Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json)
Hash identifier: RdUU34Irico/w6x7KCU7M9/cxQ+ciAlKzaUlpmi0K7Y=
Subject key identifier: 58:EC:2C:54:53:95:94:2F:8F:3A:69:09:62:B7:80:0C:F9:92:88:C1
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 01A0C10CFD7EE00812202843CFF6049BC756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
Manifest number: 148D
Signing time: Sun 20 Sep 2026 23:00:49 +0000
Manifest this update: Sun 20 Sep 2026 23:00:49 +0000
Manifest next update: Mon 21 Sep 2026 23:00:49 +0000
Files and hashes: 1: Ghj2CjsRnY1wb2E-XOvEApJyZ48.roa (hash: aHKmPU0uHBHelzcfZtPfiKhS3Lwo9mN4hfojl5TpX04=)
2: QxYB96hW7JeiMlNYWI5YVU3Mlfk.roa (hash: J9Ep8+ZcHZRXqSI+5YN748t653NofsfWjYhAWlrp/eQ=)
3: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: EIuTftSE4NG4dO8kfIbFl8PvytInTxw21eYA2TWoxxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:fd:7e:e0:08:12:20:28:43:cf:f6:04:9b:c7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Sep 20 23:00:49 2026 GMT
Not After : Sep 21 23:00:49 2026 GMT
Subject: CN=58ec2c545395942f8f3a690962b7800cf99288c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:55:21:db:bd:1b:4f:66:ef:e6:e8:a6:48:
9c:ea:62:94:a4:62:83:e8:58:67:bf:0f:0d:3d:42:
76:d0:91:60:c0:23:a8:7f:14:f9:49:da:82:81:30:
0c:15:c2:96:91:46:23:e4:fe:f2:6f:86:00:ed:ce:
2e:b8:02:db:a4:75:48:94:35:e9:40:5c:7a:36:2c:
ef:39:29:59:8d:78:9d:12:c6:f5:cf:af:e2:0d:2f:
5e:0e:d6:f7:5d:8e:9c:e8:35:32:e7:37:f1:e2:2f:
94:d7:f4:66:44:d2:19:e5:92:84:42:8d:32:bb:38:
a7:8d:7b:9c:fa:d5:a5:14:b3:bd:a5:fe:06:60:f9:
2b:64:cb:e0:8c:4a:4e:b7:16:b9:96:a5:9a:c8:a4:
64:60:90:1a:f9:ee:a7:00:43:4a:50:55:69:d5:53:
bd:c5:fa:60:e6:c8:ec:f5:80:c4:1b:a9:76:ee:4d:
f5:eb:3f:e8:a8:db:7a:7e:6b:e6:68:f3:e3:11:94:
32:7a:f4:3d:ab:4c:0e:a5:da:26:28:4d:47:f5:1a:
be:2d:52:d5:1a:b1:b7:81:c3:7e:8a:0b:d7:4b:c7:
7a:dd:0b:55:f8:e6:91:1b:1a:b0:5d:6b:b1:4e:da:
82:88:8a:95:07:f1:58:5b:ea:bb:02:fb:99:77:0f:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EC:2C:54:53:95:94:2F:8F:3A:69:09:62:B7:80:0C:F9:92:88:C1
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:db:70:17:6c:73:fb:99:1f:67:32:14:c4:78:f2:a1:d5:18:
f3:99:5c:b0:85:f2:7d:da:07:f0:f1:25:b6:79:64:ce:d2:36:
92:d4:ef:05:92:f1:52:65:5c:ed:3b:90:54:34:a9:f8:be:d2:
d9:f5:56:af:9e:bc:8c:2a:75:d9:83:86:8d:54:b6:9a:d5:7e:
26:47:ca:cd:c9:84:56:55:00:29:19:ed:51:72:75:c7:b5:af:
d4:b8:ff:3e:53:87:f0:bf:61:a3:b2:b1:bf:96:fb:b3:05:f5:
1b:35:76:44:a2:10:29:98:ee:3d:bb:1c:61:0b:a4:10:ce:79:
24:3d:f1:c7:f0:9f:25:e7:55:86:59:53:35:13:55:1c:d1:df:
9c:18:e9:ff:11:64:8b:63:4b:e7:24:59:86:5c:16:70:b1:c3:
28:7d:8c:5c:bd:8b:f0:ba:32:93:b6:0c:e6:94:2b:fd:c8:09:
12:77:27:bb:cf:ec:68:d9:0e:0a:da:50:79:6f:0b:9c:2c:b3:
f3:e1:bf:4a:be:fa:4c:77:b9:7b:1c:4f:ff:90:10:27:2a:51:
0d:c8:53:cf:08:98:07:ca:60:96:70:09:40:92:79:c0:13:5d:
07:10:4e:ea:67:7c:bf:6c:79:60:76:0d:aa:67:44:90:02:22:
5d:df:b7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:09:25 2026 by rpki-client