Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: cM2cl77m05u87HyejUE1nElTKPoc/unysFlJlOdvKCY=
Subject key identifier: AC:4C:59:4B:4D:3F:9A:80:07:3C:D9:2D:69:F0:AC:75:39:65:A9:1D
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 01A0E36235BB40C05D6D96EFD6C70E8D72EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 194F
Signing time: Sun 27 Sep 2026 15:00:59 +0000
Manifest this update: Sun 27 Sep 2026 15:00:59 +0000
Manifest next update: Mon 28 Sep 2026 15:00:59 +0000
Files and hashes: 1: C0a13JZ0RSPrkMSd5oEqtcq4rwk.roa (hash: 6ypJkRhP+y1RaXO9CpneyswfDWMF34KW/IwPdUjopIU=)
2: SPQiaZ3julcN6ImZOduLjd1qohM.roa (hash: 0YIxYrRhuUKf32GXdhAAMFjgeWQ0j2Tfw0leBwT+5Aw=)
3: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: JMLu90136NXn0uvjgTvvclV1FBKa/4ItJCQXRESzlQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:62:35:bb:40:c0:5d:6d:96:ef:d6:c7:0e:8d:72:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Sep 27 15:00:59 2026 GMT
Not After : Sep 28 15:00:59 2026 GMT
Subject: CN=ac4c594b4d3f9a80073cd92d69f0ac753965a91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:8a:2d:55:a7:21:01:26:5a:c7:13:84:7c:
94:08:e9:d1:7f:26:46:38:0b:67:ed:13:c4:f6:5f:
48:aa:db:0e:8f:81:e6:4c:77:d6:a3:4e:14:83:ff:
e7:94:90:bf:53:4a:93:e5:e6:91:3e:21:aa:d7:2d:
82:09:72:41:77:49:c9:0c:68:df:de:13:d7:c3:70:
f8:be:27:b8:1f:19:37:c4:a8:7d:a7:ed:2d:2e:00:
ab:e5:a0:0f:e9:2e:67:8b:02:c9:02:46:20:5e:df:
a0:66:92:d3:b5:b4:3b:f1:2d:dc:46:e0:76:0e:85:
6b:5f:6f:83:2a:09:ca:95:e5:7c:b1:76:d8:91:3e:
dc:98:7a:0f:38:bf:10:39:fe:b9:bc:29:f6:56:12:
d1:31:d4:05:e2:21:9a:1c:16:f0:2f:3f:4d:c2:47:
51:d8:46:4a:40:af:a9:50:b2:73:fc:5b:e1:fe:b8:
21:dd:19:10:da:78:2f:c9:6c:b5:4b:6f:94:10:0c:
ca:02:90:10:d3:0a:aa:10:bf:f2:42:c0:a8:ad:8f:
c4:10:a1:53:0f:78:2b:b3:5d:4d:c6:e7:98:d2:b2:
90:b9:05:47:af:77:29:9b:30:e4:f4:79:90:ae:e1:
6c:96:0e:20:4e:ca:15:b6:a7:5c:e6:f3:92:07:92:
fc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4C:59:4B:4D:3F:9A:80:07:3C:D9:2D:69:F0:AC:75:39:65:A9:1D
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f1:d0:02:63:43:27:c7:d1:ac:d4:aa:d2:e4:4d:02:89:c3:
b3:69:58:9c:5f:9e:e0:b5:a2:f0:01:60:4f:9a:0d:f1:15:cd:
80:6f:5b:c9:50:89:2b:cc:58:20:bd:87:db:1e:37:66:64:ec:
ed:41:8c:34:f7:b5:c0:f1:03:b0:b8:6f:ed:38:29:14:39:1e:
a9:ba:70:91:a0:ed:97:9d:68:1b:f2:8f:1c:03:5c:6f:f4:13:
5e:46:60:b0:9d:d6:32:31:de:f8:66:76:01:5c:63:48:e8:24:
28:dd:5d:7d:85:01:cb:a6:3e:79:31:d6:08:5e:a3:dd:4c:d0:
92:c0:35:e4:a2:80:36:62:80:af:22:e9:d6:af:b0:e7:4e:7e:
4e:51:80:81:ca:73:2e:7d:56:c8:84:8b:e3:01:44:6b:e6:7c:
64:cb:fa:d1:db:c4:e2:af:96:d1:88:71:12:24:32:57:af:0e:
12:73:df:8b:25:05:82:16:f5:46:4e:0c:f1:e6:61:a5:cd:0b:
72:5c:ce:02:0b:fb:32:e2:19:12:a2:61:c9:21:ab:ff:40:f5:
c1:e0:93:27:89:97:52:4f:76:69:a0:6e:61:11:e8:2e:95:03:
93:d9:5d:be:69:4f:5b:7a:5f:8c:e0:84:1c:0b:95:eb:48:69:
f1:62:69:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 22:17:56 2026 by rpki-client