Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: 3MEinFX/f2g6+K4qjvBqII/ddSPD7lsIxzIhrM22BRY=
Subject key identifier: D2:94:1C:BD:5E:63:9D:FE:B3:93:DB:AC:3A:17:5E:45:A9:47:0F:15
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 019D2584272750692E395AF1054E40CFFEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 15:01:50 +0000
Manifest this update: Wed 25 Mar 2026 15:01:50 +0000
Manifest next update: Thu 26 Mar 2026 15:01:50 +0000
Files and hashes: 1: 00NnGOjb0Kliq8h03PUkoF2V-mQ.roa (hash: VSJr4YxEOTSjkg/Ic9pjW8DLPur6HW+mqH3Z3+8+mfg=)
2: 7b8ozyWTjDv0dhZ7ua-y_cjPuyI.roa (hash: 38AuHkgBMFf7/nuVWCNssWlQtSQh16b1R73OJQ2+6XU=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: Sbf5Z5buTuqdoeSDlN0JmeULPcGgcLKEa+UH95NQ5x4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:27:27:50:69:2e:39:5a:f1:05:4e:40:cf:fe:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Mar 25 15:01:50 2026 GMT
Not After : Mar 26 15:01:50 2026 GMT
Subject: CN=d2941cbd5e639dfeb393dbac3a175e45a9470f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:9b:5c:41:9e:2a:1c:9c:7d:1b:41:cf:27:
63:c9:29:eb:fd:0e:ac:2a:0f:c2:6f:71:1d:14:ff:
e2:ac:ab:31:6f:51:e1:3b:0d:fa:d9:a2:53:28:e9:
f7:9f:c0:cd:9e:70:c2:eb:6b:47:43:28:97:44:46:
c3:43:02:9d:66:06:cd:96:03:35:f3:4c:12:8b:6e:
db:42:0a:60:fb:d8:1e:e1:cb:2f:89:c5:84:04:db:
e2:b3:ac:e6:d8:76:96:97:e1:ef:20:ac:06:57:34:
3d:d2:bd:4d:2f:12:c8:c1:d9:22:15:3c:f4:a7:bf:
f2:49:db:42:c6:ce:a1:5f:26:5a:fd:3c:7e:93:d0:
0f:c9:de:0f:95:c3:21:e9:c5:45:75:63:28:cf:09:
d5:48:17:9f:f0:63:18:c1:93:93:b5:f3:1b:ca:7c:
5c:f0:82:e2:e5:82:a2:90:7c:32:5a:41:3e:37:c1:
14:27:39:0b:c1:4f:9c:7a:ef:a0:31:88:71:b8:f3:
05:dc:bf:27:29:3b:75:fe:29:43:10:72:40:89:83:
27:38:89:ab:1a:b4:61:75:67:65:35:10:ab:f1:12:
b8:9f:09:d9:79:e2:3e:18:d1:70:03:d6:f2:08:c6:
bc:fe:bd:3a:2b:0d:23:04:79:9f:8f:73:a8:38:44:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:94:1C:BD:5E:63:9D:FE:B3:93:DB:AC:3A:17:5E:45:A9:47:0F:15
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e0:a0:23:e3:f1:de:ff:97:b5:bf:99:9e:7b:d5:eb:41:61:
20:cd:3d:f5:c3:32:e9:b0:4a:db:f8:4b:76:87:6a:44:6e:ba:
47:aa:d9:52:3f:0f:ac:f5:f2:4c:83:d2:ff:b1:fc:96:9d:a6:
ec:66:e9:d5:ee:c9:08:e9:c1:ce:e0:24:62:40:4f:6e:f5:69:
17:a7:cf:85:76:bd:99:0b:d7:16:a9:d4:ea:e1:8c:23:97:9a:
2a:d3:8d:fb:45:69:e7:4c:94:9a:d2:82:40:ee:4e:c5:bb:47:
6b:16:18:7f:b7:0d:ad:b8:c4:30:38:68:4c:f4:31:a8:8f:69:
2b:24:c4:96:75:e3:45:06:cc:88:fe:d5:a5:12:bc:9a:fd:fa:
71:e1:37:ee:3e:ad:1e:a5:f3:e2:0b:e0:42:97:e0:3c:54:bb:
19:83:09:7e:94:d0:6e:00:35:32:b8:00:f7:91:eb:a9:1e:bd:
c9:3f:b0:12:27:d7:51:f2:82:14:a1:ce:a9:94:be:5b:b1:21:
a8:1b:ff:3c:1e:27:88:55:68:fa:df:86:95:e1:f3:55:7b:e1:
9c:fd:5e:51:a5:ab:03:62:8f:d3:c1:df:c0:b6:f1:1b:b5:d4:
93:20:96:70:99:cd:e7:fa:5f:10:fe:01:e3:19:0c:0f:be:8b:
e2:55:fb:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lhCcnUGkuOVrxBU5Az/6lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNzQxMGY0ZTYyYzc3NzJjNzhkNTc1MGIyMWZjMjE0MzM5
ZTk0YTIwHhcNMjYwMzI1MTUwMTUwWhcNMjYwMzI2MTUwMTUwWjAzMTEwLwYDVQQD
EyhkMjk0MWNiZDVlNjM5ZGZlYjM5M2RiYWMzYTE3NWU0NWE5NDcwZjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3abXEGeKhycfRtBzydjySnr/Q6s
Kg/Cb3EdFP/irKsxb1HhOw362aJTKOn3n8DNnnDC62tHQyiXREbDQwKdZgbNlgM1
80wSi27bQgpg+9ge4csvicWEBNvis6zm2HaWl+HvIKwGVzQ90r1NLxLIwdkiFTz0
p7/ySdtCxs6hXyZa/Tx+k9APyd4PlcMh6cVFdWMozwnVSBef8GMYwZOTtfMbynxc
8ILi5YKikHwyWkE+N8EUJzkLwU+ceu+gMYhxuPMF3L8nKTt1/ilDEHJAiYMnOImr
GrRhdWdlNRCr8RK4nwnZeeI+GNFwA9byCMa8/r06Kw0jBHmfj3OoOEQxTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKUHL1eY53+s5PbrDoXXkWpRw8VMB8GA1UdIwQY
MBaAFL10EPTmLHdyx41XULIfwhQznpSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMt
MjY4NDhmZmVlNzY1LzEvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMtMjY4NDhmZmVlNzY1
LzEvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOCgI+Px
3v+Xtb+ZnnvV60FhIM099cMy6bBK2/hLdodqRG66R6rZUj8PrPXyTIPS/7H8lp2m
7Gbp1e7JCOnBzuAkYkBPbvVpF6fPhXa9mQvXFqnU6uGMI5eaKtON+0Vp50yUmtKC
QO5OxbtHaxYYf7cNrbjEMDhoTPQxqI9pKyTElnXjRQbMiP7VpRK8mv36ceE37j6t
HqXz4gvgQpfgPFS7GYMJfpTQbgA1MrgA95HrqR69yT+wEifXUfKCFKHOqZS+W7Eh
qBv/PB4niFVo+t+GleHzVXvhnP1eUaWrA2KP08HfwLbxG7XUkyCWcJnN5/pfEP4B
4xkMD76L4lX7Hg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:09 2026 by rpki-client