Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
File: vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft (raw, json)
Hash identifier: hWxP6Z7Jp+OyYXcSAFm2MLGBW4LIr6HneZwJn3DHy+4=
Subject key identifier: A5:20:1E:20:7E:22:FB:C2:7D:9B:74:46:29:C0:18:0C:A1:E5:99:E4
Authority key identifier: BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
Certificate issuer: /CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Certificate serial: 019D27044A9FF8753B87E0F8A6FCC0ABFEEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
Manifest number: 080B
Signing time: Wed 25 Mar 2026 22:01:25 +0000
Manifest this update: Wed 25 Mar 2026 22:01:25 +0000
Manifest next update: Thu 26 Mar 2026 22:01:25 +0000
Files and hashes: 1: aENpbZFMMBWYCci1um8I0GEZSKc.roa (hash: bJqlLgnRm20xht7mBqwuocxi1HbSlACC3bpe5sLs4l4=)
2: vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl (hash: 65eSQ2yl8nxVpuXtrFvDhxpUjJGRnawOsf97ArgjxOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:4a:9f:f8:75:3b:87:e0:f8:a6:fc:c0:ab:fe:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Validity
Not Before: Mar 25 22:01:25 2026 GMT
Not After : Mar 26 22:01:25 2026 GMT
Subject: CN=a5201e207e22fbc27d9b744629c0180ca1e599e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:02:89:bb:19:12:41:5a:7b:b6:a1:39:ca:
df:08:b9:f8:08:03:32:3b:1a:50:a9:4d:8b:de:19:
e7:b7:00:f7:f0:df:af:a6:f2:96:30:7b:69:53:e9:
0d:6f:3e:0d:5d:6a:73:14:ca:3a:e6:ef:3c:b6:4b:
48:1f:6a:5d:b9:89:7f:e1:ca:f9:8a:42:34:fa:4b:
1b:2c:e6:9c:5f:b1:04:35:bf:03:a2:2f:f2:a9:57:
48:16:9f:23:25:10:4a:ba:3e:fa:b0:5e:15:9d:2a:
f3:5c:95:5c:b5:d3:72:b7:4f:9d:38:d9:dc:80:ea:
8e:7c:dd:9c:c7:17:6f:b3:68:d6:ee:80:31:98:51:
1d:70:21:5d:f8:4c:24:35:aa:1f:be:d5:b1:26:fd:
5c:6b:11:99:e8:41:e5:e3:38:7b:9a:12:94:66:22:
0b:69:9a:f3:75:db:67:0d:1c:87:ec:cf:51:17:f0:
c1:2b:fd:d0:d0:36:27:51:c7:93:24:72:ee:f1:44:
b9:90:00:20:61:d4:91:06:bd:af:ff:78:30:b5:39:
91:71:d6:f2:2e:f5:f9:d5:fc:62:5a:d6:ef:0e:d6:
7d:a0:2f:b7:a9:f4:03:07:00:cd:a1:1a:29:7f:5e:
08:d8:f3:04:08:fb:a3:5f:03:42:91:3b:ba:0b:ce:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:20:1E:20:7E:22:FB:C2:7D:9B:74:46:29:C0:18:0C:A1:E5:99:E4
X509v3 Authority Key Identifier:
keyid:BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:34:a8:5b:ed:f8:bf:b9:f7:72:25:87:d9:86:4a:01:90:32:
28:fc:1e:9d:88:86:0e:a4:22:44:ac:0f:3e:f8:96:10:2c:95:
cb:27:27:20:38:c3:9e:19:d2:92:ee:b4:7e:bd:c5:52:a9:81:
1c:42:2d:ba:c3:72:6d:ee:7b:e3:de:c6:b4:25:68:f4:4b:6a:
dc:54:ee:c2:e6:27:2e:1d:3a:05:40:eb:65:d4:5e:8a:ae:24:
5e:18:2c:c4:93:cf:c7:5d:b5:50:51:db:e9:f9:39:81:0b:b6:
83:0a:1b:81:50:9a:e8:62:44:78:27:9f:2a:2a:0b:da:fd:f4:
2a:b9:7d:c0:e0:aa:c4:a2:5c:93:45:c3:c2:de:e8:47:57:6e:
86:af:50:15:3a:63:18:4c:ea:92:39:3e:81:c9:4e:ac:e4:05:
9f:dd:b9:96:60:9a:71:d9:4f:77:47:68:6f:6e:dd:2a:b6:74:
28:08:56:f7:76:f8:80:06:04:0a:f0:14:ba:58:8b:d1:e5:c0:
00:c9:2e:9f:20:c6:23:f2:72:05:a1:68:5f:10:cb:9d:4c:a7:
41:10:d3:16:33:0d:f4:07:fb:c3:19:23:5b:7f:96:a2:48:f3:
14:79:e2:57:7b:7c:50:d6:26:ee:5f:17:3b:6b:f2:2b:0c:a5:
ad:22:b2:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBEqf+HU7h+D4pvzAq/7rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjQ5NzA0N2YyMGQ2ZjcwOGQ3ZGI0MjU1N2I2OThmYmZi
M2Q4ZmIwHhcNMjYwMzI1MjIwMTI1WhcNMjYwMzI2MjIwMTI1WjAzMTEwLwYDVQQD
EyhhNTIwMWUyMDdlMjJmYmMyN2Q5Yjc0NDYyOWMwMTgwY2ExZTU5OWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvacCibsZEkFae7ahOcrfCLn4CAMy
OxpQqU2L3hnntwD38N+vpvKWMHtpU+kNbz4NXWpzFMo65u88tktIH2pduYl/4cr5
ikI0+ksbLOacX7EENb8Doi/yqVdIFp8jJRBKuj76sF4VnSrzXJVctdNyt0+dONnc
gOqOfN2cxxdvs2jW7oAxmFEdcCFd+EwkNaofvtWxJv1caxGZ6EHl4zh7mhKUZiIL
aZrzddtnDRyH7M9RF/DBK/3Q0DYnUceTJHLu8US5kAAgYdSRBr2v/3gwtTmRcdby
LvX51fxiWtbvDtZ9oC+3qfQDBwDNoRopf14I2PMECPujXwNCkTu6C85fYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUgHiB+IvvCfZt0RinAGAyh5ZnkMB8GA1UdIwQY
MBaAFL1klwR/INb3CNfbQlV7aY+/s9j7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldTWEJIOGcxdmNJMTl0Q1ZYdHBqNy16MlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC81ODMzZjMtMjQyMS00MWIwLWJlMmUt
ODJhMTA3YzRhN2UyLzEvdldTWEJIOGcxdmNJMTl0Q1ZYdHBqNy16MlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC81ODMzZjMtMjQyMS00MWIwLWJlMmUtODJhMTA3YzRhN2Uy
LzEvdldTWEJIOGcxdmNJMTl0Q1ZYdHBqNy16MlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzSoW+34
v7n3ciWH2YZKAZAyKPwenYiGDqQiRKwPPviWECyVyycnIDjDnhnSku60fr3FUqmB
HEItusNybe57497GtCVo9Etq3FTuwuYnLh06BUDrZdReiq4kXhgsxJPPx121UFHb
6fk5gQu2gwobgVCa6GJEeCefKioL2v30Krl9wOCqxKJck0XDwt7oR1duhq9QFTpj
GEzqkjk+gclOrOQFn925lmCacdlPd0dob27dKrZ0KAhW93b4gAYECvAUuliL0eXA
AMkunyDGI/JyBaFoXxDLnUynQRDTFjMN9Af7wxkjW3+WokjzFHniV3t8UNYm7l8X
O2vyKwylrSKytQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:37 2026 by rpki-client