Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
File: vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft (raw, json)
Hash identifier: hZxDUaJ6Efoy/j+6jPu2u5Qg8gTs/sHcdy5OaGOCUsA=
Subject key identifier: 01:72:D0:FA:DC:FE:C9:2F:F6:49:09:76:AC:E9:1F:16:E3:39:AD:32
Authority key identifier: BF:3A:6F:67:B6:22:44:3B:37:18:BA:58:0D:F1:6D:D5:BE:8A:12:BB
Certificate issuer: /CN=bf3a6f67b622443b3718ba580df16dd5be8a12bb
Certificate serial: 01A0F2D68A5F7308B3E269F4C63211FC7597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vzpvZ7YiRDs3GLpYDfFt1b6KErs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
Manifest number: F7
Signing time: Wed 30 Sep 2026 15:02:21 +0000
Manifest this update: Wed 30 Sep 2026 15:02:21 +0000
Manifest next update: Thu 01 Oct 2026 15:02:21 +0000
Files and hashes: 1: sMBS9OzucQLYRw4kO5MEHGEFHUU.roa (hash: tUsaSUdwGiplp3q5jaJRxYUheCxbRt91fnz6Ktk8t8A=)
2: vzpvZ7YiRDs3GLpYDfFt1b6KErs.crl (hash: Z3uGacQWqt4IuqGylDeuXDfmEUOkNcsHIFCVhWlmF2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vzpvZ7YiRDs3GLpYDfFt1b6KErs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:d6:8a:5f:73:08:b3:e2:69:f4:c6:32:11:fc:75:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3a6f67b622443b3718ba580df16dd5be8a12bb
Validity
Not Before: Sep 30 15:02:21 2026 GMT
Not After : Oct 1 15:02:21 2026 GMT
Subject: CN=0172d0fadcfec92ff6490976ace91f16e339ad32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:4a:09:64:b9:c4:41:e4:9e:23:b7:dd:01:
72:08:5c:72:37:84:ed:89:63:4e:ba:78:81:a8:0a:
c7:6a:41:dd:ac:20:8e:f0:97:54:81:09:06:c5:17:
02:ea:c7:d8:65:b8:da:ad:b0:8b:cf:8f:3e:ac:3c:
a4:69:8b:c7:d8:1e:15:ac:a9:2c:07:e6:3e:09:76:
9d:b7:07:77:d8:26:c0:9b:f7:58:73:c4:f4:f5:79:
87:a1:8a:83:88:c9:c2:09:cc:ce:a2:de:3a:58:97:
43:cd:44:b5:96:7d:d6:a2:f4:35:5e:bb:6d:cd:e3:
c6:93:78:64:c6:fa:9e:2d:a3:36:a5:b5:3d:89:9e:
ac:97:45:af:07:aa:81:c3:06:ad:4b:33:b4:70:39:
b6:8f:b2:f3:b9:fe:a9:55:5d:3f:75:5d:0d:1d:36:
3b:db:a9:c9:c7:48:b3:1a:82:d6:2e:5d:74:01:13:
b7:bf:9f:24:df:1a:b7:76:db:5d:b9:52:37:7b:ad:
12:19:88:f5:53:85:83:ae:a3:cb:83:a5:fe:a4:ad:
d0:06:ac:31:c6:b0:51:40:f1:d7:03:52:93:a2:4c:
44:89:ae:4d:38:5b:24:5a:8a:74:b8:23:53:29:d5:
56:d1:c9:22:53:ea:70:b2:b3:88:d1:e4:b8:68:50:
f3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:72:D0:FA:DC:FE:C9:2F:F6:49:09:76:AC:E9:1F:16:E3:39:AD:32
X509v3 Authority Key Identifier:
keyid:BF:3A:6F:67:B6:22:44:3B:37:18:BA:58:0D:F1:6D:D5:BE:8A:12:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vzpvZ7YiRDs3GLpYDfFt1b6KErs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5f:7b:fa:6d:bf:4c:b5:75:51:08:b8:6a:b3:a6:c8:cc:05:
5d:b7:f8:b0:ee:56:b5:30:55:6d:5f:c6:09:9e:06:79:11:ac:
62:e1:36:1c:36:54:6c:88:fe:fe:af:7f:39:b8:56:df:ab:23:
f8:41:0e:88:98:28:74:b6:02:21:06:38:f0:d3:d4:30:5f:ad:
e9:b0:68:a6:47:12:2e:32:46:92:90:7a:e9:9c:7a:3a:1d:2c:
ef:c4:9d:3a:49:11:65:f1:14:bc:3c:08:7f:45:89:5c:12:17:
4c:b5:b9:ed:06:9a:a4:a0:59:74:3f:0b:9d:6d:97:94:f8:fd:
f2:eb:99:8a:0d:1a:70:fd:5e:7d:e4:01:f8:ff:9b:70:e0:11:
4a:e2:2f:14:a5:5d:21:3e:b8:d8:da:5a:a9:9a:91:be:c7:10:
78:9c:1a:3d:56:cf:80:97:0d:fc:3d:7d:4a:2a:38:19:4d:55:
f3:61:6e:74:f3:fa:ff:b4:d4:94:34:d4:25:42:d6:51:b1:38:
5e:30:df:84:aa:07:3d:e1:16:fe:6c:65:93:98:5a:72:f3:22:
c4:1c:de:c3:06:9c:1e:19:59:87:3c:8f:51:9f:1b:44:07:b9:
d2:91:32:08:f7:bc:67:32:f6:04:58:76:cd:63:6e:37:db:a7:
a4:bd:b4:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDy1opfcwiz4mn0xjIR/HWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmM2E2ZjY3YjYyMjQ0M2IzNzE4YmE1ODBkZjE2ZGQ1YmU4
YTEyYmIwHhcNMjYwOTMwMTUwMjIxWhcNMjYxMDAxMTUwMjIxWjAzMTEwLwYDVQQD
EygwMTcyZDBmYWRjZmVjOTJmZjY0OTA5NzZhY2U5MWYxNmUzMzlhZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKJKCWS5xEHkniO33QFyCFxyN4Tt
iWNOuniBqArHakHdrCCO8JdUgQkGxRcC6sfYZbjarbCLz48+rDykaYvH2B4VrKks
B+Y+CXadtwd32CbAm/dYc8T09XmHoYqDiMnCCczOot46WJdDzUS1ln3WovQ1Xrtt
zePGk3hkxvqeLaM2pbU9iZ6sl0WvB6qBwwatSzO0cDm2j7Lzuf6pVV0/dV0NHTY7
26nJx0izGoLWLl10ARO3v58k3xq3dttduVI3e60SGYj1U4WDrqPLg6X+pK3QBqwx
xrBRQPHXA1KTokxEia5NOFskWop0uCNTKdVW0ckiU+pwsrOI0eS4aFDzAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFy0Prc/skv9kkJdqzpHxbjOa0yMB8GA1UdIwQY
MBaAFL86b2e2IkQ7Nxi6WA3xbdW+ihK7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnpwdlo3WWlSRHMzR0xwWURmRnQxYjZLRXJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNzhmZjctOTRhNy00ZmMyLWFlZDgt
OGQxZGE5ZjM4YTBiLzEvdnpwdlo3WWlSRHMzR0xwWURmRnQxYjZLRXJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNzhmZjctOTRhNy00ZmMyLWFlZDgtOGQxZGE5ZjM4YTBi
LzEvdnpwdlo3WWlSRHMzR0xwWURmRnQxYjZLRXJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU197+m2/
TLV1UQi4arOmyMwFXbf4sO5WtTBVbV/GCZ4GeRGsYuE2HDZUbIj+/q9/ObhW36sj
+EEOiJgodLYCIQY48NPUMF+t6bBopkcSLjJGkpB66Zx6Oh0s78SdOkkRZfEUvDwI
f0WJXBIXTLW57QaapKBZdD8LnW2XlPj98uuZig0acP1efeQB+P+bcOARSuIvFKVd
IT642NpaqZqRvscQeJwaPVbPgJcN/D19Sio4GU1V82FudPP6/7TUlDTUJULWUbE4
XjDfhKoHPeEW/mxlk5hacvMixBzewwacHhlZhzyPUZ8bRAe50pEyCPe8ZzL2BFh2
zWNuN9unpL20Iw==
-----END CERTIFICATE-----
Generated at Wed Sep 30 20:55:40 2026 by rpki-client