Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: tBuRG99LkZW7ckwfgav34bQYUxt20ep7cpfhyuzav4w=
Subject key identifier: 53:5A:F4:7A:F5:3D:25:63:1B:8E:F8:C7:82:F6:15:CD:C7:6F:8F:17
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 01A0CB904C78A210D926B88A943662F36B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 1A6F
Signing time: Wed 23 Sep 2026 00:00:26 +0000
Manifest this update: Wed 23 Sep 2026 00:00:26 +0000
Manifest next update: Thu 24 Sep 2026 00:00:26 +0000
Files and hashes: 1: giX8_ecdQPItnFz-fq6feS4Jd-g.roa (hash: 1ce47GoQT/QAgOwYZvUfKbOA8OpsLu0765OeChH/WJM=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: 1hmmLMxI+3dMb92+ExJsPwB+8596FcOHc9CRzkgkaA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:4c:78:a2:10:d9:26:b8:8a:94:36:62:f3:6b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Sep 23 00:00:26 2026 GMT
Not After : Sep 24 00:00:26 2026 GMT
Subject: CN=535af47af53d25631b8ef8c782f615cdc76f8f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:22:a4:e8:a1:a3:01:1a:ca:e8:ca:e7:27:15:
5b:23:fe:70:b9:62:cc:c0:47:4c:37:19:d0:dd:de:
a7:2d:fa:94:42:73:8f:ad:b8:7e:e0:be:16:43:ab:
11:ec:01:18:3a:7d:1f:ae:95:10:fa:e2:6e:d5:3d:
45:f1:5d:9a:38:c9:17:3f:4d:e0:fc:40:a2:91:71:
63:80:01:5e:a1:18:55:67:81:50:02:09:63:dd:9e:
93:c5:42:2a:4c:35:85:af:ae:47:bc:18:f1:01:e1:
78:69:dd:8e:6b:e5:17:2c:b6:b4:5a:f4:8d:88:d3:
a7:e8:5d:e5:47:7b:02:e7:76:a6:d4:5f:72:bf:01:
6b:ab:0e:24:6d:19:3c:b8:cd:81:6c:6f:11:04:12:
4b:05:b0:13:f6:84:9b:47:3b:04:70:ec:23:6d:5a:
76:aa:ef:fb:2b:89:a6:2e:04:8d:77:fe:45:38:99:
60:81:a3:c8:66:40:9f:44:fa:d5:bd:87:0f:17:23:
cc:2f:91:e1:c1:bb:06:01:b6:43:73:11:db:27:82:
83:db:77:8b:6e:a9:47:87:1a:79:cc:9d:3b:9d:24:
3a:29:27:3b:1e:23:2b:42:2b:26:93:4a:d3:df:40:
14:49:f9:e0:05:55:96:e8:af:2a:34:29:e6:43:7f:
50:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5A:F4:7A:F5:3D:25:63:1B:8E:F8:C7:82:F6:15:CD:C7:6F:8F:17
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c1:e3:eb:2f:45:41:a9:b1:0e:90:cb:98:bf:c8:3e:87:f8:
89:14:0e:84:ef:6c:5b:9c:b6:c4:f8:fd:0a:5e:52:75:cd:e6:
ec:75:9c:52:5f:53:92:75:a4:10:b6:1b:82:0d:b1:b8:55:46:
a5:01:47:0a:cf:64:a8:4c:7d:ba:5e:e9:69:6f:0f:b1:02:25:
2a:16:9f:11:95:f8:c5:fc:87:ba:d6:49:90:98:49:b9:8a:62:
be:d8:a7:1f:73:1e:f3:24:70:ba:ce:5c:f8:c2:19:64:f2:fe:
0d:c7:8f:22:d6:a2:4e:8c:f6:75:c3:c5:e1:c4:97:d1:61:5f:
77:1d:85:5e:ed:ec:24:ea:50:e3:81:cf:26:e6:0b:61:d1:f4:
ac:6d:70:6d:39:b9:57:df:a4:b8:3a:0e:5d:3a:46:e9:e4:73:
c2:7d:d8:8c:ea:8f:e5:6b:3a:3b:c4:a0:2b:b2:4b:db:a1:41:
87:d2:4a:c1:0e:cb:e7:c1:b1:03:e9:dd:ed:a7:de:82:73:d3:
76:4c:d7:4c:93:d3:2c:c8:f4:24:c4:2d:61:b6:7f:64:97:03:
a4:47:3b:c9:a2:93:7d:cb:56:9c:4d:f8:9b:11:e8:80:91:e9:
5d:7a:0d:07:da:cf:b7:92:3f:cd:0f:82:bf:47:60:41:64:45:
8d:27:e3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:44:29 2026 by rpki-client