Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File: _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier: x8jJWmiOIzSMiw+JMcXvU4I6dB+r5diTtbtoYRgyAWw=
Subject key identifier: 17:49:1B:37:73:1F:5F:E1:57:EB:78:AD:9E:11:95:1D:6A:2E:C6:3E
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial: 01A0C7EA2A0D20503AADB89CDAC4164BBBEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number: 0D91
Signing time: Tue 22 Sep 2026 07:00:07 +0000
Manifest this update: Tue 22 Sep 2026 07:00:07 +0000
Manifest next update: Wed 23 Sep 2026 07:00:07 +0000
Files and hashes: 1: 9CSlDg9AoP6XQftipK09LoZccXE.roa (hash: /0UyKFue8fewRbSVJ3V30gUcuOf6lpAwatxyqWR/sjk=)
2: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: aLU49+KJR8KL47ek0uJ2EcumhcbqR9jtxQpIYmCcM3w=)
3: mykSL7Qh3PSdFsWbgAVoPLK49LQ.roa (hash: fv4E9AvJZausLwDaoGx5qtDafVauUfmM2KAAmLXRacU=)
4: uKWnz8_LcW_aNSrzf71no4gpaHo.roa (hash: J7oKnwSHKrSta4NBW2liWqaQzZeozN70ItapCRa9dC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:2a:0d:20:50:3a:ad:b8:9c:da:c4:16:4b:bb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Validity
Not Before: Sep 22 07:00:07 2026 GMT
Not After : Sep 23 07:00:07 2026 GMT
Subject: CN=17491b37731f5fe157eb78ad9e11951d6a2ec63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9b:ec:ca:2d:54:6a:44:d2:ca:44:63:83:c3:
f1:50:59:9a:3c:a0:9c:16:5e:bf:7e:a4:ab:1a:73:
bc:6b:12:2b:02:a5:b7:a4:19:96:6a:d9:02:44:de:
d0:1a:ba:ac:c0:a6:f2:18:4f:56:6a:4d:43:ca:c0:
25:3e:a2:c0:f6:7e:b7:13:ca:83:02:1c:5a:6d:73:
71:68:0f:b9:22:b3:30:2a:d2:28:96:ab:80:36:3b:
dc:61:60:54:33:74:cf:24:4d:8b:74:68:8b:d7:9c:
61:67:35:65:e8:03:c2:f7:c0:79:9f:4f:99:3d:8a:
0d:ba:0d:a4:3c:25:b7:5d:05:ba:af:28:16:76:f8:
83:b6:a2:b2:fa:1a:b8:75:95:e4:26:5a:76:a8:19:
4e:e8:c6:f6:c9:5a:39:71:f7:8e:7c:2b:0c:fc:72:
a0:04:07:35:50:6a:01:d0:a8:2d:f7:dd:8a:14:f3:
6e:b0:b7:f8:cc:85:1c:39:6d:6d:27:f9:bd:f5:60:
d6:f6:d1:15:76:7d:ce:ac:fd:45:16:09:58:4c:f3:
a1:5e:45:61:a4:40:f8:86:25:d9:0a:e0:2f:e5:4b:
76:97:bf:39:4b:70:b3:91:1c:0a:3b:1f:14:e1:76:
89:2c:5a:1f:06:3e:33:f0:1e:20:84:4f:b7:03:5a:
f8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:49:1B:37:73:1F:5F:E1:57:EB:78:AD:9E:11:95:1D:6A:2E:C6:3E
X509v3 Authority Key Identifier:
keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8e:ef:f7:7e:40:95:64:33:74:16:bb:2c:57:64:49:3d:21:
22:51:ed:ba:c7:b0:0e:37:5d:68:fa:fb:71:cb:c5:e4:bf:68:
d0:e9:2c:fb:c8:02:59:45:d7:04:0c:84:57:c8:9e:a2:ca:35:
ef:0b:67:8b:53:12:aa:68:5b:c8:50:e9:b5:69:f9:78:12:e1:
fc:60:38:5d:34:41:2c:45:45:8a:cd:a8:9d:ca:c2:9f:1b:52:
db:7b:23:30:8d:e0:12:c4:87:6f:87:f1:fe:af:cb:ca:8d:6c:
16:8e:3f:fd:60:cd:1a:a3:9f:14:73:65:fc:da:4a:8d:6c:2b:
8c:47:d8:f0:e3:a4:26:69:63:1b:4b:de:ac:94:5f:07:ea:16:
68:66:4d:c0:80:b2:0a:34:1c:06:50:1f:6a:69:d3:d4:f1:6b:
58:48:bf:17:e7:d6:96:19:5a:69:12:ed:75:43:7f:5c:fd:92:
a6:5c:ca:c4:e2:90:63:fd:fa:ae:ac:a8:13:61:14:9f:e9:2f:
d5:c9:e3:9f:75:6a:d0:9c:60:90:13:58:19:46:02:4c:b2:c9:
de:92:cc:48:cd:2f:28:16:25:c1:66:a9:ee:d5:43:74:8a:dc:
6a:c1:53:6f:82:e7:03:2b:a2:e4:6e:56:d5:1b:b3:d1:95:79:
dc:0b:c3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:23:10 2026 by rpki-client