Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier: VCh0shBOD4OaK2kItNh5jYT2SNeUsB6+SBMy//CC078=
Subject key identifier: 2B:AF:63:7E:6C:BC:09:11:E0:6F:CF:58:FE:35:EE:CD:62:59:F7:26
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial: 01A0D872B7A8C3CAC60E182E42B9967D240F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 12:03:11 +0000
Manifest this update: Fri 25 Sep 2026 12:03:11 +0000
Manifest next update: Sat 26 Sep 2026 12:03:11 +0000
Files and hashes: 1: 440C9nJzfAwzFQHbbTSsKGKGkig.roa (hash: 9GaUDae42NdjzGOSW1+fUpuBNX675/CDIy2pT/BeZSI=)
2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: OwpjpvG+SwYd56j5hglQBEuS59xTNF6OlWA9nH5uFcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:b7:a8:c3:ca:c6:0e:18:2e:42:b9:96:7d:24:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Validity
Not Before: Sep 25 12:03:11 2026 GMT
Not After : Sep 26 12:03:11 2026 GMT
Subject: CN=2baf637e6cbc0911e06fcf58fe35eecd6259f726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:54:2e:32:1e:3c:9b:a2:5d:af:f3:9c:e8:
6d:62:ac:06:33:e8:f2:90:01:27:9e:84:7b:09:49:
7c:ce:82:d4:c0:39:3b:30:c1:45:0c:9e:c8:7f:c4:
5d:a5:26:e1:94:32:44:4e:ee:cc:94:7a:1a:a8:46:
e2:05:cf:e9:01:51:37:79:c3:9a:34:1f:5e:61:38:
cc:8d:2f:7c:24:20:3d:ef:0b:cd:f9:fc:be:1b:23:
95:10:82:e3:6d:2c:80:81:3b:51:5e:66:a0:93:f7:
45:76:62:cc:9d:76:3a:95:6b:8e:53:36:0d:e5:cc:
9c:50:32:5d:05:9c:01:a6:0a:cb:7f:0b:1c:d3:9f:
b7:34:17:a4:fd:a2:d0:26:82:1a:25:b2:0d:70:bf:
06:57:67:2a:a9:8d:c1:09:4d:98:d7:48:a5:73:43:
36:11:6d:08:29:fa:af:96:29:c1:33:5f:5b:40:eb:
f6:2b:0c:e4:5f:73:58:5d:6a:dd:ae:56:22:bc:eb:
80:30:9a:5f:c6:58:ef:61:db:ae:b0:d5:12:6a:bb:
a1:82:5d:ec:24:29:bc:98:16:0b:2e:ae:eb:b3:65:
fc:34:a9:ad:92:c4:a1:36:08:07:d7:87:17:7a:d7:
c7:ff:b6:5b:bc:9f:0e:fe:fa:2f:72:ba:c3:63:79:
71:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AF:63:7E:6C:BC:09:11:E0:6F:CF:58:FE:35:EE:CD:62:59:F7:26
X509v3 Authority Key Identifier:
keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:15:5e:17:93:da:d0:5e:d9:92:38:64:80:ff:ca:c8:ce:2f:
32:0f:38:61:3f:8a:11:37:9b:8c:2b:1b:f0:36:13:09:8d:9b:
f8:47:65:64:53:6e:f3:f5:4c:a7:bf:37:99:1d:91:4a:12:05:
a4:a9:05:b6:58:29:12:33:f9:9f:0f:77:50:99:07:2b:52:75:
6e:48:73:77:d6:73:1b:4a:c2:39:4b:f6:9a:3f:a8:57:c9:87:
e2:70:7e:4d:d2:de:80:a4:cc:f8:1c:e5:8b:53:d2:15:21:4c:
5d:18:0d:35:88:54:0c:f5:4c:c3:a3:f9:7a:24:e3:9a:c4:e4:
1b:b4:0e:78:6a:18:30:26:49:81:48:fa:ec:60:17:e4:d3:15:
a1:6a:a1:61:82:e0:25:30:d1:1c:28:26:ad:0f:7d:c1:c2:e4:
17:54:23:3d:5e:bf:1b:c8:f8:6a:90:69:b5:7c:9c:31:14:7b:
06:c3:de:b7:df:27:31:94:79:4b:e2:2a:50:a1:19:59:26:2c:
39:f9:f1:32:1a:03:4f:d3:38:68:84:1f:20:e5:0c:d8:1e:a5:
4e:b6:75:a8:44:04:d1:cf:73:47:5f:95:c9:da:6e:2d:8b:51:
1d:f5:9d:e1:94:b3:c6:d6:58:4e:ff:8d:bc:6c:be:83:d3:2d:
c7:4e:08:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYcreow8rGDhguQrmWfSQPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNGI1MWIwYmFjNDVmYTIyNmJkMmRjZmYxMTczMGVkNDBl
YzIxNDkwHhcNMjYwOTI1MTIwMzExWhcNMjYwOTI2MTIwMzExWjAzMTEwLwYDVQQD
EygyYmFmNjM3ZTZjYmMwOTExZTA2ZmNmNThmZTM1ZWVjZDYyNTlmNzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKVULjIePJuiXa/znOhtYqwGM+jy
kAEnnoR7CUl8zoLUwDk7MMFFDJ7If8RdpSbhlDJETu7MlHoaqEbiBc/pAVE3ecOa
NB9eYTjMjS98JCA97wvN+fy+GyOVEILjbSyAgTtRXmagk/dFdmLMnXY6lWuOUzYN
5cycUDJdBZwBpgrLfwsc05+3NBek/aLQJoIaJbINcL8GV2cqqY3BCU2Y10ilc0M2
EW0IKfqvlinBM19bQOv2KwzkX3NYXWrdrlYivOuAMJpfxljvYduusNUSaruhgl3s
JCm8mBYLLq7rs2X8NKmtksShNggH14cXetfH/7ZbvJ8O/vovcrrDY3lxRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuvY35svAkR4G/PWP417s1iWfcmMB8GA1UdIwQY
MBaAFL9LUbC6xF+iJr0tz/EXMO1A7CFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2Et
ZTQzNTIzOTgzNzkzLzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2EtZTQzNTIzOTgzNzkz
LzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhVeF5Pa
0F7ZkjhkgP/KyM4vMg84YT+KETebjCsb8DYTCY2b+EdlZFNu8/VMp783mR2RShIF
pKkFtlgpEjP5nw93UJkHK1J1bkhzd9ZzG0rCOUv2mj+oV8mH4nB+TdLegKTM+Bzl
i1PSFSFMXRgNNYhUDPVMw6P5eiTjmsTkG7QOeGoYMCZJgUj67GAX5NMVoWqhYYLg
JTDRHCgmrQ99wcLkF1QjPV6/G8j4apBptXycMRR7BsPet98nMZR5S+IqUKEZWSYs
OfnxMhoDT9M4aIQfIOUM2B6lTrZ1qEQE0c9zR1+VydpuLYtRHfWd4ZSzxtZYTv+N
vGy+g9Mtx04IIg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:31:50 2026 by rpki-client