Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
File: vJ7I21lyYHXuKfXvyQth5zwH968.mft (raw, json)
Hash identifier: kkWnSPjG5aOsmOyci+PMsFcy9EvKv8u2FwIZF9YP/KY=
Subject key identifier: 4F:A3:DF:8B:A1:D8:5A:23:34:D0:5B:8A:AF:1E:E6:37:71:76:43:A8
Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
Certificate issuer: /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Certificate serial: 019D29976F1D74A0AFB3337D804B1EFE8247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
Manifest number: 0DD4
Signing time: Thu 26 Mar 2026 10:01:23 +0000
Manifest this update: Thu 26 Mar 2026 10:01:23 +0000
Manifest next update: Fri 27 Mar 2026 10:01:23 +0000
Files and hashes: 1: IkIUfUWBgrqz-MQYA1JoiunLbZ8.roa (hash: ZkNSMusbdYjyY6Jst6K+Zs/Pf+gwZBfB+9r0tVdAYHs=)
2: vJ7I21lyYHXuKfXvyQth5zwH968.crl (hash: x5vSOF3OHOcGFCG4R2ZUCqmR3qegmdJ5Cr/RLGkhKS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:6f:1d:74:a0:af:b3:33:7d:80:4b:1e:fe:82:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Validity
Not Before: Mar 26 10:01:23 2026 GMT
Not After : Mar 27 10:01:23 2026 GMT
Subject: CN=4fa3df8ba1d85a2334d05b8aaf1ee637717643a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:74:7a:42:c5:a3:2a:c2:4f:0d:82:cc:75:
f3:4f:dd:56:1c:95:b7:a7:ea:5d:df:7c:73:aa:46:
85:3d:d2:65:88:5f:79:36:43:79:98:43:1b:a2:af:
43:c7:b2:23:62:ad:a8:19:7e:91:d6:43:b0:87:48:
6b:0a:a1:f8:36:67:64:2e:a2:9e:eb:cc:9c:62:33:
d5:e7:43:dd:10:53:0c:14:54:0a:9d:34:14:f4:fb:
85:a3:be:23:b1:32:80:1f:2f:82:a5:32:2f:c7:42:
b5:2b:67:e4:25:de:6f:d3:9d:74:01:8e:11:6d:1c:
fa:74:b0:1e:9e:94:0e:7a:5e:10:f9:6f:b4:04:ab:
5c:1b:79:35:b9:c8:99:a2:75:ad:b1:2f:6c:04:9c:
c5:53:5c:55:01:a3:11:9a:cd:f5:96:5a:df:61:5f:
d0:9a:ff:55:32:24:90:cd:6b:93:98:35:a0:9a:df:
f5:10:2a:49:12:b4:5a:6f:7f:cf:90:c3:56:35:92:
2f:63:77:68:00:83:ec:cd:85:ae:39:52:ea:44:54:
0a:93:fd:8f:d6:b8:ba:0a:5d:55:8a:f1:85:e7:bf:
71:56:6e:27:65:7a:69:c5:e6:d9:e6:cb:44:22:70:
76:30:a4:22:dd:d1:a8:9f:8a:31:93:15:40:6e:27:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A3:DF:8B:A1:D8:5A:23:34:D0:5B:8A:AF:1E:E6:37:71:76:43:A8
X509v3 Authority Key Identifier:
keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:db:5a:ae:77:75:4e:31:9f:46:ea:88:94:4d:ec:10:a9:d9:
ec:f4:39:fe:30:38:92:27:c1:39:2b:8c:8b:b5:57:1f:81:d1:
9b:ef:ce:fa:b1:f1:1a:ec:f2:af:ab:0f:aa:f8:0d:84:4b:60:
60:99:41:9d:8b:9e:5b:07:4a:4f:6d:45:9b:d4:37:a4:7a:58:
0d:0f:00:5b:68:9f:97:73:8d:b1:05:a9:72:91:be:d8:25:e0:
e3:d6:ba:75:76:a3:05:b4:df:d0:72:48:2e:90:20:b5:4a:b1:
a4:a6:d6:f2:04:f3:02:3f:da:74:3e:d1:81:46:63:ec:5c:4f:
c8:40:99:62:d7:10:14:1c:7b:9d:2f:44:c0:64:7b:8b:81:91:
05:b6:ff:5d:27:e8:fb:b9:a2:7a:18:29:e4:db:72:22:89:bc:
0d:9e:4a:19:65:7f:f3:d7:70:69:32:a3:99:f4:2a:fa:5e:93:
7c:2a:0d:33:b8:cf:ff:46:19:42:02:b2:54:5e:82:14:29:41:
1d:6d:86:1c:97:8f:9c:fd:63:87:df:db:2c:74:9e:2e:fc:fe:
b8:d1:7c:09:fb:bc:9b:81:f3:9f:89:1e:65:41:50:b2:d0:81:
54:ee:81:b8:46:7e:f4:ec:50:91:22:32:93:23:f9:0c:a0:6b:
49:f6:d9:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl28ddKCvszN9gEse/oJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWVjOGRiNTk3MjYwNzVlZTI5ZjVlZmM5MGI2MWU3M2Mw
N2Y3YWYwHhcNMjYwMzI2MTAwMTIzWhcNMjYwMzI3MTAwMTIzWjAzMTEwLwYDVQQD
Eyg0ZmEzZGY4YmExZDg1YTIzMzRkMDViOGFhZjFlZTYzNzcxNzY0M2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRR0ekLFoyrCTw2CzHXzT91WHJW3
p+pd33xzqkaFPdJliF95NkN5mEMboq9Dx7IjYq2oGX6R1kOwh0hrCqH4NmdkLqKe
68ycYjPV50PdEFMMFFQKnTQU9PuFo74jsTKAHy+CpTIvx0K1K2fkJd5v0510AY4R
bRz6dLAenpQOel4Q+W+0BKtcG3k1uciZonWtsS9sBJzFU1xVAaMRms31llrfYV/Q
mv9VMiSQzWuTmDWgmt/1ECpJErRab3/PkMNWNZIvY3doAIPszYWuOVLqRFQKk/2P
1ri6Cl1VivGF579xVm4nZXppxebZ5stEInB2MKQi3dGon4oxkxVAbidywQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+j34uh2FojNNBbiq8e5jdxdkOoMB8GA1UdIwQY
MBaAFLyeyNtZcmB17in178kLYec8B/evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdko3STIxbHlZSFh1S2ZYdnlRdGg1endIOTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84YjUwZTYtOTI3YS00ZDNiLTk0MjIt
ZTU3ZmJkYWU1OTAzLzEvdko3STIxbHlZSFh1S2ZYdnlRdGg1endIOTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS84YjUwZTYtOTI3YS00ZDNiLTk0MjItZTU3ZmJkYWU1OTAz
LzEvdko3STIxbHlZSFh1S2ZYdnlRdGg1endIOTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAttarnd1
TjGfRuqIlE3sEKnZ7PQ5/jA4kifBOSuMi7VXH4HRm+/O+rHxGuzyr6sPqvgNhEtg
YJlBnYueWwdKT21Fm9Q3pHpYDQ8AW2ifl3ONsQWpcpG+2CXg49a6dXajBbTf0HJI
LpAgtUqxpKbW8gTzAj/adD7RgUZj7FxPyECZYtcQFBx7nS9EwGR7i4GRBbb/XSfo
+7miehgp5NtyIom8DZ5KGWV/89dwaTKjmfQq+l6TfCoNM7jP/0YZQgKyVF6CFClB
HW2GHJePnP1jh9/bLHSeLvz+uNF8Cfu8m4Hzn4keZUFQstCBVO6BuEZ+9OxQkSIy
kyP5DKBrSfbZlA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:51 2026 by rpki-client