Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
File: VvciqIWr65qv-zLadk7wkbWyA0A.mft (raw, json)
Hash identifier: 2/NcpbJFbNr0HOS4XThtxOz9DNWYXhh2Jns+ZtuTn3A=
Subject key identifier: C9:35:46:B0:A6:AC:F4:0C:2A:3B:44:74:F8:40:3F:3E:8B:D7:AB:3B
Authority key identifier: 56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
Certificate issuer: /CN=56f722a885abeb9aaffb32da764ef091b5b20340
Certificate serial: 01A124D4AF940B1EB97AF774546C62AC67A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
Manifest number: 0DB9
Signing time: Sat 10 Oct 2026 08:01:20 +0000
Manifest this update: Sat 10 Oct 2026 08:01:20 +0000
Manifest next update: Sun 11 Oct 2026 08:01:20 +0000
Files and hashes: 1: GIndhU8ELmsNHmG9wjRWuLwz2bs.roa (hash: PQMP13AMPNG5zd/gezY6JmA04bcuMNJCFye1nndg+RI=)
2: VvciqIWr65qv-zLadk7wkbWyA0A.crl (hash: DgkERFh6oPBxZw8wOeZUsLiaoOaH9ysG2rFmXym7SJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:d4:af:94:0b:1e:b9:7a:f7:74:54:6c:62:ac:67:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f722a885abeb9aaffb32da764ef091b5b20340
Validity
Not Before: Oct 10 08:01:20 2026 GMT
Not After : Oct 11 08:01:20 2026 GMT
Subject: CN=c93546b0a6acf40c2a3b4474f8403f3e8bd7ab3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:83:23:61:8f:a5:24:66:9c:82:18:9b:01:
92:d7:e5:3f:97:6f:84:b2:db:6e:50:8c:b1:96:0d:
ee:1d:9e:bd:f8:b1:52:2e:93:f6:3d:ca:de:55:3f:
9e:a8:bc:81:dd:e3:17:93:65:f4:66:4b:29:2c:be:
90:39:99:f9:54:e0:a5:c2:7d:cb:7a:00:24:e5:e8:
c5:9e:01:f9:3f:de:01:6e:00:e7:4c:22:bd:4b:0c:
44:db:d3:fd:c2:32:ab:a9:03:c0:0a:c5:68:65:02:
2b:44:87:a3:ac:15:69:4c:f7:07:89:aa:44:f5:ad:
f8:7a:fe:4c:89:55:6c:36:03:72:34:45:81:2d:f1:
5f:0f:f4:ff:49:f1:eb:69:92:1a:20:d3:09:6f:82:
16:9a:e6:36:a2:09:d5:0b:f3:5f:99:fc:ed:bc:63:
e7:b1:ef:72:41:9d:ec:35:b0:d8:59:0c:b1:08:26:
ff:f7:15:f0:c8:91:2a:16:51:04:a8:f4:a2:98:69:
31:b1:49:ef:c3:a4:36:75:e2:2f:5d:07:fb:cd:a3:
00:d3:71:23:89:85:a8:99:97:c8:e6:df:16:bc:24:
6a:c0:76:ed:e8:48:b2:58:22:45:29:31:1e:ac:ac:
3a:53:24:38:5c:c3:45:3b:fa:dd:7b:75:aa:18:3a:
48:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:35:46:B0:A6:AC:F4:0C:2A:3B:44:74:F8:40:3F:3E:8B:D7:AB:3B
X509v3 Authority Key Identifier:
keyid:56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:16:b0:88:9b:93:2b:1c:70:a1:cb:e9:e4:68:ac:a2:ff:bf:
cb:43:b6:34:ff:86:51:a7:fd:ae:35:4a:12:bc:e8:5c:e0:bc:
ac:3e:eb:eb:62:f8:36:71:c5:ca:c3:14:74:72:d5:43:bb:2e:
2f:03:07:d6:b9:de:d3:26:ac:20:51:54:c3:b1:a6:6c:a6:b2:
37:e3:3d:16:f0:2a:f0:e9:7f:00:fe:b3:aa:fe:9c:80:76:52:
e1:d4:9a:64:e3:6b:57:2d:be:5b:1d:37:06:82:c4:ad:66:6b:
49:a4:07:83:04:3f:55:de:12:8b:da:4c:0a:eb:99:8b:b8:48:
e4:2c:be:2f:ec:e9:7a:92:0b:a3:10:58:b0:82:3c:50:66:a3:
72:63:5f:83:1a:65:ec:42:de:ec:dc:bb:5e:15:ef:04:74:4b:
cb:96:2b:0f:bf:21:af:2e:9e:7b:e2:10:24:e0:11:63:aa:48:
e2:70:a0:5f:45:77:75:4c:9e:74:cb:2a:29:09:09:40:43:09:
d2:38:63:18:f0:d9:6b:32:c4:0a:29:16:48:53:d4:c1:b0:c1:
7c:8c:59:cd:95:25:ed:ba:ff:ca:81:ed:31:ca:3a:57:4c:15:
83:a2:ac:41:b8:0f:38:8b:d8:3c:2e:82:dc:a2:58:80:c7:9e:
af:89:d3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:45:14 2026 by rpki-client