Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
File: 1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json)
Hash identifier: vNvU2MSsfEpO7xe0lUUA8PxzPEIx/BwAlOFzfeIfaes=
Subject key identifier: 8E:22:67:DF:2E:67:C7:1A:73:5A:EF:9F:1B:0B:D3:71:89:69:F2:6E
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Certificate issuer: /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial: 019FAA882F8E42028D8599A0155A04ADD65F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
Manifest number: 0D8B
Signing time: Tue 28 Jul 2026 21:01:19 +0000
Manifest this update: Tue 28 Jul 2026 21:01:19 +0000
Manifest next update: Wed 29 Jul 2026 21:01:19 +0000
Files and hashes: 1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: +NykgqshyTMhnbsAOM6vUUFWrPKEvq4vUlK75DTQWq8=)
2: WOVURcgrOmo7CFBcFUmHZlO20Y8.roa (hash: wePf8ahRzSpTcfeEJN249YcPQyh2uGg5TQezwCJoWwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:2f:8e:42:02:8d:85:99:a0:15:5a:04:ad:d6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Validity
Not Before: Jul 28 21:01:19 2026 GMT
Not After : Jul 29 21:01:19 2026 GMT
Subject: CN=8e2267df2e67c71a735aef9f1b0bd3718969f26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:45:93:2f:82:c6:0f:98:52:90:52:bc:ac:
92:a5:30:d6:ea:0a:8d:b1:16:c1:76:d7:aa:81:c6:
bd:d7:c9:64:73:dc:69:0a:84:3e:f1:0e:59:2a:35:
45:13:31:f7:74:99:fa:27:52:0f:5f:be:ea:79:78:
bd:d5:37:d7:70:e5:8f:a1:57:1d:cd:ba:1b:16:e1:
3f:17:8b:10:bc:96:86:b1:ed:04:5d:2e:90:f8:58:
21:ab:08:16:e7:26:26:8c:96:05:3d:31:1f:41:06:
88:f7:3b:78:b4:1a:91:a5:d4:5b:ed:b8:52:52:56:
25:73:19:5c:08:c6:f0:92:e3:d2:17:0d:7a:a7:cb:
7b:9d:20:fe:e6:39:c7:c5:12:51:46:2d:07:bb:36:
51:32:62:63:15:28:72:5a:a5:3b:6d:8f:20:7c:60:
b8:62:5c:a2:41:f9:f4:da:bd:ce:fd:a6:94:7f:75:
9c:26:66:a5:0a:f4:1c:aa:6c:6b:48:58:9a:b6:8a:
8d:f9:a2:c0:21:38:2b:93:f5:eb:5e:e5:e8:2a:b2:
91:12:4b:3a:bb:72:e7:15:44:89:39:3b:60:cf:9e:
cc:bb:af:f2:f8:87:c7:d5:35:03:83:cd:01:3b:28:
d9:f9:ac:9d:0a:74:7e:b5:a5:d7:27:0f:f1:08:6d:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:22:67:DF:2E:67:C7:1A:73:5A:EF:9F:1B:0B:D3:71:89:69:F2:6E
X509v3 Authority Key Identifier:
keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:3f:06:41:3c:d3:a4:81:12:40:08:49:cb:13:e6:d0:1f:f3:
a2:a3:a4:99:bc:bb:a6:e7:26:21:4b:b0:20:4d:b7:2e:a2:fe:
ba:09:bb:13:ec:73:da:32:e1:6c:0b:41:be:56:68:15:8c:4f:
c7:d3:6c:76:a9:62:50:fd:83:0a:25:cd:05:a4:63:87:72:92:
6d:bf:68:c9:6c:a6:bc:5d:8f:4a:ef:17:04:89:6e:45:27:56:
08:62:93:cc:50:2f:07:70:7e:83:ea:9f:97:d7:86:e7:33:c7:
2e:81:46:21:b9:bd:87:52:50:1f:27:fd:65:95:45:f5:96:f2:
82:3e:71:7b:3c:92:f9:0c:d8:5b:67:d7:59:04:e1:c1:73:80:
dc:c0:59:39:89:07:cf:98:9d:93:0e:b6:84:f4:b1:97:47:cc:
1a:9e:23:fe:d7:3c:ad:ab:c2:44:69:35:9d:d2:d9:45:38:64:
e8:ef:99:1f:2c:72:c7:5f:aa:f7:fd:2b:7f:27:64:c4:af:87:
21:a6:75:d4:ae:24:10:c1:2e:78:2f:79:67:ba:64:1c:5d:c2:
42:f8:b0:8e:26:b6:e6:05:4e:dc:24:3a:be:e6:33:a9:60:82:
42:da:5f:d4:28:e4:b1:b9:20:aa:9c:7d:98:28:36:45:c1:32:
73:ed:5d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:22:29 2026 by rpki-client