Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
File: VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft (raw, json)
Hash identifier: /0YbZwnOl7YEKFkScxGzfEQZq3xfBmsOYkJFuMY1RDk=
Subject key identifier: 90:17:DA:71:7A:22:AF:14:FD:5E:E4:A2:51:8F:FE:B0:3B:2D:62:98
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 01A0DD60C2E82BFFDD3E813A1B7A5BAC83F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
Manifest number: 15F9
Signing time: Sat 26 Sep 2026 11:01:40 +0000
Manifest this update: Sat 26 Sep 2026 11:01:40 +0000
Manifest next update: Sun 27 Sep 2026 11:01:40 +0000
Files and hashes: 1: T6MezzPBlD-bbmhzKmNPFwNmIv8.roa (hash: jsp4P2nEZMpmduMvRYgQ1VyIcfvVAi62rpnHCVogH+g=)
2: VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl (hash: tG/hh7aN14HE5uxioIfOobGss2fDC4jo7qA/HXIPVqg=)
3: mcJa5BsloYm8JusCxlLHO776lHs.roa (hash: HbfY+iVV1KBbAx/qXvr16mnDJ38KJqAs31bIwxnI0SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:c2:e8:2b:ff:dd:3e:81:3a:1b:7a:5b:ac:83:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Sep 26 11:01:40 2026 GMT
Not After : Sep 27 11:01:40 2026 GMT
Subject: CN=9017da717a22af14fd5ee4a2518ffeb03b2d6298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:d9:c4:dc:7b:ba:94:cd:50:45:7c:3f:2f:
81:88:bc:7e:44:91:86:51:b1:a3:d9:fb:23:b6:83:
83:62:dc:63:02:e4:24:89:ec:d3:84:88:bf:b2:de:
a3:f9:f7:65:24:70:2b:83:47:8a:17:9e:3a:62:f4:
a2:9d:ef:88:23:19:62:5e:75:00:37:e2:42:41:95:
9f:ca:d9:0a:52:c1:dc:26:80:23:a8:66:5d:79:10:
f2:e2:ee:23:d7:18:08:a1:12:8d:2e:83:ad:d3:96:
fc:bf:d6:cd:f4:e0:82:3f:44:8f:d1:b5:17:e9:8d:
52:ac:76:0d:e3:89:29:0a:17:34:8e:0c:44:5a:fc:
59:7e:a4:de:22:b9:3d:9a:05:d7:b0:16:71:9b:c9:
6c:37:29:68:c7:db:29:9d:de:40:78:eb:d6:c4:70:
2f:ae:d8:f6:00:9f:6b:1b:d2:9b:01:c4:0c:29:f5:
37:c5:45:d5:fa:3a:17:95:70:fd:cf:7b:30:7a:a9:
55:5e:ea:f5:19:e1:c4:d8:3e:35:6a:f6:12:73:47:
a4:d1:f1:83:9e:91:fc:90:fe:de:1c:db:f6:63:b1:
72:83:24:e9:06:85:d5:2e:87:72:62:06:c2:08:f5:
e2:81:d0:cc:7f:46:f5:1e:7b:a2:02:bf:d0:24:55:
b5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:17:DA:71:7A:22:AF:14:FD:5E:E4:A2:51:8F:FE:B0:3B:2D:62:98
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:13:6e:f0:67:af:fb:da:d0:b3:ec:dc:a9:67:54:a2:f1:c5:
20:40:b9:7f:d1:43:4c:ba:76:fe:27:06:28:c7:53:cf:f6:c7:
a8:b3:cc:e1:d6:29:c8:6f:04:5e:86:72:1c:d1:52:88:9d:77:
2a:e7:1b:09:ab:2d:b6:9b:1a:aa:05:64:14:dd:c7:78:b0:04:
74:13:8a:41:1c:7a:22:cc:02:e2:e6:fa:2f:d5:51:d2:ad:fc:
df:09:51:a3:3f:0e:b0:09:e6:19:08:88:32:a4:b0:8b:36:36:
e8:78:39:83:50:13:54:54:41:8a:0f:06:d5:b2:98:96:cf:2a:
2b:48:d8:17:f4:a0:10:c0:d3:52:57:49:38:ad:2e:3b:a2:02:
a0:cb:00:a4:28:e5:7c:1e:f2:7e:e8:f9:02:4f:b8:b3:ad:d0:
13:78:fd:cc:d8:58:0a:de:f2:44:1b:6a:bd:14:12:22:02:1d:
7a:61:e3:f9:93:10:42:10:20:30:4b:15:ea:18:f1:49:32:7d:
5c:34:f3:82:6d:8c:bc:c2:c9:98:28:43:ce:b8:6a:e5:81:8a:
c8:68:35:8d:6c:46:1a:51:c7:64:7f:0b:38:f9:82:e7:b6:8e:
f7:bc:0c:66:52:0d:93:13:6e:2a:1c:4a:73:ad:ba:ce:be:70:
b9:1b:77:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:52:22 2026 by rpki-client