Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File: vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier: 0U5IYUQnO3YDbjKCuAHMhkY6juayAGmefrdlZnIADok=
Subject key identifier: CB:9D:BD:6A:03:15:62:36:A3:2C:45:87:D7:66:33:00:36:C7:FD:C8
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer: /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial: 019D27E04E720B429FE74C57763A75318FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number: 0F4F
Signing time: Thu 26 Mar 2026 02:01:44 +0000
Manifest this update: Thu 26 Mar 2026 02:01:44 +0000
Manifest next update: Fri 27 Mar 2026 02:01:44 +0000
Files and hashes: 1: FZljvcxVC3KvOuVQwDjBOz6vLKQ.roa (hash: kpnpQoylGbXqrj/XYTN9KcgWeq6V6Ko8315VlpltUrA=)
2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: 2zRdVb+gC+R+lkpoN8W6714yBm4FTbbpP0IxlyY7r1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:4e:72:0b:42:9f:e7:4c:57:76:3a:75:31:8f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Validity
Not Before: Mar 26 02:01:44 2026 GMT
Not After : Mar 27 02:01:44 2026 GMT
Subject: CN=cb9dbd6a03156236a32c4587d766330036c7fdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:57:2b:33:98:da:10:5d:6a:06:dc:b4:ab:
ce:13:56:2d:a3:12:dc:0c:ea:cf:cd:f9:03:32:67:
3d:81:ff:10:1a:90:40:99:bf:8e:e4:81:57:49:4d:
57:79:de:24:e2:24:b5:c0:f7:49:61:cd:49:91:ed:
1d:c8:28:92:a7:ba:08:65:9f:a6:0f:cb:2f:fa:04:
f9:0b:e8:1e:ea:e0:1e:e9:00:13:fc:53:9a:5f:32:
e7:0e:d2:1d:89:61:14:17:72:fc:08:98:b3:2e:d2:
8c:08:e7:bb:86:1e:d9:39:36:6d:61:66:c5:19:d9:
d4:15:d0:ee:ff:d5:14:ab:a5:06:20:7c:2e:68:d8:
03:6c:09:8c:25:fa:03:49:47:fa:5e:17:a5:56:ec:
28:c9:3d:52:4d:14:ec:29:2c:64:f1:7b:59:96:6e:
e0:b0:cb:9f:82:68:df:a0:c5:e5:06:28:73:66:7b:
b8:d4:df:6c:0f:fd:53:61:32:9e:09:9c:90:64:8c:
1a:73:a9:c4:25:ad:2f:e5:f1:65:7d:bb:d8:7c:31:
5f:ac:0f:9e:60:d6:45:74:f3:57:d1:80:ea:01:cd:
cd:aa:ed:b1:67:e2:ff:db:07:30:c8:bd:12:c0:88:
6b:7b:7f:7d:4f:55:6a:1d:67:84:48:af:f8:8d:89:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9D:BD:6A:03:15:62:36:A3:2C:45:87:D7:66:33:00:36:C7:FD:C8
X509v3 Authority Key Identifier:
keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:62:3a:a2:db:df:de:11:b9:fe:a1:24:e1:8d:ce:ff:0f:0c:
88:2a:3d:73:d7:b3:fd:ec:23:b6:7a:33:78:80:74:5e:f0:5e:
7b:d7:75:71:de:d5:21:d2:34:42:8c:93:0f:40:5c:b0:e7:dc:
ed:0e:34:66:d1:16:ff:29:c1:44:fc:d0:99:c5:17:ac:13:17:
b0:ec:03:fe:ef:2e:a5:e7:bf:be:8a:3e:89:9d:1c:e3:9d:b9:
a9:13:3d:2f:86:05:9f:58:6b:27:46:6c:2b:74:17:ad:5f:ad:
77:ad:e5:cd:bc:be:65:c0:7b:7c:9b:79:b4:aa:40:f0:3b:30:
a3:59:42:4c:16:ae:98:08:27:93:fc:74:5a:66:e6:66:e8:43:
19:6f:f1:b0:e6:25:4f:bd:dd:3d:89:09:12:d4:dc:ca:f0:65:
c7:2d:22:f1:db:d5:d1:1d:34:ac:24:db:19:8d:f8:ea:0a:92:
71:d4:bf:81:ed:51:9f:10:90:3b:8c:cb:5d:36:fc:ce:75:d8:
5e:03:43:eb:f2:22:73:ea:2f:90:44:44:2d:e6:5a:8b:32:9a:
82:ae:1c:55:a3:96:e0:f8:37:b9:35:30:62:66:7c:88:37:ab:
ab:a4:a7:8d:80:4d:84:8d:70:13:55:6d:71:8b:39:38:2d:3a:
d1:86:e3:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4E5yC0Kf50xXdjp1MY/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOTAzNDAzYzIwYTZjZGIyMjM2NmNjN2FjZjQ4ZTlmOTli
ZTM0ZmYwHhcNMjYwMzI2MDIwMTQ0WhcNMjYwMzI3MDIwMTQ0WjAzMTEwLwYDVQQD
EyhjYjlkYmQ2YTAzMTU2MjM2YTMyYzQ1ODdkNzY2MzMwMDM2YzdmZGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HNXKzOY2hBdagbctKvOE1YtoxLc
DOrPzfkDMmc9gf8QGpBAmb+O5IFXSU1Xed4k4iS1wPdJYc1Jke0dyCiSp7oIZZ+m
D8sv+gT5C+ge6uAe6QAT/FOaXzLnDtIdiWEUF3L8CJizLtKMCOe7hh7ZOTZtYWbF
GdnUFdDu/9UUq6UGIHwuaNgDbAmMJfoDSUf6XhelVuwoyT1STRTsKSxk8XtZlm7g
sMufgmjfoMXlBihzZnu41N9sD/1TYTKeCZyQZIwac6nEJa0v5fFlfbvYfDFfrA+e
YNZFdPNX0YDqAc3Nqu2xZ+L/2wcwyL0SwIhre399T1VqHWeESK/4jYlHIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMudvWoDFWI2oyxFh9dmMwA2x/3IMB8GA1UdIwQY
MBaAFLyQNAPCCmzbIjZsx6z0jp+ZvjT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkpBMEE4SUtiTnNpTm16SHJQU09uNW0tTlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9kNWU1Y2ItNWIyNy00N2Y2LThhY2It
MDM1MDc4NzIyNWM4LzEvdkpBMEE4SUtiTnNpTm16SHJQU09uNW0tTlA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9kNWU1Y2ItNWIyNy00N2Y2LThhY2ItMDM1MDc4NzIyNWM4
LzEvdkpBMEE4SUtiTnNpTm16SHJQU09uNW0tTlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2I6otvf
3hG5/qEk4Y3O/w8MiCo9c9ez/ewjtnozeIB0XvBee9d1cd7VIdI0QoyTD0BcsOfc
7Q40ZtEW/ynBRPzQmcUXrBMXsOwD/u8upee/voo+iZ0c4525qRM9L4YFn1hrJ0Zs
K3QXrV+td63lzby+ZcB7fJt5tKpA8Dswo1lCTBaumAgnk/x0WmbmZuhDGW/xsOYl
T73dPYkJEtTcyvBlxy0i8dvV0R00rCTbGY346gqScdS/ge1RnxCQO4zLXTb8znXY
XgND6/Iic+ovkERELeZaizKagq4cVaOW4Pg3uTUwYmZ8iDerq6SnjYBNhI1wE1Vt
cYs5OC060YbjmA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:55 2026 by rpki-client