Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
File: _vyDRELhMPTeeBW_Fpt6BMMDnd0.mft (raw, json)
Hash identifier: HPKwkA8KyXIPDmD31a5zDau09P9aqAkWAcAlm3gBKu0=
Subject key identifier: F4:38:4D:51:A4:92:6A:FB:27:FA:53:7A:C5:A5:73:83:DC:AC:31:C9
Authority key identifier: FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
Certificate issuer: /CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Certificate serial: 019D3307A4F663333F81D5CD75F452CB7BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
Manifest number: 0227
Signing time: Sat 28 Mar 2026 06:00:32 +0000
Manifest this update: Sat 28 Mar 2026 06:00:32 +0000
Manifest next update: Sun 29 Mar 2026 06:00:32 +0000
Files and hashes: 1: _vyDRELhMPTeeBW_Fpt6BMMDnd0.crl (hash: A3N8m3NOyoyvaRez5Qw+otMbNFpakUeBjWRMDJNLz1c=)
2: cT6SuWNZtVuKzcAvYCI7FSFaYQE.roa (hash: SjRBTtGgC/H2KCUfLueFpAeHEx9PBCWk0x1hBQie0OQ=)
3: ok5r6MoKYHzJuyej6dFp-gTIp3M.asa (hash: grCR+xu1HRWvar49wk30oRQo1ZKpcltQ6YnvXQrsvqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:a4:f6:63:33:3f:81:d5:cd:75:f4:52:cb:7b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Validity
Not Before: Mar 28 06:00:32 2026 GMT
Not After : Mar 29 06:00:32 2026 GMT
Subject: CN=f4384d51a4926afb27fa537ac5a57383dcac31c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:8f:6c:85:12:ce:b5:ca:56:94:30:9a:06:
ed:3d:48:b6:7c:28:c7:6f:f8:ba:6d:5d:e0:e8:09:
84:b4:b4:e6:e0:46:09:55:b0:a7:d4:19:de:f0:3b:
b6:51:0a:95:72:ec:bd:6c:57:22:0a:31:af:73:21:
77:10:01:51:81:bc:20:e3:7d:70:39:92:a7:fc:26:
9d:1c:ae:65:01:ff:bd:87:67:f5:bb:4f:35:45:bf:
e3:44:17:fe:cd:bf:07:0a:b0:36:0d:e9:b0:b3:1e:
ed:d5:10:f8:da:75:44:ca:3b:29:2b:66:c7:e7:76:
d3:4f:7f:f4:23:82:62:18:6e:c0:e5:2d:f7:67:9c:
b2:1a:28:74:aa:17:ab:34:b5:e5:83:33:63:3b:82:
78:58:cf:81:41:b6:d2:54:be:d3:34:8f:7d:2b:ab:
b4:29:39:db:b4:6c:8b:68:7b:6f:e7:69:ff:76:22:
6a:96:82:bc:24:9c:5a:8f:54:27:29:d4:a7:51:22:
f6:f6:2b:ed:c5:05:44:f2:8b:3d:3a:26:3a:be:d9:
0b:bd:3a:ed:e9:cc:e9:4a:0b:be:4f:98:f7:21:59:
be:b7:29:32:a5:61:64:58:46:52:cb:a4:2c:8c:af:
f5:c4:f7:b6:33:d5:98:23:8d:0c:79:b7:7f:cd:61:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:38:4D:51:A4:92:6A:FB:27:FA:53:7A:C5:A5:73:83:DC:AC:31:C9
X509v3 Authority Key Identifier:
keyid:FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c6:18:72:d9:00:ce:4c:99:d5:90:f6:b8:76:f6:6e:98:5d:
a9:ac:e8:fc:68:fe:64:70:fd:f7:95:32:47:c1:5f:0c:5a:ef:
81:fd:16:cd:2f:6c:04:6a:89:6a:68:b1:7c:88:2f:44:29:d3:
4d:ba:7b:fc:38:83:b9:c1:4d:13:70:0a:40:27:9c:12:14:24:
2b:c7:04:7c:75:fe:18:da:06:09:97:59:eb:90:b0:64:2e:ab:
7e:50:fb:8b:f9:b0:23:9d:14:96:b3:b7:4b:6c:85:d2:ac:0c:
8a:25:4b:f2:50:41:9a:84:91:93:c9:e5:55:f9:8b:0f:fc:cb:
b4:de:bc:3c:19:90:d1:61:50:20:42:c1:6b:47:4e:37:08:03:
2b:aa:2f:0c:f0:c0:1e:32:12:95:62:3d:93:5c:89:c0:cf:c8:
00:65:3c:a1:bf:d4:f8:7c:14:a1:da:3a:f5:4e:b6:5f:39:49:
42:3c:c0:fc:8e:be:90:8a:9c:af:9a:8c:52:ce:1e:69:24:36:
95:43:08:f2:1a:df:3c:20:aa:ef:65:e1:76:3b:25:99:8c:62:
cd:21:95:40:9d:38:41:49:a8:26:6a:5f:d5:9e:7a:fe:66:52:
a7:a5:f9:b4:b6:9a:44:a2:4f:83:8a:4d:34:69:7b:d8:2e:05:
2d:20:61:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zB6T2YzM/gdXNdfRSy3uuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZmM4MzQ0NDJlMTMwZjRkZTc4MTViZjE2OWI3YTA0YzMw
MzlkZGQwHhcNMjYwMzI4MDYwMDMyWhcNMjYwMzI5MDYwMDMyWjAzMTEwLwYDVQQD
EyhmNDM4NGQ1MWE0OTI2YWZiMjdmYTUzN2FjNWE1NzM4M2RjYWMzMWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbSPbIUSzrXKVpQwmgbtPUi2fCjH
b/i6bV3g6AmEtLTm4EYJVbCn1Bne8Du2UQqVcuy9bFciCjGvcyF3EAFRgbwg431w
OZKn/CadHK5lAf+9h2f1u081Rb/jRBf+zb8HCrA2Demwsx7t1RD42nVEyjspK2bH
53bTT3/0I4JiGG7A5S33Z5yyGih0qherNLXlgzNjO4J4WM+BQbbSVL7TNI99K6u0
KTnbtGyLaHtv52n/diJqloK8JJxaj1QnKdSnUSL29ivtxQVE8os9OiY6vtkLvTrt
6czpSgu+T5j3IVm+tykypWFkWEZSy6QsjK/1xPe2M9WYI40Mebd/zWGMYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQ4TVGkkmr7J/pTesWlc4PcrDHJMB8GA1UdIwQY
MBaAFP78g0RC4TD03ngVvxabegTDA53dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3Z5RFJFTGhNUFRlZUJXX0ZwdDZCTU1EbmQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NmJlN2ItNzMyMi00ZjM5LTgzM2Qt
ZjkzM2I5NTk4OGMxLzEvX3Z5RFJFTGhNUFRlZUJXX0ZwdDZCTU1EbmQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NmJlN2ItNzMyMi00ZjM5LTgzM2QtZjkzM2I5NTk4OGMx
LzEvX3Z5RFJFTGhNUFRlZUJXX0ZwdDZCTU1EbmQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMYYctkA
zkyZ1ZD2uHb2bphdqazo/Gj+ZHD995UyR8FfDFrvgf0WzS9sBGqJamixfIgvRCnT
Tbp7/DiDucFNE3AKQCecEhQkK8cEfHX+GNoGCZdZ65CwZC6rflD7i/mwI50UlrO3
S2yF0qwMiiVL8lBBmoSRk8nlVfmLD/zLtN68PBmQ0WFQIELBa0dONwgDK6ovDPDA
HjISlWI9k1yJwM/IAGU8ob/U+HwUodo69U62XzlJQjzA/I6+kIqcr5qMUs4eaSQ2
lUMI8hrfPCCq72XhdjslmYxizSGVQJ04QUmoJmpf1Z56/mZSp6X5tLaaRKJPg4pN
NGl72C4FLSBhrA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:44:58 2026 by rpki-client