Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: 2GUdOWEyipJPHUwbuKvDSjp8uJdjiPd4wvLfn5LZXHI=
Subject key identifier: E9:E4:D4:A6:08:81:26:FB:5E:A3:75:F2:7A:2A:79:83:42:DC:41:45
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 01A0E17518B7A02069F1CBE4C543977FBFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 1A78
Signing time: Sun 27 Sep 2026 06:02:22 +0000
Manifest this update: Sun 27 Sep 2026 06:02:22 +0000
Manifest next update: Mon 28 Sep 2026 06:02:22 +0000
Files and hashes: 1: 00NnGOjb0Kliq8h03PUkoF2V-mQ.roa (hash: VSJr4YxEOTSjkg/Ic9pjW8DLPur6HW+mqH3Z3+8+mfg=)
2: 7b8ozyWTjDv0dhZ7ua-y_cjPuyI.roa (hash: 38AuHkgBMFf7/nuVWCNssWlQtSQh16b1R73OJQ2+6XU=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: JEnBk2mK/l6UDGGxLgwGtxJwwpM6q762XXOXdkxg9go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:75:18:b7:a0:20:69:f1:cb:e4:c5:43:97:7f:bf:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Sep 27 06:02:22 2026 GMT
Not After : Sep 28 06:02:22 2026 GMT
Subject: CN=e9e4d4a6088126fb5ea375f27a2a798342dc4145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:1f:a9:77:ce:8f:ff:71:58:86:c0:44:3c:
f1:2f:60:0d:a8:b9:48:ba:4d:ac:01:42:24:1c:6d:
b7:e5:b0:8c:41:93:3d:e0:a4:70:0e:84:89:13:a2:
07:f7:e3:2f:25:be:ee:eb:38:06:2d:dd:bc:43:6e:
c1:37:23:e3:36:c1:0d:29:95:88:25:c6:d1:ab:31:
cc:a5:f9:79:8e:4c:72:b3:d1:05:c3:27:76:98:5f:
3c:33:e7:e1:30:6f:5e:d6:dc:92:75:ef:74:e6:b6:
ce:b5:8b:5f:74:cb:9b:a9:fc:43:31:fe:0b:ab:6b:
44:ad:5a:77:b4:b6:24:48:04:ac:cf:66:15:52:a2:
e6:33:9c:43:4b:7b:91:05:11:53:b5:e0:17:59:49:
6f:05:e0:31:41:68:67:92:06:f1:78:dc:11:4b:be:
fc:15:70:46:76:c8:b1:10:30:62:00:3b:1e:1e:88:
4f:79:19:9e:4d:0c:0f:40:73:6c:e8:94:b6:68:1f:
8a:1c:81:59:1b:b2:99:06:28:bd:96:f8:7d:8f:2b:
26:cd:4e:8f:7c:04:11:a5:6e:41:be:0b:62:18:6a:
a6:2b:b5:13:5a:a2:09:94:ee:a4:36:c8:f1:01:00:
ac:b3:c1:71:45:7c:c7:80:da:c5:bb:3f:2d:c4:75:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E4:D4:A6:08:81:26:FB:5E:A3:75:F2:7A:2A:79:83:42:DC:41:45
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3b:38:01:d9:da:80:d9:df:e3:a3:08:99:57:e1:30:2f:49:
72:43:94:48:ce:15:9d:e7:1a:99:3b:40:cc:7e:66:d3:d1:a5:
45:72:b7:2c:d4:28:d3:5f:11:01:af:15:58:23:68:e7:f8:f0:
f9:47:dd:d5:57:31:5b:eb:94:1b:30:22:a6:28:d2:a9:ef:82:
89:34:8e:64:d8:5b:0a:aa:3c:35:fc:7a:bf:6d:a2:50:40:57:
79:13:10:7e:e7:35:c1:21:02:df:11:56:8c:46:f6:32:54:da:
22:09:b2:4f:01:74:7d:fd:83:b7:d6:1b:10:b6:15:0f:cd:85:
43:62:59:79:c7:d7:a7:59:08:6d:c2:90:6a:da:da:63:dc:ad:
15:6f:0c:46:f0:b3:4c:a5:7b:b1:bd:34:51:37:4e:99:23:a5:
99:28:23:b0:84:7a:0b:94:14:5b:03:f3:df:53:97:a3:8c:1f:
5f:22:f6:fa:34:3c:3d:29:38:92:72:97:57:94:a8:c3:97:60:
10:8b:b0:db:c6:bf:92:5e:3d:e1:3d:77:15:71:f9:c0:d1:4f:
51:7d:a4:69:c4:14:0d:1b:3d:e5:44:6e:ee:29:36:2d:e2:82:
97:80:a5:b7:ee:96:74:11:32:9f:b7:c2:ac:85:c3:28:0e:32:
76:f1:fe:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhdRi3oCBp8cvkxUOXf7/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNzQxMGY0ZTYyYzc3NzJjNzhkNTc1MGIyMWZjMjE0MzM5
ZTk0YTIwHhcNMjYwOTI3MDYwMjIyWhcNMjYwOTI4MDYwMjIyWjAzMTEwLwYDVQQD
EyhlOWU0ZDRhNjA4ODEyNmZiNWVhMzc1ZjI3YTJhNzk4MzQyZGM0MTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3gfqXfOj/9xWIbARDzxL2ANqLlI
uk2sAUIkHG235bCMQZM94KRwDoSJE6IH9+MvJb7u6zgGLd28Q27BNyPjNsENKZWI
JcbRqzHMpfl5jkxys9EFwyd2mF88M+fhMG9e1tySde905rbOtYtfdMubqfxDMf4L
q2tErVp3tLYkSASsz2YVUqLmM5xDS3uRBRFTteAXWUlvBeAxQWhnkgbxeNwRS778
FXBGdsixEDBiADseHohPeRmeTQwPQHNs6JS2aB+KHIFZG7KZBii9lvh9jysmzU6P
fAQRpW5BvgtiGGqmK7UTWqIJlO6kNsjxAQCss8FxRXzHgNrFuz8txHUrxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnk1KYIgSb7XqN18noqeYNC3EFFMB8GA1UdIwQY
MBaAFL10EPTmLHdyx41XULIfwhQznpSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMt
MjY4NDhmZmVlNzY1LzEvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMtMjY4NDhmZmVlNzY1
LzEvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjs4Adna
gNnf46MImVfhMC9JckOUSM4VnecamTtAzH5m09GlRXK3LNQo018RAa8VWCNo5/jw
+Ufd1VcxW+uUGzAipijSqe+CiTSOZNhbCqo8Nfx6v22iUEBXeRMQfuc1wSEC3xFW
jEb2MlTaIgmyTwF0ff2Dt9YbELYVD82FQ2JZecfXp1kIbcKQatraY9ytFW8MRvCz
TKV7sb00UTdOmSOlmSgjsIR6C5QUWwPz31OXo4wfXyL2+jQ8PSk4knKXV5Sow5dg
EIuw28a/kl494T13FXH5wNFPUX2kacQUDRs95URu7ik2LeKCl4Clt+6WdBEyn7fC
rIXDKA4ydvH+3w==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:16:48 2026 by rpki-client