Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
File: vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft (raw, json)
Hash identifier: 0T2ASpx+e6Tb6j5pCi/A2RAgEahOUUQFDA+3jrvPMlo=
Subject key identifier: F5:AA:4D:17:BB:1A:7F:62:D5:51:0F:C3:6C:80:71:97:C9:B8:A5:73
Authority key identifier: BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
Certificate issuer: /CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Certificate serial: 01A0D45D98212F3576BF07B34D8D51FDADCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
Manifest number: 0444
Signing time: Thu 24 Sep 2026 17:01:38 +0000
Manifest this update: Thu 24 Sep 2026 17:01:38 +0000
Manifest next update: Fri 25 Sep 2026 17:01:38 +0000
Files and hashes: 1: vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl (hash: 1IcV7SVZdFE6KrkjAylh1XsSsTVDKM020IawulxWT+0=)
2: xnX10RwznEnmTe1E1E5B2rhOTnA.roa (hash: feg+CLsY1TCQ8UES6e5qZUfIKp0hLMvvn81xyTCKGRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:98:21:2f:35:76:bf:07:b3:4d:8d:51:fd:ad:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Validity
Not Before: Sep 24 17:01:38 2026 GMT
Not After : Sep 25 17:01:38 2026 GMT
Subject: CN=f5aa4d17bb1a7f62d5510fc36c807197c9b8a573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:66:d1:b4:e2:aa:ee:a9:16:71:23:51:e5:
76:ae:84:97:73:54:6c:12:c4:ad:8d:a8:bb:b0:36:
53:2c:31:b8:65:f4:2a:7e:17:de:0c:5a:45:c1:4e:
76:97:c6:19:e1:11:4f:e2:1b:92:32:b2:4a:65:20:
c5:93:eb:9c:f7:21:5f:56:7a:8e:b0:41:5e:77:3f:
fb:2b:4d:42:33:8e:82:b2:72:53:ca:39:a9:c4:a6:
0a:a0:1e:78:6c:43:8c:2a:60:e9:70:ab:cf:9d:23:
0a:3a:e1:d0:3f:99:82:0f:ea:85:0e:e7:a2:54:d0:
19:93:3d:a1:0a:b3:8c:24:a1:5e:71:f2:29:bb:bb:
4c:0c:52:02:13:76:aa:5c:8e:18:c6:da:04:28:c2:
7e:01:f7:42:48:1b:7e:c1:55:06:20:ac:0b:93:a9:
67:2f:b8:22:c9:cc:11:d0:33:05:4d:26:7b:df:32:
0a:be:d5:17:e4:71:2a:d8:58:4c:7a:51:e1:8a:03:
8b:9e:96:88:9b:1f:11:f8:4a:9a:a3:4e:ad:0d:72:
b1:f4:01:5f:31:d8:d3:54:0a:95:1f:fa:ff:48:bf:
fc:ff:86:8c:88:67:cc:ae:d4:48:9d:8a:5d:0f:9d:
70:ff:11:db:95:6e:af:9f:81:df:53:a9:bb:8a:61:
19:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AA:4D:17:BB:1A:7F:62:D5:51:0F:C3:6C:80:71:97:C9:B8:A5:73
X509v3 Authority Key Identifier:
keyid:BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:49:80:f0:2d:20:63:2f:7b:a6:67:b4:28:22:a0:8c:52:16:
3d:6b:2e:82:57:5a:ce:6d:1c:14:56:ba:3e:e0:ef:82:a9:c1:
4b:7f:15:91:07:70:77:45:5d:de:2d:87:ed:61:39:a5:43:36:
02:d7:43:ac:c0:69:1c:6c:ea:22:c3:e9:8a:9b:90:2c:7e:94:
91:21:c4:39:a3:8d:e1:50:b4:ed:93:d0:69:79:5c:db:2d:15:
3d:62:7a:9c:85:6a:97:02:c0:1d:c5:89:20:d2:81:a6:29:78:
f4:45:83:c1:03:ff:71:74:cd:a1:2d:f7:2c:cd:7e:42:d6:7b:
28:93:28:74:c9:e7:50:40:ac:b3:ea:5c:25:39:3e:ae:c2:83:
06:33:35:e7:d3:cc:c8:38:14:6e:74:2e:a8:14:ac:80:c8:14:
9d:d0:29:82:6e:b2:9a:74:2f:ec:72:74:88:47:51:03:5b:33:
0f:9c:e4:eb:f4:c5:06:48:f7:d2:80:7c:58:98:c4:e3:d1:2d:
3a:56:65:8b:38:b6:d8:7a:52:e6:cd:38:ad:8a:e6:01:63:dd:
d8:64:1e:97:e1:d7:ce:45:32:1f:cb:4b:69:41:29:3c:95:43:
5e:62:57:07:e1:ea:99:53:e5:e8:31:56:13:3a:71:3b:25:ab:
a0:10:60:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:26:18 2026 by rpki-client