Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
File: v0lCu3vSTK23SF6M6lklCaPH2vU.mft (raw, json)
Hash identifier: xGR4J0wIDXLqUlwph6BTJIRRninq5rhXD5fHnYcl95Q=
Subject key identifier: 34:0D:F1:5D:AF:C0:24:79:4D:EC:1D:06:2C:69:89:86:F0:61:1A:92
Authority key identifier: BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
Certificate issuer: /CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Certificate serial: 01A0C444611649F28F209D1D218C8ED81704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
Manifest number: 0F9A
Signing time: Mon 21 Sep 2026 14:00:10 +0000
Manifest this update: Mon 21 Sep 2026 14:00:10 +0000
Manifest next update: Tue 22 Sep 2026 14:00:10 +0000
Files and hashes: 1: 8ZLlXBrRkRmEZavAgVbzhYuPhTk.asa (hash: B0eqzhP1emUlL5EQFCd5dAc0ZKS7qm56hxy/fQh8cL4=)
2: v0lCu3vSTK23SF6M6lklCaPH2vU.crl (hash: AJVBOmz8hpq0eeOMQqt5Paa9zEol2OPjqi6AlH0iFrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:61:16:49:f2:8f:20:9d:1d:21:8c:8e:d8:17:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Validity
Not Before: Sep 21 14:00:10 2026 GMT
Not After : Sep 22 14:00:10 2026 GMT
Subject: CN=340df15dafc024794dec1d062c698986f0611a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f0:87:f7:6c:34:e6:5c:4b:d1:4f:3f:48:f5:
56:51:5b:66:2f:5f:12:d9:e8:c1:9e:c6:7e:a1:5e:
62:a5:35:bc:bc:94:09:d5:f2:94:f5:e1:13:03:4b:
d3:3b:e3:f9:fe:a6:fa:23:c0:d0:ba:d3:43:96:37:
4b:39:be:e6:8a:b3:ba:a3:06:f2:6a:00:21:03:82:
ee:56:01:54:64:65:4e:c2:a0:04:88:02:ce:c8:65:
5c:22:99:64:d5:72:c4:6d:20:38:2e:35:14:a7:87:
51:a9:4e:48:dd:f2:f5:fa:5e:0e:19:6f:2b:b4:6f:
60:f7:c9:f4:c6:0a:79:0c:a8:6a:53:23:e6:9e:50:
ac:db:65:de:89:6f:38:ab:a9:e4:aa:16:4f:84:7b:
86:d6:ff:07:33:cc:aa:3e:d9:42:12:4c:29:5c:dc:
77:e5:89:20:3b:28:62:87:fa:26:37:c2:5d:e4:f6:
28:f6:ec:ff:55:de:ea:dd:24:3f:1e:f3:69:03:30:
e5:c8:29:27:8e:ec:40:ba:ef:f2:c5:2d:0f:2e:40:
e4:83:03:95:b2:82:9b:bd:a9:c6:07:48:9a:5a:8e:
2f:7d:00:e6:37:7c:66:7c:ae:8d:68:96:66:ba:3b:
63:e5:8d:f1:c1:be:a9:87:a7:5f:bb:78:84:59:f2:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0D:F1:5D:AF:C0:24:79:4D:EC:1D:06:2C:69:89:86:F0:61:1A:92
X509v3 Authority Key Identifier:
keyid:BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:78:73:bb:ed:c7:6f:5d:65:e3:32:de:74:57:e7:42:4e:fc:
b4:7a:54:d4:3a:cc:04:5e:b4:8f:7f:ef:e7:47:1e:3a:d8:40:
3a:a6:93:ef:bf:0c:07:26:43:65:35:e7:c9:77:ef:18:22:1b:
84:60:bc:34:9f:ea:eb:f1:0f:d8:77:6b:93:ee:f4:cd:0a:b7:
4c:38:27:de:57:99:0b:4f:6d:02:0e:51:47:11:82:b6:4c:8f:
f6:e4:f6:61:cd:b3:2d:9c:25:29:54:28:f2:ad:18:bd:bc:64:
72:dc:bb:c1:97:e9:0f:f5:09:c4:f0:13:95:e1:c7:08:6b:cd:
5e:e3:f6:fe:24:fc:bc:1e:71:45:3c:32:31:2b:b4:7d:a4:47:
a2:a3:35:4b:b4:1d:f2:eb:78:98:28:0b:c5:5c:e8:a5:5b:61:
eb:8b:17:27:94:b0:48:b4:a3:aa:43:8b:46:2f:8e:01:f1:22:
b9:c9:7a:bd:05:bd:1b:3f:01:27:a1:d8:dd:74:f3:94:37:e7:
dd:3e:76:b1:43:2a:13:23:9c:71:6c:9f:a7:fe:57:3a:c5:fe:
bd:dc:fb:c5:f2:de:33:f2:e2:9b:a1:cf:55:ec:1b:30:8d:98:
68:c9:25:22:e5:22:46:cc:c5:cc:b6:60:a6:16:37:27:70:49:
0c:f0:5b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:51:07 2026 by rpki-client