Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier: RELdI42hUkKxN1PXcSbGCX70++hbyduFffFLziZ7CBw=
Subject key identifier: 87:F4:0B:B5:20:97:BB:4F:E4:E7:51:C0:49:AC:FE:BD:0E:E6:92:E3
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial: 01A0FD597365C990DF24DC346067E8253B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number: 1056
Signing time: Fri 02 Oct 2026 16:01:32 +0000
Manifest this update: Fri 02 Oct 2026 16:01:32 +0000
Manifest next update: Sat 03 Oct 2026 16:01:32 +0000
Files and hashes: 1: NMgthEWSDkhf_cRJefWOwwwKa-w.roa (hash: VQXO+94YOu0/0F/wMTO4bq00aYkrqkoxk+yxuAK1KCo=)
2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: 0QQF2QrKraoUaUXFPoVX/z+FZQ0KFLQHdcjRCQyji+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:59:73:65:c9:90:df:24:dc:34:60:67:e8:25:3b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Validity
Not Before: Oct 2 16:01:32 2026 GMT
Not After : Oct 3 16:01:32 2026 GMT
Subject: CN=87f40bb52097bb4fe4e751c049acfebd0ee692e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:90:91:96:e5:93:3d:07:39:20:d8:0d:3a:
f9:4e:b1:52:bf:82:f9:14:16:08:c9:b3:fb:8b:31:
cb:eb:ee:ca:6f:47:81:b2:57:50:ee:93:ae:d2:0e:
fb:8f:c2:8d:28:ba:f0:60:02:b8:56:ed:dd:6e:7a:
70:33:15:8c:d9:f6:90:33:3c:6a:fc:75:37:30:e3:
77:4a:73:a8:03:31:5d:26:06:e8:a0:4e:ed:9b:e4:
60:0e:45:d8:77:b8:46:b7:25:8d:12:d8:f3:cc:78:
fb:93:92:18:ec:13:2d:df:5e:be:14:51:4d:37:de:
98:51:5f:bd:ab:73:46:e1:9a:d9:b5:2b:a4:09:8d:
07:25:26:a6:4f:36:fa:50:0d:eb:8e:3e:c3:19:6f:
4f:6b:1d:4a:27:45:80:92:c2:06:d8:0c:dc:b7:8c:
50:0f:5f:b2:29:65:ab:35:ef:d4:1b:13:bf:78:e0:
56:b2:0c:e0:03:ba:12:df:66:49:19:5d:a3:a3:d6:
20:10:d1:02:9d:72:34:63:f2:b6:94:bc:04:fc:71:
cb:0a:13:d5:49:2b:9b:ae:ef:c3:52:7f:30:fb:4f:
09:a2:e5:66:86:4e:5c:cf:6b:11:54:b6:31:02:d1:
f3:6a:94:27:65:18:03:53:19:ca:56:e8:f2:a8:76:
14:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F4:0B:B5:20:97:BB:4F:E4:E7:51:C0:49:AC:FE:BD:0E:E6:92:E3
X509v3 Authority Key Identifier:
keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a1:20:8b:34:0a:2a:26:83:45:08:12:b6:6e:46:ed:58:ae:
51:99:3a:9b:2e:b3:a1:2e:5b:81:35:32:01:b7:37:77:68:93:
d6:be:9e:dd:e3:66:40:a4:da:08:37:99:e8:01:33:b8:22:aa:
42:38:e0:43:23:c6:ec:ae:6b:9a:2f:fc:99:c8:b5:47:98:06:
78:bc:27:d1:dc:6f:ce:7f:12:d8:11:a2:10:89:7d:6c:1d:49:
29:cd:17:50:23:c0:55:5f:f3:0b:f5:16:e1:d0:e0:6a:ca:47:
10:df:2f:7f:2b:e4:44:ed:22:4b:85:dc:51:ab:1c:d8:f5:d9:
f7:a0:1b:e7:b3:e8:58:86:7f:cc:1c:ea:a1:0d:25:24:0e:85:
6f:0c:1a:15:8c:c7:0d:4d:e8:ce:f6:69:66:e1:91:b7:2a:a6:
09:60:aa:d5:8f:ab:b7:c6:12:24:7b:31:c5:01:ce:96:f0:3f:
8a:cd:c6:ab:7f:2d:31:88:16:d4:f0:89:8f:ae:72:dc:ff:eb:
1e:d7:d5:ca:11:0d:83:59:e7:fb:e9:2b:4c:17:7b:7a:3b:6e:
f9:b9:a6:87:eb:2a:b7:59:c1:ba:de:53:a3:f1:09:57:a2:a8:
50:d1:8d:95:f8:f0:45:e4:7d:5f:d4:04:aa:9b:99:04:8c:0a:
6e:1f:16:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD9WXNlyZDfJNw0YGfoJTsFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOGIxNWMyMzdmMzRjNWM1YzUzNDRiNDA3OWViYjNhNTg5
ZDAxNDgwHhcNMjYxMDAyMTYwMTMyWhcNMjYxMDAzMTYwMTMyWjAzMTEwLwYDVQQD
Eyg4N2Y0MGJiNTIwOTdiYjRmZTRlNzUxYzA0OWFjZmViZDBlZTY5MmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03KQkZblkz0HOSDYDTr5TrFSv4L5
FBYIybP7izHL6+7Kb0eBsldQ7pOu0g77j8KNKLrwYAK4Vu3dbnpwMxWM2faQMzxq
/HU3MON3SnOoAzFdJgbooE7tm+RgDkXYd7hGtyWNEtjzzHj7k5IY7BMt316+FFFN
N96YUV+9q3NG4ZrZtSukCY0HJSamTzb6UA3rjj7DGW9Pax1KJ0WAksIG2Azct4xQ
D1+yKWWrNe/UGxO/eOBWsgzgA7oS32ZJGV2jo9YgENECnXI0Y/K2lLwE/HHLChPV
SSubru/DUn8w+08JouVmhk5cz2sRVLYxAtHzapQnZRgDUxnKVujyqHYUeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIf0C7Ugl7tP5OdRwEms/r0O5pLjMB8GA1UdIwQY
MBaAFL6LFcI380xcXFNEtAeeuzpYnQFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQt
MzFkZTE3NjlmZDhhLzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQtMzFkZTE3NjlmZDhh
LzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKEgizQK
KiaDRQgStm5G7ViuUZk6my6zoS5bgTUyAbc3d2iT1r6e3eNmQKTaCDeZ6AEzuCKq
QjjgQyPG7K5rmi/8mci1R5gGeLwn0dxvzn8S2BGiEIl9bB1JKc0XUCPAVV/zC/UW
4dDgaspHEN8vfyvkRO0iS4XcUasc2PXZ96Ab57PoWIZ/zBzqoQ0lJA6FbwwaFYzH
DU3ozvZpZuGRtyqmCWCq1Y+rt8YSJHsxxQHOlvA/is3Gq38tMYgW1PCJj65y3P/r
HtfVyhENg1nn++krTBd7ejtu+bmmh+sqt1nBut5To/EJV6KoUNGNlfjwReR9X9QE
qpuZBIwKbh8WGw==
-----END CERTIFICATE-----
Generated at Fri Oct 2 20:36:04 2026 by rpki-client