Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
File: VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft (raw, json)
Hash identifier: M9owpm6BkGnav5bMAMCas0C2X+XjBsY8xKbvufhyMm8=
Subject key identifier: 0F:4C:1F:B9:02:E1:DD:B6:5B:E6:70:3F:E8:08:A2:4A:BE:46:E3:62
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial: 01A0C934271E10D21FC357187CE7B8A4D815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
Manifest number: 1171
Signing time: Tue 22 Sep 2026 13:00:33 +0000
Manifest this update: Tue 22 Sep 2026 13:00:33 +0000
Manifest next update: Wed 23 Sep 2026 13:00:33 +0000
Files and hashes: 1: S9kGmLdkpv2ILDDQ-SlcOK9Lj1o.roa (hash: QivYNDVsph6A7kkTjUq1Ljk/FMFPW+uo2Qe8RGmCL8g=)
2: VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl (hash: CQ8/5C8xntbk1P7nSAZypl7+BkFEV8H5rq9I7o5LHW0=)
3: eMKt2DWZjokC0ieIU1oM30l3M2M.roa (hash: L8Kfu464KFJxNJalzdL9bOwXAKJk3f1Ymgq59SssnCA=)
4: fjBLPKVRL2N3R-A_WZpV7UMJS-E.roa (hash: g43UU/wrTcddspCCnr8Ra6+FoKvZBu/4AB1pQY+Nmvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:27:1e:10:d2:1f:c3:57:18:7c:e7:b8:a4:d8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Validity
Not Before: Sep 22 13:00:33 2026 GMT
Not After : Sep 23 13:00:33 2026 GMT
Subject: CN=0f4c1fb902e1ddb65be6703fe808a24abe46e362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:c2:d0:a6:45:3f:bb:41:74:33:0c:44:af:
d4:b9:e9:9f:c4:77:4e:30:17:d3:c0:9c:7a:18:82:
18:2d:e5:11:8f:fe:d3:ee:a7:ee:0c:f6:e1:2e:2d:
6a:0e:4a:38:6c:fc:91:2e:b7:74:a4:04:41:7f:14:
c3:8b:03:5f:a2:90:56:b6:04:17:f9:c9:20:3d:83:
ee:fb:76:f5:54:4f:9b:be:a1:ca:db:ea:40:12:cb:
a2:55:bb:d8:21:a0:6c:cd:1d:3d:e3:d5:0d:be:d6:
0b:88:44:af:56:17:39:c8:1e:84:41:d5:20:87:10:
2d:af:73:4d:b9:da:51:27:2c:ab:a7:5f:db:2f:e4:
a0:01:fb:74:fc:e9:42:39:0c:19:4e:39:9b:e6:5a:
e6:37:56:75:ac:d8:da:9d:5c:de:a6:23:26:62:2f:
89:fd:cb:b6:91:d4:99:10:24:6f:5f:15:88:ed:9c:
26:41:cb:6a:09:33:f6:8c:cb:c0:31:e8:0b:49:99:
9b:21:be:22:a3:17:a1:0c:ba:0d:53:39:f6:8a:26:
7c:25:b6:23:00:6b:76:a3:3d:43:23:7a:90:71:ce:
7d:1a:9d:b9:09:ff:86:f4:2e:c7:08:f5:3f:22:04:
ed:7f:58:8c:a8:59:72:ce:da:a0:ba:3b:60:be:66:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4C:1F:B9:02:E1:DD:B6:5B:E6:70:3F:E8:08:A2:4A:BE:46:E3:62
X509v3 Authority Key Identifier:
keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a5:6d:9e:b4:eb:99:a7:31:72:18:6a:b4:0f:f4:1f:61:94:
fc:7a:74:fd:66:7b:f9:67:bf:3f:2c:0d:64:30:c6:24:ea:b1:
ae:2e:52:9f:6e:0b:55:81:f0:29:4a:96:e8:0a:26:cf:4b:b3:
2d:a7:df:91:de:c0:9a:cb:74:92:0d:f1:94:79:40:d6:54:9f:
75:8c:02:e6:79:18:d5:25:86:c7:80:00:03:e8:9f:7c:cf:4e:
fc:4d:c2:ff:2b:f8:a3:92:a1:8b:9e:e1:63:4a:33:b7:77:61:
9c:94:fa:d1:c5:d3:97:92:06:8b:f4:cc:d1:5d:40:03:11:05:
86:4d:75:1f:9c:cd:7e:11:9a:3d:eb:66:77:b2:67:18:55:21:
8e:7d:f7:d8:78:02:5b:48:03:e7:2d:4c:f2:0e:b5:bb:8f:d9:
38:ea:34:2e:6b:03:50:b3:3e:75:d4:e1:dc:0e:53:47:92:dd:
d0:9c:08:6a:a7:e5:fb:24:35:c8:fa:77:7b:40:ad:34:45:5f:
62:57:b3:6e:58:5c:db:86:fa:ff:5e:a9:46:a4:3a:fa:db:30:
a7:c5:01:93:b3:69:4c:36:17:86:76:37:80:a5:ea:d8:35:1e:
08:93:6b:35:00:f7:d3:d9:3f:65:f1:24:09:a2:ce:7b:d3:63:
f6:a4:69:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:40:34 2026 by rpki-client