hash: pHNbC9gTB8A25YDnRH1/ZymWlhpa8gI2FiyHFl3N24c=)
3: SdlkOvmWxZsG3lrNdu-_BWScGdw.roa (hash: BWpyRh5LY7eOyaK5XRYDUHQC4WOnoi30+STAR7V5gbM=)
4: kNnArX8rxSQizIzXcuK9nc5VM20.roa (hash: vhtZwmPY49vps0U0PvF9ig8qAqogrTdDowNB1/EB0pk=)
5: luTG1wEQoJ2CdlwrK7SvZ_P5LnE.roa (hash: mWrhQXIzFzzy6PXlxTLPkj0tx5iEbtFjzb8/vkv2Ot4=)
6: uKP8H6ExLgUqvBel-0TlMaMdYwY.roa (hash: u+LpsbOmzfoAEVZi4Pv4FxFv7TUs4TKRpLcI7uHwFcY=)
7: valtAqgi9GJTwq7mgEQdWsJ8PfU.crl (hash: A3WHH2jOVte4xHFrvUA2BcIO00vmtgdY6GUEfmWfATc=)
8: vyQaTgnZmO6A2QP5fltvyAiHn2w.roa (hash: CuO+A8UIrEVOD42Zu4NLM0xT7n43WzFhoUCyh9EEw7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a9:72:bf:e5:21:05:14:db:60:eb:f2:5d:56:45:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Validity
Not Before: Oct 6 10:01:42 2026 GMT
Not After : Oct 7 10:01:42 2026 GMT
Subject: CN=cc4e0e2a852bf630bbf6f6ee5fd4662348080446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:28:b2:01:00:52:18:c1:db:34:09:b6:53:
24:bf:8c:b2:70:64:79:82:10:97:8b:d4:1d:88:75:
2d:65:04:2e:c6:34:12:f3:02:c5:b0:ff:a7:f2:c3:
f1:d2:d0:d6:5e:6a:98:80:c1:9b:71:10:da:f2:79:
97:5a:71:f8:98:e0:36:28:5c:6a:d4:6b:32:08:a6:
3d:73:ba:fb:d8:2b:53:ea:15:83:0e:fd:68:0b:47:
f9:8a:ad:65:4a:13:5c:88:b1:bc:96:93:4b:6e:5c:
40:09:6f:24:c1:48:75:5e:c5:82:26:e0:c7:1d:52:
8a:9f:d2:12:63:ff:e8:17:f3:1c:8c:08:dd:64:30:
63:db:46:a7:34:48:31:e9:9d:e1:53:19:ac:08:6a:
33:1e:e6:c1:fd:d9:03:cf:9a:57:dd:d4:f2:65:45:
a4:2b:14:ae:48:e2:99:bf:5a:8b:12:0b:63:8e:23:
b3:74:a9:fb:7a:63:e2:62:ef:79:de:87:b2:a2:5f:
1e:c4:86:cc:18:90:dc:85:24:c6:c5:7c:e4:95:8b:
27:0f:18:0d:6c:fc:e3:bb:a9:82:65:62:74:5e:83:
1c:52:7d:9d:67:1b:01:f3:aa:a1:83:53:4c:0c:72:
93:92:97:d7:2b:05:3b:c8:25:c4:d7:79:e6:17:29:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4E:0E:2A:85:2B:F6:30:BB:F6:F6:EE:5F:D4:66:23:48:08:04:46
X509v3 Authority Key Identifier:
keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:62:04:6d:bc:39:80:bb:74:17:01:9b:3f:8f:40:9b:7a:35:
6f:83:db:05:3c:03:a6:65:f3:71:69:c1:5d:14:1a:7e:41:30:
40:fc:9c:21:43:07:8e:12:c9:6b:4c:03:6b:8b:6a:8c:a8:c9:
b0:92:f9:1a:36:14:29:f5:e3:0d:50:e5:1b:1f:d1:e6:4e:23:
6a:9d:3b:1e:b7:cc:5b:c6:ed:97:82:cc:dd:76:66:d1:95:43:
47:6e:01:79:83:43:49:cf:ab:ca:65:87:77:cd:79:5a:c3:31:
1f:66:62:5b:cd:69:2b:d1:66:d0:ae:58:6a:2e:59:e2:7a:22:
91:a2:69:e6:89:a3:45:9c:dd:75:22:fb:9e:eb:23:e5:b9:f5:
3b:7e:9a:09:1b:79:c0:f2:cd:d8:64:8c:d3:ed:4c:d8:6b:15:
c5:a3:77:a0:3f:1e:4e:02:2b:4c:6b:7d:84:92:bc:61:cf:7b:
56:49:f7:91:f0:8d:40:35:2a:39:1c:5b:e8:39:94:f2:3a:5e:
5b:fb:7a:9a:af:51:4b:39:a8:5c:4e:2d:e0:c9:96:76:64:7b:
45:d2:dc:53:d3:4c:3a:11:1a:f4:b9:ee:22:a3:b0:ce:15:a5:
8d:b8:d1:54:ba:0a:e5:63:54:85:c4:aa:c0:9d:6c:53:f8:a5:
e8:26:a2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:18:16 2026 by rpki-client