Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
File: vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft (raw, json)
Hash identifier: 2pqzT86dOz10CtZcys2kc2RPE6EFW6Zv7+IRPV7CgaI=
Subject key identifier: 47:8F:9D:94:A4:B4:CF:A0:3F:FF:F5:92:1B:74:C6:F9:52:AF:50:26
Authority key identifier: BD:63:EA:4F:2C:BF:B7:C8:D3:D6:81:99:40:D3:77:64:AC:5B:B7:D8
Certificate issuer: /CN=bd63ea4f2cbfb7c8d3d6819940d37764ac5bb7d8
Certificate serial: 01A0E7E4475388A76341697B2D119F90A0C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
Manifest number: 018C
Signing time: Mon 28 Sep 2026 12:01:32 +0000
Manifest this update: Mon 28 Sep 2026 12:01:32 +0000
Manifest next update: Tue 29 Sep 2026 12:01:32 +0000
Files and hashes: 1: vWPqTyy_t8jT1oGZQNN3ZKxbt9g.crl (hash: /3Zu7F3Fld413rlq0O5qY7Nwhq1VOe9hk4q0CkH44fo=)
2: y2ErD9gPt2srsosZxZsZGcaxQRw.roa (hash: 0tcvB5250a30cb/eASboxE8tX1iGV0W6SMgOYqA9S+0=)
3: yH4YewMKblaB_L12xQ35G0SXRYk.asa (hash: nott0T0TIvklgCDjdkStX556EDcXcSa/s6c9BihWlRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e4:47:53:88:a7:63:41:69:7b:2d:11:9f:90:a0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd63ea4f2cbfb7c8d3d6819940d37764ac5bb7d8
Validity
Not Before: Sep 28 12:01:32 2026 GMT
Not After : Sep 29 12:01:32 2026 GMT
Subject: CN=478f9d94a4b4cfa03ffff5921b74c6f952af5026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:e4:6f:12:3d:bc:b3:df:11:08:21:6b:03:
e6:81:ff:f3:11:b2:8a:bb:91:18:73:40:9a:55:76:
0f:c2:1a:cd:e9:4f:e2:d2:50:62:17:08:a9:3d:23:
3d:67:26:83:27:e2:f2:5b:b1:73:78:88:7f:36:54:
0c:9b:44:c1:42:22:68:6d:02:6a:7c:df:3a:63:89:
7f:4b:38:13:cc:95:0d:63:e4:05:ab:0b:08:b0:c3:
97:ab:f9:62:a7:66:a5:b2:14:18:9c:e1:b6:1e:8b:
87:b8:7f:f5:8e:4d:09:e3:4f:80:c0:e7:45:3f:e3:
68:64:fb:6a:dd:c5:17:89:8a:78:6f:e8:5e:5a:fb:
9d:ab:09:e2:6d:66:a0:88:93:64:e8:ac:91:d0:06:
b0:e3:0e:dd:73:36:1a:71:4f:f8:39:fb:97:a2:e5:
d9:1a:e7:9c:bc:c8:0d:69:e2:0d:c1:40:86:ca:6e:
4d:99:3f:cd:4f:12:b4:d8:0f:ff:8c:88:82:14:0f:
60:fd:7c:98:26:80:5f:57:c3:8e:4f:f1:60:d6:bd:
fd:65:1b:e6:bb:af:c5:9f:3f:cf:f9:68:6f:64:56:
99:1c:58:49:7d:7b:bf:02:d9:a2:91:01:a1:ed:b0:
bb:8b:bf:d1:1f:b1:51:44:96:f5:33:6d:75:5f:7d:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8F:9D:94:A4:B4:CF:A0:3F:FF:F5:92:1B:74:C6:F9:52:AF:50:26
X509v3 Authority Key Identifier:
keyid:BD:63:EA:4F:2C:BF:B7:C8:D3:D6:81:99:40:D3:77:64:AC:5B:B7:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:89:6c:ea:23:c1:ab:6d:fb:7d:09:a1:39:6c:8f:c7:42:39:
3d:68:ac:6a:f1:3f:01:21:49:bf:ed:e8:57:95:9c:32:bb:93:
62:99:48:2b:c8:33:f8:d3:96:1c:41:aa:a6:87:07:d7:cd:16:
aa:13:53:63:11:1a:26:81:0c:4b:5e:e5:72:5b:1e:20:fe:c2:
0a:62:ae:c7:c5:37:c0:6a:5c:cd:2a:1f:99:64:ab:36:67:21:
62:c7:c1:5a:51:d7:2c:49:9d:9e:05:7d:7b:33:cf:01:b7:81:
46:50:26:21:09:80:76:53:49:68:73:29:39:d1:db:5e:cc:e9:
dd:62:4f:fe:af:5f:b3:d1:d7:3a:a3:46:dd:17:2a:25:2e:f4:
70:32:46:26:3d:59:2c:88:79:c5:70:77:92:b0:8f:e9:63:bd:
51:39:2f:d1:f6:f3:af:e4:8b:ea:47:00:ef:66:de:a2:d2:19:
cd:c3:fd:af:49:a0:d6:f4:c3:cf:84:6d:13:f9:1b:a5:8f:bd:
48:df:81:4b:88:d1:89:9b:a4:ca:43:70:4d:ae:00:30:df:15:
81:b8:36:22:b4:3d:6e:75:1f:dc:3d:a7:94:d9:8b:42:39:53:
3b:85:2f:47:8f:c3:46:25:ce:b2:42:e1:40:9a:49:d5:38:33:
93:c8:a5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 15:58:00 2026 by rpki-client