Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
File: vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json)
Hash identifier: iwp0OI6KaZc+hwJURTAKtIaaNBv46Jk7Of8aQIzbhO4=
Subject key identifier: A7:9F:EC:97:55:6E:6C:70:34:8A:48:26:7E:CC:57:4C:77:35:30:CB
Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
Certificate issuer: /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Certificate serial: 01A0C88FBB90CA9E30580E00D008F0E65802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 10:00:57 +0000
Manifest this update: Tue 22 Sep 2026 10:00:57 +0000
Manifest next update: Wed 23 Sep 2026 10:00:57 +0000
Files and hashes: 1: DnP6GcDKWF77PKsQ6HasKB8i_K0.roa (hash: 5rS9bW+Cd7FZhz3igcUd9hkUorfrY7/8Znu4PQmJGxs=)
2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: ObtcRCk1MKmoqtEGKDuwoDUInGdgrcWGSoFU0ZPi6zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:bb:90:ca:9e:30:58:0e:00:d0:08:f0:e6:58:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Validity
Not Before: Sep 22 10:00:57 2026 GMT
Not After : Sep 23 10:00:57 2026 GMT
Subject: CN=a79fec97556e6c70348a48267ecc574c773530cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:f0:d5:a1:66:9c:a9:39:65:fe:30:4c:6f:
c7:06:fb:b0:42:53:4c:77:02:91:b1:50:bc:22:16:
2c:22:26:08:33:31:3e:26:ab:f9:a1:f4:6f:b5:41:
3c:d7:23:43:9d:f7:1f:a4:b8:81:6a:3a:6c:62:16:
82:0b:25:58:ae:ff:bc:34:70:64:1b:22:a9:eb:9e:
16:99:ab:eb:7b:9e:41:95:5f:18:c8:d0:ab:86:ee:
53:b3:e3:8b:28:15:ca:09:8b:31:a0:58:e5:5c:ea:
f9:40:2e:7b:9f:fb:a7:ca:a0:94:76:7c:ef:53:71:
24:6b:db:4f:78:2d:a9:a5:08:6b:36:c1:d4:ef:40:
3f:12:52:b1:31:b4:54:8e:c0:58:d2:ea:72:e6:16:
58:af:9e:5e:d8:a6:c3:bc:03:cc:96:03:c1:89:cc:
d8:bb:1d:72:bb:3d:49:88:38:48:9c:a6:38:42:ec:
50:22:73:1c:6e:23:0d:96:3c:06:33:57:da:72:db:
90:63:b9:2c:55:f0:31:56:5d:54:83:a0:c6:b3:40:
a5:8e:bc:95:4e:2e:fe:8b:67:b4:d9:f9:77:9b:35:
98:1a:80:6e:72:94:42:06:6d:f9:48:3c:f8:89:29:
a0:4f:ef:03:25:ee:a5:73:68:aa:cc:3d:63:70:05:
ef:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9F:EC:97:55:6E:6C:70:34:8A:48:26:7E:CC:57:4C:77:35:30:CB
X509v3 Authority Key Identifier:
keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b0:c9:98:47:8a:cf:8f:cc:c0:01:54:57:1e:af:e4:8e:fd:
01:5b:6a:f8:10:ba:33:98:eb:96:0b:b0:98:d1:37:07:f0:56:
55:55:8d:bc:02:d2:17:77:d8:c0:d5:b6:7b:c4:20:4b:b3:a9:
81:f5:09:a8:fb:2b:32:76:4e:84:dc:c1:b3:3d:85:29:e9:16:
e5:e0:cc:c8:f0:d2:c0:2c:25:78:b8:6d:de:fc:23:34:4b:37:
7b:1c:c1:d5:50:e0:11:1a:88:25:31:19:a8:49:c7:34:4e:57:
cc:28:95:e0:f4:93:c9:15:f6:8d:18:6b:81:51:1b:81:23:ee:
d8:83:be:a0:82:1c:a3:1e:b4:24:e8:6a:c0:35:7d:3c:03:11:
5d:47:39:44:a3:6d:9b:13:9d:b5:6e:61:85:c6:0c:d8:54:72:
a1:52:ea:b4:1a:a5:4b:1f:4c:a6:e3:79:73:ca:d5:c4:23:9a:
1d:1d:f0:ca:b0:51:33:7e:9e:e6:8b:1e:73:4a:ac:df:70:85:
3a:07:b0:db:bd:19:d6:08:a1:98:ef:e8:cc:76:8a:f7:22:68:
80:72:f5:a2:3a:3f:b3:89:ea:8f:3d:42:7b:70:9b:9a:b2:bd:
e0:8c:ad:c7:a8:f6:aa:36:82:49:67:d4:ed:ab:57:9a:78:e2:
4d:fa:56:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:46:34 2026 by rpki-client