Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
File: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft (raw, json)
Hash identifier: iYEzh/f7CTX3DuSCbSPfzENycttng2GR9H1j9/wcgno=
Subject key identifier: 6D:9C:DC:63:C1:5C:98:DD:A5:49:EA:45:9C:7C:6C:B4:C6:2F:EF:D9
Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
Certificate issuer: /CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Certificate serial: 01A12FFC98CBFDC2F38EF1DB5488FB8C57E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
Manifest number: 1A9F
Signing time: Mon 12 Oct 2026 12:00:45 +0000
Manifest this update: Mon 12 Oct 2026 12:00:45 +0000
Manifest next update: Tue 13 Oct 2026 12:00:45 +0000
Files and hashes: 1: E-AZAYW2qhUsuxgQihaSy4RhoY0.roa (hash: l+7T0JWdCWQ5tKjG5dZn2DS4OH6HFvOG8YRDG8ncZNg=)
2: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl (hash: TvH6M92Mb/YcENY0Ms1MA7B2K6oTVqkX37IZKtea6o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:fc:98:cb:fd:c2:f3:8e:f1:db:54:88:fb:8c:57:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Validity
Not Before: Oct 12 12:00:45 2026 GMT
Not After : Oct 13 12:00:45 2026 GMT
Subject: CN=6d9cdc63c15c98dda549ea459c7c6cb4c62fefd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:46:92:22:0a:c3:9a:95:0b:26:d4:20:67:
91:a2:c6:10:6a:33:e7:3f:4e:88:0d:70:79:a3:b6:
47:ac:17:e0:30:06:d1:43:d1:33:7c:f9:6b:28:fb:
b0:fa:83:c9:75:7a:f9:0b:37:1c:1e:20:79:29:d1:
01:41:86:41:33:54:fb:ab:b3:9b:4d:fb:af:cf:64:
61:ee:cb:39:19:e1:61:13:f7:7d:cc:7b:ee:64:aa:
53:0a:6a:d0:db:c4:ca:ea:ac:b8:91:46:0a:dc:b9:
05:c6:f3:30:72:24:50:51:0e:5c:8d:c8:f9:45:29:
d3:f0:d8:f1:91:ae:c1:b7:e4:be:83:f3:e0:ad:d5:
85:69:35:1d:79:ba:f4:92:4f:39:8b:a7:ed:a7:9c:
95:0b:10:51:26:f3:73:89:8a:c7:58:33:98:28:ff:
b2:b6:a3:c0:53:77:62:fa:42:e1:a0:f4:2b:54:ae:
3d:8b:60:d0:fd:b2:3c:6b:e6:8f:12:cb:00:54:66:
67:36:8c:e9:6a:b0:f0:70:f0:f2:89:c2:ad:40:33:
d8:c4:67:f8:0c:13:95:8f:49:e2:6d:52:6e:bb:d7:
a5:ad:52:6d:c4:90:07:fb:f3:11:f7:c1:f2:aa:2f:
6b:68:8c:2d:d9:73:49:08:5b:c8:05:e0:ed:d0:55:
aa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9C:DC:63:C1:5C:98:DD:A5:49:EA:45:9C:7C:6C:B4:C6:2F:EF:D9
X509v3 Authority Key Identifier:
keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1e:4a:33:65:04:4b:25:83:94:82:a5:96:08:5b:c5:f7:ce:
95:54:80:a7:2c:db:27:5c:8d:6d:34:7b:a7:84:42:d2:70:9c:
8d:bc:5b:e2:c9:a1:74:13:35:4b:24:1f:7e:46:79:d9:fc:cc:
62:65:e6:28:24:ba:62:c9:d8:cd:f4:71:ff:78:7f:d0:4c:79:
e7:76:ad:7e:5a:52:e0:d7:35:bf:14:c5:5c:4e:f9:c2:b7:43:
a8:ce:db:13:fd:1a:2a:a5:46:3c:92:f8:58:a6:47:d5:32:62:
5b:63:35:ce:bd:81:0f:d1:fe:4b:dc:d8:b7:da:ad:da:11:08:
ea:1d:80:ee:2a:25:df:bc:d4:28:d1:aa:6f:67:8b:37:cf:d7:
6b:2c:ef:9a:81:4d:41:1e:cc:b9:ae:42:ce:ad:7b:48:b1:e1:
41:e9:f0:5d:e5:f0:c8:48:de:40:e5:68:dd:03:f6:2e:d2:66:
99:ff:55:56:bc:4f:69:e7:bc:fe:09:7a:e2:b7:cb:df:bf:70:
30:30:be:60:6b:02:da:c0:a1:71:5b:04:13:3b:4d:82:65:1b:
5e:c4:00:62:9e:23:9e:05:7a:0a:d0:9f:18:1e:6e:70:78:b7:
c6:d1:18:5e:31:23:ca:84:cd:ae:43:f5:4b:f1:8c:1e:cf:9f:
91:16:7c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:14:36 2026 by rpki-client