Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
File: vaYQQ1QkhQlrDfQ1HMDal383cN0.mft (raw, json)
Hash identifier: A//1q5+72BBjKqoV2k19jEqCwRmZ65CV1AJssKYR7Ng=
Subject key identifier: CF:1D:A7:A4:61:00:85:83:EA:9E:2B:36:04:F1:38:58:62:00:1F:17
Authority key identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
Certificate issuer: /CN=bda61043542485096b0df4351cc0da977f3770dd
Certificate serial: 01A0CD4816E2B680049DA500D665443F421C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 08:00:48 +0000
Manifest this update: Wed 23 Sep 2026 08:00:48 +0000
Manifest next update: Thu 24 Sep 2026 08:00:48 +0000
Files and hashes: 1: RP8MgkKEHlqeBOnUZe0z_Y0SQKk.roa (hash: Ptm5tesi9injee8NYFqMkun/MxMMcArohdb5avPOa5I=)
2: vaYQQ1QkhQlrDfQ1HMDal383cN0.crl (hash: +3Vlt+z+otKpJZzLht26fGi3DlEHOQJ40BCH3SNl91I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:16:e2:b6:80:04:9d:a5:00:d6:65:44:3f:42:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda61043542485096b0df4351cc0da977f3770dd
Validity
Not Before: Sep 23 08:00:48 2026 GMT
Not After : Sep 24 08:00:48 2026 GMT
Subject: CN=cf1da7a461008583ea9e2b3604f1385862001f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:a7:bf:c8:63:6e:a9:41:cf:b8:bf:f2:70:
54:73:4b:6a:06:b5:37:5a:72:a5:6c:9b:9b:d5:00:
e6:a7:72:6b:5b:88:ee:02:cc:d3:4f:7c:d5:f5:40:
e1:f1:98:79:a4:09:5f:58:bc:a7:20:1b:71:e1:bc:
39:8c:1a:cd:2a:28:43:35:a4:25:7a:cb:ec:db:25:
20:6a:d2:4e:64:95:1b:9b:d0:09:0b:4e:1f:f1:5b:
37:5d:7e:0e:82:41:35:44:58:c5:b8:57:e9:97:83:
d5:18:02:ff:42:88:45:07:4b:25:b4:52:5a:2c:dc:
67:63:58:1b:9f:d1:94:e6:5e:ec:22:c1:b8:b1:7a:
16:a1:d7:a0:e2:60:59:e3:b2:33:06:70:cc:67:1d:
e1:3e:75:d1:34:af:55:94:fb:02:f4:60:bc:f2:0e:
c1:d3:03:1c:1a:c1:b8:1e:7c:30:ec:37:59:1d:9e:
26:46:6f:b1:5c:d6:11:f5:3d:f4:51:ae:f2:90:95:
98:bb:ff:6c:16:d0:fd:e0:5b:61:fa:5a:6a:1a:60:
c6:e8:c0:f4:74:60:25:98:43:4d:f1:ca:6d:f3:3e:
e2:60:56:cd:20:3a:c1:4d:61:3b:a5:c0:42:b3:d6:
f3:05:12:9f:cf:3e:7e:b3:42:7e:42:8b:c2:e4:c5:
1b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1D:A7:A4:61:00:85:83:EA:9E:2B:36:04:F1:38:58:62:00:1F:17
X509v3 Authority Key Identifier:
keyid:BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:62:d9:e6:bc:7f:cf:dc:ac:53:e7:3d:22:0e:10:57:9c:ef:
00:1e:be:c6:ea:21:c3:6e:9c:f9:41:f5:61:50:d8:25:0e:64:
7f:e3:d9:98:8a:8a:0c:15:50:c4:6b:25:92:02:c6:0f:a8:9e:
b0:25:25:21:cd:8d:a5:fa:8a:fd:5d:20:c0:0d:75:3e:52:6e:
d2:8f:86:04:35:71:b1:4f:96:f9:c2:45:25:0a:56:68:db:e2:
98:4f:52:dc:ea:1b:c6:e1:29:77:07:06:77:fb:60:bf:14:9c:
ab:e6:97:bc:e8:ad:22:62:db:eb:79:a4:e2:92:95:24:85:7c:
65:e6:cc:e7:d9:93:d2:eb:0b:a9:f4:a3:00:18:a9:65:21:4f:
18:24:64:18:90:d3:b8:ab:5c:fb:b2:28:1d:44:6b:31:cb:04:
b9:3f:17:9e:9e:35:15:ec:7b:70:f4:b3:2f:29:c7:df:dd:f9:
cf:d2:e8:28:28:c7:83:96:21:18:ee:7c:f9:8e:7b:fb:fb:c8:
bb:81:fe:9c:79:d9:e3:e3:53:7a:95:fa:c3:0d:15:76:bd:88:
6b:78:03:55:04:d8:35:25:75:48:d0:0b:60:d2:a6:f4:88:50:
e2:e7:ef:a2:6e:81:9b:28:83:c6:64:5d:b7:b0:bb:ec:5c:67:
5b:bb:86:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNSBbitoAEnaUA1mVEP0IcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYTYxMDQzNTQyNDg1MDk2YjBkZjQzNTFjYzBkYTk3N2Yz
NzcwZGQwHhcNMjYwOTIzMDgwMDQ4WhcNMjYwOTI0MDgwMDQ4WjAzMTEwLwYDVQQD
EyhjZjFkYTdhNDYxMDA4NTgzZWE5ZTJiMzYwNGYxMzg1ODYyMDAxZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfOnv8hjbqlBz7i/8nBUc0tqBrU3
WnKlbJub1QDmp3JrW4juAszTT3zV9UDh8Zh5pAlfWLynIBtx4bw5jBrNKihDNaQl
esvs2yUgatJOZJUbm9AJC04f8Vs3XX4OgkE1RFjFuFfpl4PVGAL/QohFB0sltFJa
LNxnY1gbn9GU5l7sIsG4sXoWodeg4mBZ47IzBnDMZx3hPnXRNK9VlPsC9GC88g7B
0wMcGsG4Hnww7DdZHZ4mRm+xXNYR9T30Ua7ykJWYu/9sFtD94Fth+lpqGmDG6MD0
dGAlmENN8cpt8z7iYFbNIDrBTWE7pcBCs9bzBRKfzz5+s0J+QovC5MUbFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8dp6RhAIWD6p4rNgTxOFhiAB8XMB8GA1UdIwQY
MBaAFL2mEENUJIUJaw30NRzA2pd/N3DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmFZUVExUWtoUWxyRGZRMUhNRGFsMzgzY04wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xOTY2ODktMmRiNy00ZTgwLWI5MmMt
M2EyYWQ4OGRlYWRlLzEvdmFZUVExUWtoUWxyRGZRMUhNRGFsMzgzY04wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xOTY2ODktMmRiNy00ZTgwLWI5MmMtM2EyYWQ4OGRlYWRl
LzEvdmFZUVExUWtoUWxyRGZRMUhNRGFsMzgzY04wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmLZ5rx/
z9ysU+c9Ig4QV5zvAB6+xuohw26c+UH1YVDYJQ5kf+PZmIqKDBVQxGslkgLGD6ie
sCUlIc2NpfqK/V0gwA11PlJu0o+GBDVxsU+W+cJFJQpWaNvimE9S3OobxuEpdwcG
d/tgvxScq+aXvOitImLb63mk4pKVJIV8ZebM59mT0usLqfSjABipZSFPGCRkGJDT
uKtc+7IoHURrMcsEuT8Xnp41Fex7cPSzLynH3935z9LoKCjHg5YhGO58+Y57+/vI
u4H+nHnZ4+NTepX6ww0Vdr2Ia3gDVQTYNSV1SNALYNKm9IhQ4ufvom6BmyiDxmRd
t7C77FxnW7uGDg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 17:53:17 2026 by rpki-client