Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft
File: rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft (raw, json)
Hash identifier: BvreuAj0lDvqA1ibf4eEhryWzszLSTNHKHTE3Tu/QWc=
Subject key identifier: D2:83:FD:CA:3F:84:3E:2F:7F:B5:E5:1A:8B:FE:1A:D9:A7:2C:11:D5
Authority key identifier: AD:5C:E5:53:00:60:70:FE:08:03:70:AD:FB:94:4E:D2:9B:7D:94:11
Certificate issuer: /CN=ad5ce553006070fe080370adfb944ed29b7d9411
Certificate serial: 01A0E888BA9B8E70F26E9B31B068FFC80B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft
Manifest number: 0163
Signing time: Mon 28 Sep 2026 15:01:09 +0000
Manifest this update: Mon 28 Sep 2026 15:01:09 +0000
Manifest next update: Tue 29 Sep 2026 15:01:09 +0000
Files and hashes: 1: Di2m4-5_QDl5Rldoh59q9lj5dCY.roa (hash: GNTOuw95a8w2YtoMmrRI/JIWU21DxcdrGmYPu8oxIao=)
2: rVzlUwBgcP4IA3Ct-5RO0pt9lBE.crl (hash: KTlCy0nqY0cRmH0aKKFTl2YevSZcSOnvkQkAFoumw8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:88:ba:9b:8e:70:f2:6e:9b:31:b0:68:ff:c8:0b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5ce553006070fe080370adfb944ed29b7d9411
Validity
Not Before: Sep 28 15:01:09 2026 GMT
Not After : Sep 29 15:01:09 2026 GMT
Subject: CN=d283fdca3f843e2f7fb5e51a8bfe1ad9a72c11d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:6e:d5:fb:3a:0b:5c:c0:dc:2f:49:26:06:
ca:41:72:a3:d7:a6:95:3a:7c:15:95:64:cd:25:af:
81:87:2f:a5:b5:6d:84:f1:f7:70:3b:24:e5:e5:81:
f8:c2:a4:77:9d:ec:57:10:c3:8e:fd:43:bd:66:ce:
3e:ff:e7:4f:41:90:11:71:67:5a:3b:68:25:54:a4:
c4:c2:04:c2:98:79:41:dc:6c:ad:9d:ab:b4:c3:bd:
1e:b1:5f:6a:3b:41:45:d2:5e:64:9a:67:f6:17:fb:
b3:c5:8e:c9:6a:80:f9:00:11:0c:76:36:6d:3b:bd:
43:e1:7d:aa:84:08:34:4f:65:3f:ec:12:9e:a7:ce:
c5:fe:51:8b:8f:e1:cc:cd:20:f2:39:6a:7c:54:9c:
6a:82:0b:61:1e:c1:e5:16:2a:2d:4a:fc:de:fe:74:
bf:01:c8:73:4a:9b:05:77:ce:66:3d:06:53:d2:77:
3f:9f:dc:57:39:57:4a:b0:c1:bc:d0:10:f0:69:1f:
cb:59:41:c0:7d:d1:97:39:10:20:c9:35:9e:38:17:
ea:5f:c1:c4:98:35:06:7f:08:49:70:f9:91:fd:17:
b6:ca:63:a0:e7:d5:4e:c2:76:c4:f8:e0:a3:86:06:
3e:d9:f8:91:e7:09:bb:78:62:a8:01:c6:f9:19:24:
0e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:83:FD:CA:3F:84:3E:2F:7F:B5:E5:1A:8B:FE:1A:D9:A7:2C:11:D5
X509v3 Authority Key Identifier:
keyid:AD:5C:E5:53:00:60:70:FE:08:03:70:AD:FB:94:4E:D2:9B:7D:94:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ab:5c:d9:60:fb:52:7f:da:29:33:9d:10:da:6c:bd:64:9b:
b1:fa:93:f3:72:ee:0a:db:94:a3:f1:96:ba:8e:71:57:6d:4d:
1c:95:93:3c:c5:9b:46:5e:fb:69:96:bc:8d:18:c4:13:91:49:
bf:6a:52:78:ea:16:a8:50:2a:91:b2:19:d6:a0:90:3b:b4:30:
f4:98:ad:d2:b8:e5:94:e3:ca:5d:0d:9b:ca:d7:cf:7a:72:f1:
dc:7e:f3:dc:40:b4:ae:86:ff:03:e9:0e:a2:fc:dc:ef:79:43:
0d:e1:ba:54:37:37:c2:76:69:72:0b:6f:06:2d:4e:dc:ea:d4:
c6:41:5a:4c:55:25:45:a7:35:2d:3c:3e:95:a4:30:b9:bd:99:
4d:a6:79:88:35:18:2d:3a:4a:47:99:8a:f5:0a:79:9b:a5:a1:
15:32:d7:6d:b5:da:26:49:10:3d:65:99:32:a7:f2:d6:e4:20:
e4:da:66:be:91:6f:f2:40:7f:31:bd:1f:0d:a4:e2:2a:d5:a5:
fa:67:0c:fc:b7:80:84:be:d6:a6:51:45:b1:46:91:80:cb:12:
7d:65:67:da:db:d0:2c:02:63:47:a0:cb:0c:b8:e9:71:4d:d6:
87:7c:3d:ea:f3:2e:7a:87:b2:9e:cd:5f:94:32:04:01:06:1e:
70:e3:6a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:36:20 2026 by rpki-client