Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
File: vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft (raw, json)
Hash identifier: 8RFTsBl2EX0iYZWQbxEAYcU/GhITwPD4Go8WNQQKOt0=
Subject key identifier: DD:F9:9A:94:7C:3D:BD:CC:33:A7:94:F4:30:59:0A:06:46:63:43:08
Authority key identifier: BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
Certificate issuer: /CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Certificate serial: 01A0D012BF8D0262F59640C75B42FFCFC177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:01:24 +0000
Manifest this update: Wed 23 Sep 2026 21:01:24 +0000
Manifest next update: Thu 24 Sep 2026 21:01:24 +0000
Files and hashes: 1: Dgm0yJxRGKkWzuCmtXAV_Sap5C4.roa (hash: iEzyR4D1PeG/2/gt5MrfspiuGu469FZd2g1heNAGkMA=)
2: GNjrvjIiN-OXUdCPEIpZchNO6Ys.roa (hash: isKT3r2eXooAKP6/3EQPs1CjALz2zfPJBsvBDqAhScY=)
3: vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl (hash: JHYqe22FkaqixMaLnl2eWbdbuSvP5ZkFFWuBNYxEDrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:bf:8d:02:62:f5:96:40:c7:5b:42:ff:cf:c1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Validity
Not Before: Sep 23 21:01:24 2026 GMT
Not After : Sep 24 21:01:24 2026 GMT
Subject: CN=ddf99a947c3dbdcc33a794f430590a0646634308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:de:d7:2b:7c:06:02:47:64:28:51:e3:23:
b2:5f:bf:c7:c3:0f:4b:9f:ea:c2:a3:ee:d9:79:f7:
2e:29:78:1f:de:af:e1:29:91:e8:9b:fa:a3:ff:47:
0f:f0:57:6c:23:20:87:4b:e5:32:1c:b9:ad:d1:4a:
73:95:68:66:f5:1e:fb:75:b7:f4:dd:59:fd:f4:45:
5f:2f:d5:eb:86:70:09:51:85:fc:d4:d1:3d:9b:c7:
d2:16:01:c2:f6:c9:24:59:e0:cd:e4:c6:13:2d:89:
c4:17:20:27:cb:e5:7e:40:c4:26:e8:3d:ad:09:ce:
46:95:60:57:4e:cd:4e:6d:fc:2c:33:0d:35:67:cc:
66:1d:85:4d:f6:13:75:14:53:80:d9:70:c3:59:82:
0d:15:0a:e7:6d:c5:13:18:7f:5a:59:95:dd:73:58:
ee:17:6d:2e:0e:da:d2:91:b6:3e:a8:c5:6b:e1:dc:
4b:20:1a:e6:4e:27:31:c3:bb:99:98:4b:1a:24:1b:
ac:89:ac:57:0c:5e:bc:fc:13:69:12:8c:72:59:d1:
73:ce:c3:c9:ee:f4:0e:db:ba:76:7d:c6:8d:ec:95:
24:86:e8:6a:b4:20:e9:db:bf:dc:f5:70:9a:69:0d:
2a:40:1c:fd:31:82:f2:79:f3:a8:e3:51:f7:60:b1:
7d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F9:9A:94:7C:3D:BD:CC:33:A7:94:F4:30:59:0A:06:46:63:43:08
X509v3 Authority Key Identifier:
keyid:BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:37:19:9e:d5:21:b3:67:bd:12:63:b7:be:80:01:24:5e:5d:
a3:31:62:b4:e2:ad:6c:21:e2:67:d1:79:e3:cc:2c:a0:23:2f:
7b:88:dc:13:2d:28:dd:04:b2:ea:ab:ca:49:b3:a7:df:9b:56:
92:b7:c0:77:4a:77:ef:47:5e:5a:57:47:51:72:50:aa:f2:94:
8d:3b:14:82:12:d3:bb:e9:c6:71:10:33:ad:e9:10:84:7f:87:
4f:e6:90:73:c1:2d:60:97:50:97:fe:e0:0c:f3:d0:33:a0:0d:
2e:82:1d:0f:51:28:92:68:03:f2:db:d1:4c:b4:3d:64:7e:ab:
d8:16:21:7f:5c:06:4f:55:21:8f:33:ec:3f:39:9b:28:ef:68:
20:d9:7e:03:79:de:49:26:2e:51:5f:f4:06:3b:a8:68:ee:74:
ce:02:20:52:8e:8b:01:ec:92:ce:3d:73:5d:47:b7:60:78:30:
cb:80:06:c5:4c:cb:3c:94:4c:da:b1:f9:20:9f:55:7b:1d:2e:
2f:f6:25:6d:90:a3:45:89:39:2a:9a:00:31:36:a0:36:5b:7c:
63:e5:48:07:f0:99:99:c5:b3:f6:52:97:bb:e8:6c:d6:f1:c8:
a7:21:da:90:73:0e:dc:94:bd:9d:a6:85:a4:dd:05:6a:7e:a4:
e4:ad:ca:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEr+NAmL1lkDHW0L/z8F3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYzJiM2Y1MTkxM2I2ODVhYTk4YTY0ZjVhMjIyYTFhZTY3
YjI3MjAwHhcNMjYwOTIzMjEwMTI0WhcNMjYwOTI0MjEwMTI0WjAzMTEwLwYDVQQD
EyhkZGY5OWE5NDdjM2RiZGNjMzNhNzk0ZjQzMDU5MGEwNjQ2NjM0MzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox3e1yt8BgJHZChR4yOyX7/Hww9L
n+rCo+7ZefcuKXgf3q/hKZHom/qj/0cP8FdsIyCHS+UyHLmt0UpzlWhm9R77dbf0
3Vn99EVfL9XrhnAJUYX81NE9m8fSFgHC9skkWeDN5MYTLYnEFyAny+V+QMQm6D2t
Cc5GlWBXTs1ObfwsMw01Z8xmHYVN9hN1FFOA2XDDWYINFQrnbcUTGH9aWZXdc1ju
F20uDtrSkbY+qMVr4dxLIBrmTicxw7uZmEsaJBusiaxXDF68/BNpEoxyWdFzzsPJ
7vQO27p2fcaN7JUkhuhqtCDp27/c9XCaaQ0qQBz9MYLyefOo41H3YLF9HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN35mpR8Pb3MM6eU9DBZCgZGY0MIMB8GA1UdIwQY
MBaAFL7Cs/UZE7aFqpimT1oiKhrmeycgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnNLejlSa1R0b1dxbUtaUFdpSXFHdVo3SnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2Mt
ZTQ5YTllMDZjNzAwLzEvdnNLejlSa1R0b1dxbUtaUFdpSXFHdVo3SnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2MtZTQ5YTllMDZjNzAw
LzEvdnNLejlSa1R0b1dxbUtaUFdpSXFHdVo3SnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTcZntUh
s2e9EmO3voABJF5dozFitOKtbCHiZ9F548wsoCMve4jcEy0o3QSy6qvKSbOn35tW
krfAd0p370deWldHUXJQqvKUjTsUghLTu+nGcRAzrekQhH+HT+aQc8EtYJdQl/7g
DPPQM6ANLoIdD1EokmgD8tvRTLQ9ZH6r2BYhf1wGT1UhjzPsPzmbKO9oINl+A3ne
SSYuUV/0BjuoaO50zgIgUo6LAeySzj1zXUe3YHgwy4AGxUzLPJRM2rH5IJ9Vex0u
L/YlbZCjRYk5KpoAMTagNlt8Y+VIB/CZmcWz9lKXu+hs1vHIpyHakHMO3JS9naaF
pN0Fan6k5K3KSQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:55:08 2026 by rpki-client