Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
File: VC9jP3bo2Krqoytazhaj2zlD2Aw.mft (raw, json)
Hash identifier: sLxvUtVyvUJq7Rb6r5MqD2IQQEaPs1CBmA1eUcco84I=
Subject key identifier: 5B:71:60:5B:45:B0:6D:6A:34:BF:80:C7:D5:8A:02:28:F7:2F:C0:A7
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 01A0C44488D41ED7D915647EEF64A76DACC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
Manifest number: 1A82
Signing time: Mon 21 Sep 2026 14:00:20 +0000
Manifest this update: Mon 21 Sep 2026 14:00:20 +0000
Manifest next update: Tue 22 Sep 2026 14:00:20 +0000
Files and hashes: 1: 35RKWFaAWG0FZ0_sumSRQjo-ZTk.roa (hash: ZVFWp4+g/AarEhCpcB89stJLNFioN0GCQ4WE7V4D3XE=)
2: 3e1aB77stWTp_pcWReBzNO2IJyQ.roa (hash: y600ju7YKSbJWZwn4QGcu4eyhB4Kn+pcLohTFXP1j3U=)
3: VC9jP3bo2Krqoytazhaj2zlD2Aw.crl (hash: SPi43ze5xKvXvp/kAwbFU/hmmaw5DHqPkZiExMprM+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:88:d4:1e:d7:d9:15:64:7e:ef:64:a7:6d:ac:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Sep 21 14:00:20 2026 GMT
Not After : Sep 22 14:00:20 2026 GMT
Subject: CN=5b71605b45b06d6a34bf80c7d58a0228f72fc0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9c:7b:36:1c:c0:4e:87:1b:41:cd:04:ca:32:
ed:b6:dd:69:8e:83:c0:ca:70:e5:5c:86:6c:c8:c9:
27:21:a4:4a:71:d2:28:05:14:d2:c2:49:d2:4e:43:
7e:11:dd:e5:d1:fe:50:bb:9d:b0:a6:ee:e7:25:a0:
de:21:48:06:02:0c:17:30:d8:e8:35:de:4b:f9:f7:
dc:ee:59:af:85:d1:2a:a1:5e:cc:ff:e9:e7:0f:94:
c0:36:71:5c:15:be:d7:f8:08:aa:4e:f8:63:25:38:
df:31:73:64:80:f1:cf:ed:f7:5c:ff:8c:da:49:ac:
54:e8:e6:ad:19:a2:7c:4a:b9:f8:ae:8d:94:84:67:
b4:0b:56:17:07:28:c5:cc:2f:e6:cd:31:63:b5:19:
2a:05:ee:8b:de:dd:91:cb:5c:f5:4e:b0:01:73:8e:
3e:fa:fb:db:76:cf:2b:28:c6:41:2e:d3:cb:6f:1b:
a3:eb:2b:c9:2d:28:ec:48:36:01:13:73:a5:6c:2e:
e5:e0:30:32:67:52:2d:66:55:da:c4:61:86:0c:57:
cb:0c:bf:d9:db:86:0e:15:93:b6:2b:63:98:ec:f1:
84:84:7f:2c:29:1d:0a:a4:67:79:bc:f3:37:65:32:
fb:6c:3d:91:8c:c0:cc:35:98:65:0f:d3:f5:c7:d3:
4f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:71:60:5B:45:B0:6D:6A:34:BF:80:C7:D5:8A:02:28:F7:2F:C0:A7
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1c:b1:9a:b5:79:1c:e9:d1:43:b4:2b:94:1f:48:8c:a9:36:
4d:3e:22:a0:3a:e7:19:73:35:39:4a:c4:75:72:cc:1d:f3:71:
84:a7:52:d8:21:d3:1a:37:ae:d8:f1:be:4d:ed:39:06:6f:9b:
a3:42:3a:9d:43:4b:2f:ca:4b:d1:7a:42:40:bf:46:e3:d0:d4:
cb:6d:d7:55:1a:17:b3:7b:2c:5c:d3:3b:e0:b1:f5:ad:3b:78:
03:fe:f9:a4:77:b3:d4:32:6c:20:e6:db:ca:75:1e:82:71:c1:
dc:8d:67:a5:bf:c2:6e:30:30:01:28:0b:b8:bc:53:d2:af:1d:
0a:81:81:38:75:24:a3:c6:29:3c:8d:70:da:b4:06:02:ea:ae:
1d:ff:09:ce:dd:33:9b:14:e1:43:fb:eb:34:b4:00:e8:82:09:
31:82:11:68:9d:99:e9:0b:fd:25:39:ed:30:e6:6e:3b:cb:c3:
72:3f:20:c4:b1:fc:36:43:b5:d9:60:07:06:b2:ec:d4:c8:21:
06:1a:5d:d9:66:cf:0e:60:ce:40:75:74:87:a7:1f:91:32:0c:
67:a7:4a:0b:13:8f:ec:82:0a:89:1b:90:83:1c:c8:98:42:0d:
3a:56:4b:3c:04:d2:d9:67:af:f3:3d:75:20:32:22:73:3e:dd:
7a:c4:26:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDERIjUHtfZFWR+72SnbazIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MmY2MzNmNzZlOGQ4YWFlYWEzMmI1YWNlMTZhM2RiMzk0
M2Q4MGMwHhcNMjYwOTIxMTQwMDIwWhcNMjYwOTIyMTQwMDIwWjAzMTEwLwYDVQQD
Eyg1YjcxNjA1YjQ1YjA2ZDZhMzRiZjgwYzdkNThhMDIyOGY3MmZjMGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJx7NhzATocbQc0EyjLttt1pjoPA
ynDlXIZsyMknIaRKcdIoBRTSwknSTkN+Ed3l0f5Qu52wpu7nJaDeIUgGAgwXMNjo
Nd5L+ffc7lmvhdEqoV7M/+nnD5TANnFcFb7X+AiqTvhjJTjfMXNkgPHP7fdc/4za
SaxU6OatGaJ8Srn4ro2UhGe0C1YXByjFzC/mzTFjtRkqBe6L3t2Ry1z1TrABc44+
+vvbds8rKMZBLtPLbxuj6yvJLSjsSDYBE3OlbC7l4DAyZ1ItZlXaxGGGDFfLDL/Z
24YOFZO2K2OY7PGEhH8sKR0KpGd5vPM3ZTL7bD2RjMDMNZhlD9P1x9NPwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtxYFtFsG1qNL+Ax9WKAij3L8CnMB8GA1UdIwQY
MBaAFFQvYz926Niq6qMrWs4Wo9s5Q9gMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDIt
NjliOTUzYzlkNWFhLzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDItNjliOTUzYzlkNWFh
LzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRyxmrV5
HOnRQ7QrlB9IjKk2TT4ioDrnGXM1OUrEdXLMHfNxhKdS2CHTGjeu2PG+Te05Bm+b
o0I6nUNLL8pL0XpCQL9G49DUy23XVRoXs3ssXNM74LH1rTt4A/75pHez1DJsIObb
ynUegnHB3I1npb/CbjAwASgLuLxT0q8dCoGBOHUko8YpPI1w2rQGAuquHf8Jzt0z
mxThQ/vrNLQA6IIJMYIRaJ2Z6Qv9JTntMOZuO8vDcj8gxLH8NkO12WAHBrLs1Mgh
Bhpd2WbPDmDOQHV0h6cfkTIMZ6dKCxOP7IIKiRuQgxzImEINOlZLPATS2Wev8z11
IDIicz7desQmLw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:39:35 2026 by rpki-client