Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json)
Hash identifier: sBJ2jFIzI7enyRv/mToQxJ4S/i0nxE6J894+7+7hqEY=
Subject key identifier: C7:E9:F1:1F:43:78:27:74:67:95:C7:1B:1C:C3:00:28:23:35:BE:B4
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 01A0C9A1A12C0DAE414438C9BC851D63A0CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 15:00:07 +0000
Manifest this update: Tue 22 Sep 2026 15:00:07 +0000
Manifest next update: Wed 23 Sep 2026 15:00:07 +0000
Files and hashes: 1: VJGlReXG5W-ZR47PVyvqWZdf0xI.roa (hash: wBxca4kCkRMoBMcjG9PQpXCJfip6KTb7TlGSlembBvo=)
2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: GB0Xduz+9Zcw9vXSU+dAt+QwR22xBSgj0BuysATKM3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 15:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:a1:2c:0d:ae:41:44:38:c9:bc:85:1d:63:a0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: Sep 22 15:00:07 2026 GMT
Not After : Sep 23 15:00:07 2026 GMT
Subject: CN=c7e9f11f437827746795c71b1cc300282335beb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5b:93:77:62:48:09:54:66:7b:fb:93:9d:60:
ad:69:af:e5:a2:2b:3b:9b:36:0b:b6:6a:49:15:d8:
34:9a:aa:6f:47:62:e3:b0:6d:4c:d5:a3:25:91:58:
69:30:98:8d:e0:2b:5e:8b:c6:3d:34:04:6f:8b:a4:
58:7f:6b:41:1d:94:b4:ff:bc:17:71:f6:c8:e4:0e:
0a:fa:ff:e2:0b:b7:5e:7f:35:46:b6:a8:8c:e9:7c:
d5:bb:28:27:9d:a4:db:e4:f9:25:5a:5d:2a:c5:bb:
b7:f8:e0:73:0a:86:a2:ec:0d:72:0f:6b:0d:52:2a:
65:72:c5:a3:be:2b:7a:33:c0:0c:01:77:b7:83:a6:
3b:fc:8f:48:b3:ae:25:23:a6:c7:66:4d:d3:29:b3:
eb:e5:79:29:21:57:e7:b4:43:f6:24:04:06:d5:fa:
57:b2:a1:4f:60:b1:de:35:91:58:0a:ac:8e:0b:6c:
65:7c:f0:51:bc:29:59:c8:d3:cc:9c:dc:68:7e:57:
dd:fd:f9:5f:ec:d4:d3:d5:6e:90:81:59:08:13:09:
b9:8b:73:b1:32:28:8e:fa:be:aa:b2:c7:72:6f:26:
0c:8b:5f:4e:c8:b3:31:28:28:b6:62:2a:55:ca:de:
e1:ae:ea:32:38:f9:c2:f3:dc:c6:3a:4d:b9:af:f4:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E9:F1:1F:43:78:27:74:67:95:C7:1B:1C:C3:00:28:23:35:BE:B4
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3b:8c:c9:99:e6:de:55:e0:77:cb:cb:66:ce:1e:f1:97:48:
f2:2c:35:0d:4a:0b:68:69:e1:cb:30:11:3d:9a:0d:98:7c:db:
41:71:19:09:e3:2f:07:4a:b3:bf:1a:7a:8c:d7:65:8d:1e:13:
1d:29:aa:be:8f:38:e4:d1:b8:cf:66:8c:9a:e9:78:64:61:5b:
24:f8:f0:9f:59:20:1c:3e:f8:e9:a5:a4:0d:cf:01:84:17:5e:
7a:c4:6c:e0:fa:b8:a4:6a:91:ec:6f:4a:2b:91:ab:af:58:48:
ca:29:42:c4:15:9b:ae:b5:d3:47:f1:72:c7:ba:df:33:44:12:
1b:27:87:c8:88:91:05:9e:3a:29:92:72:68:e3:fc:cb:5e:2a:
3e:6f:fc:07:d6:80:c0:6a:42:ef:3e:03:d5:d1:fd:16:c1:2a:
04:f1:9e:78:b4:29:69:fc:ef:2b:c9:90:2c:cb:67:12:84:d6:
56:3e:02:ff:75:8d:b9:89:69:af:d5:c4:e6:93:84:19:84:76:
6b:e9:c5:d2:b9:55:fc:1c:3a:33:f0:7e:05:ce:e2:ed:5d:11:
40:d2:a1:02:10:86:fa:72:12:c0:d0:d4:70:cd:65:53:5e:1e:
00:45:a5:cd:1f:c0:b5:9c:77:97:0c:4f:86:00:2c:e0:26:26:
ae:71:5e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:22:23 2026 by rpki-client