
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
File: VsihcTx0duAO0rd_2Y_YkzA2XYc.mft (raw, json)
Hash identifier: xFwT2RD/vfbtcZ88KVXBFCD7teMjWZWaeVxXrbK+x2w=
Subject key identifier: A9:43:92:EF:A9:EA:EE:5E:63:FA:A4:5C:EE:14:6E:69:D2:EC:8D:D7
Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
Certificate issuer: /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Certificate serial: 01A0C934BF1DEF74C76CD12E4F4907BE9AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
Manifest number: 1A70
Signing time: Tue 22 Sep 2026 13:01:12 +0000
Manifest this update: Tue 22 Sep 2026 13:01:12 +0000
Manifest next update: Wed 23 Sep 2026 13:01:12 +0000
Files and hashes: 1: 2e5AvXlufc-kEczHhTECSJ-V-JQ.roa (hash: I9+kJ0K5wv3UioVKT0ZYctRfAuqgjg7khDoT9z5Qntc=)
2: GmiNV02KpRdxeBzvA-9_R7Rwp5k.roa (hash: 1nMmGCSVtG3D2xti3D/6NXcOSYqZ/aoCI5L5XEr0uig=)
3: VsihcTx0duAO0rd_2Y_YkzA2XYc.crl (hash: TzCKiQt8CEXCd2vsyyVKdjplTbuEhDPA+WkVvzK/GkY=)
4: g6Ux-iBqw5pRnRrg3U9EpW7v5Jc.roa (hash: KFBqHuaTNX9BJpnJ/kNbP6C31mWv4bvManEdzG/ajqc=)
5: uMnJj4Kab9KmIMtIa8uhtAc_DQE.roa (hash: bAuyBKfbvWqtTPfDZHAOIs7YLPDKAsuglDNhJoyryV0=)
6: y-mXlAVA_RcZw6EcuVM9S9WcRIA.asa (hash: gqDE8n29X0iv7W/Nc2YwxWoxlZcdgypxmelBkYsKhFQ=)
7: zn01xQGloyAbsSnP6PO29s7Mbfc.roa (hash: NNMyaWpKq2FVG6BNaaJInZgK5V9VX12E5Q/fc3/maKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:bf:1d:ef:74:c7:6c:d1:2e:4f:49:07:be:9a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Validity
Not Before: Sep 22 13:01:12 2026 GMT
Not After : Sep 23 13:01:12 2026 GMT
Subject: CN=a94392efa9eaee5e63faa45cee146e69d2ec8dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:fe:cf:fd:e4:66:23:0c:8e:88:9c:ad:1c:
17:50:48:ba:91:e5:f1:5e:ff:97:0e:8b:bd:28:a9:
26:b7:01:e1:d5:37:bf:f5:42:1c:50:4a:87:93:9e:
1e:80:75:e2:1f:34:ea:04:5b:1b:ce:c6:f3:f3:8e:
c1:e8:86:7e:ea:c5:02:67:6a:fa:f4:fc:c2:7f:ae:
99:da:ee:ed:16:82:8c:dc:f8:af:1a:d7:19:56:cd:
1f:7d:a0:a9:bc:d1:81:0a:09:e1:1e:f6:13:ee:52:
c4:db:10:6b:f1:d7:95:02:1a:60:89:94:ef:56:44:
4b:39:d6:ba:1c:9c:66:e8:92:21:41:f3:e5:90:3c:
a8:a0:b9:be:4b:02:e6:b2:26:33:0f:b8:7a:54:bd:
10:e4:a6:d1:04:db:75:7a:33:fe:38:00:7a:34:21:
bf:6e:73:92:1c:ed:c7:2a:ce:29:7e:03:57:89:8f:
78:05:ee:18:57:b5:72:f0:46:7b:9a:6f:50:8a:19:
77:5f:0e:cd:98:81:b0:4d:67:a7:88:88:75:49:82:
28:b3:5d:b4:98:76:07:de:ee:a3:48:66:d1:55:99:
15:78:40:12:17:d6:03:58:97:e3:2f:64:8d:ce:e7:
f8:fe:18:57:2b:7b:cd:58:fa:40:e7:57:89:a0:6f:
fc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:43:92:EF:A9:EA:EE:5E:63:FA:A4:5C:EE:14:6E:69:D2:EC:8D:D7
X509v3 Authority Key Identifier:
keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:54:24:6c:e2:71:66:5a:de:90:5c:75:a2:7a:25:ae:bd:ac:
2d:10:42:85:05:58:e0:1c:18:7c:8e:9f:fe:f3:8e:23:44:7e:
45:9b:71:6c:37:a4:f4:9a:d1:fa:cb:52:61:4c:cc:2e:b8:75:
cf:b3:9b:71:8a:f9:77:d6:65:fa:75:bb:0a:ec:fb:1b:8e:7c:
ec:2a:54:c2:c0:65:0a:f9:f8:a3:b0:a2:ec:40:4c:73:75:a9:
55:a7:b1:1c:51:e2:7d:e4:a4:2f:37:8f:cb:0d:0f:c6:04:3e:
03:7f:26:04:57:79:9e:e2:4e:f5:7a:35:ac:10:96:2f:95:6f:
76:75:c2:51:81:ca:7f:da:59:04:63:af:3c:3f:c4:97:1b:8d:
79:ce:8b:59:83:f2:23:0d:6e:ac:04:86:82:9b:dd:25:09:a6:
26:87:5f:93:c7:1a:b5:d3:e7:ba:5e:d3:d2:87:54:7b:b2:37:
9c:c8:75:fe:60:62:cf:66:90:1e:d5:45:99:0c:c0:c1:3b:58:
4f:0c:40:09:f3:d9:81:2b:4d:4d:a8:57:ea:e0:39:71:0d:89:
13:20:8d:cc:f8:ae:8b:9f:32:a4:c3:60:19:82:64:c3:f3:a2:
75:12:e9:f6:74:f8:56:92:60:d6:7c:01:b9:6a:5d:70:fc:d9:
da:b4:d0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:07:54 2026 by rpki-client