Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
File: 1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json)
Hash identifier: P8aqKSbXljEElN2NLsqKXnaBllY1GGI51Dy6/DDMRFs=
Subject key identifier: 88:92:8F:C0:C1:98:61:CC:5C:E4:83:F1:6C:B3:4A:4B:C0:65:43:6B
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Certificate issuer: /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial: 01A0CA47ADD173ECD398E22AE4F5443A03CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
Manifest number: 0E20
Signing time: Tue 22 Sep 2026 18:01:30 +0000
Manifest this update: Tue 22 Sep 2026 18:01:30 +0000
Manifest next update: Wed 23 Sep 2026 18:01:30 +0000
Files and hashes: 1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: DrJ6pe1MYfjrs4npLDwDtWimBeZNkw4uThJSGKImfrI=)
2: WOVURcgrOmo7CFBcFUmHZlO20Y8.roa (hash: wePf8ahRzSpTcfeEJN249YcPQyh2uGg5TQezwCJoWwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:ad:d1:73:ec:d3:98:e2:2a:e4:f5:44:3a:03:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Validity
Not Before: Sep 22 18:01:30 2026 GMT
Not After : Sep 23 18:01:30 2026 GMT
Subject: CN=88928fc0c19861cc5ce483f16cb34a4bc065436b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:dc:6e:87:19:f7:22:8c:47:18:d0:33:43:
26:26:99:04:30:d0:ca:87:d5:47:bd:98:f7:96:2c:
c7:e2:1c:13:49:50:f9:0a:56:44:c3:bb:ca:77:10:
b6:d0:ac:e2:eb:ff:69:a4:e5:f5:47:fa:3b:99:10:
82:d3:8e:a1:1d:f8:9f:15:48:6c:ba:16:bb:51:7f:
05:26:02:04:2a:53:f3:b8:48:66:7d:e9:89:65:a1:
62:86:5c:e2:88:33:c3:75:24:49:70:4a:07:17:5d:
4b:fb:df:00:fe:68:6a:a2:e0:c2:0f:4e:58:35:d8:
0a:5d:12:28:60:7e:17:27:be:81:64:52:71:0a:83:
ac:14:08:45:e7:98:a3:63:2f:d5:bc:62:a1:ee:d9:
d6:d5:76:00:0e:23:6d:5a:e8:e9:a5:35:84:c7:fe:
15:19:bf:8c:32:3b:7a:1e:81:c9:24:37:13:d2:1e:
35:25:e5:d3:a0:ba:2c:98:28:99:8b:2e:a0:6e:49:
dc:67:2c:e8:ec:92:43:69:18:3d:a7:e3:98:20:d4:
fc:28:de:bb:f0:49:fb:ca:7b:ed:d3:fd:25:61:5c:
2e:15:89:80:d8:28:8b:46:1b:1a:35:be:58:9e:df:
10:61:5e:88:34:e0:bd:5c:7f:e2:bb:f9:6b:7c:67:
29:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:92:8F:C0:C1:98:61:CC:5C:E4:83:F1:6C:B3:4A:4B:C0:65:43:6B
X509v3 Authority Key Identifier:
keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:a1:fc:1f:70:df:65:5c:da:92:93:69:95:d0:ae:67:6b:35:
ca:58:48:f7:cd:5c:aa:49:3c:c6:c0:76:7d:b2:cf:6a:41:af:
d4:62:ee:27:db:dc:3f:0d:ec:a4:ac:59:cb:90:2c:db:ff:38:
bd:38:6a:fc:3c:2f:dc:30:ba:4e:1f:6d:70:b8:af:c9:60:0b:
11:75:e9:ea:7e:e9:aa:a2:ec:70:59:87:68:9d:1c:76:17:a8:
d3:54:f8:87:18:38:2f:49:e2:7e:da:18:9a:c2:a1:3a:75:d8:
e6:cd:65:28:c1:65:23:de:0c:b7:2b:11:01:81:72:20:15:d6:
24:f0:f5:74:68:97:b2:fa:07:30:02:12:70:29:12:f9:5c:db:
89:bd:08:43:8c:d0:69:03:9f:48:bd:7e:ac:89:c9:68:51:4a:
30:08:12:c5:75:22:ce:8c:2e:90:5b:9f:a9:89:16:1f:5f:ea:
ff:99:3c:4a:e2:40:2d:ac:49:ec:5e:1f:ad:72:91:31:15:2f:
1e:5d:99:02:dc:79:68:4c:5d:98:63:1b:a4:02:83:b9:42:ef:
0b:18:bc:d5:39:36:21:d2:f6:f4:64:6d:a2:30:35:75:ce:2e:
70:12:13:76:56:b4:37:35:ee:79:b8:ef:c9:44:a1:af:01:c8:
82:5b:6e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:41:18 2026 by rpki-client