Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
File: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft (raw, json)
Hash identifier: JF5I91D3LKHy0+EctsmJyQe6RTq44Qn6B0wRirpIqrY=
Subject key identifier: 38:09:4B:2A:81:C4:8E:68:8F:45:18:27:CA:AA:53:4B:C5:80:29:CB
Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
Certificate issuer: /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Certificate serial: 019D25F0F30B9D7B48F79C35BB03F317D1C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 17:00:40 +0000
Manifest this update: Wed 25 Mar 2026 17:00:40 +0000
Manifest next update: Thu 26 Mar 2026 17:00:40 +0000
Files and hashes: 1: J_AqbRRwbv9N6VWFHOb5S7w5E84.roa (hash: qnOkRGeYiVK7GUYOu7VW19sEbzCZQZR5A+RT6PLbwi0=)
2: nQN4cLKNegYOd-usKrALjYrvoiE.asa (hash: E5UzlVG/AYUsYDcEZ2bwekYc5ZlCnWcJiociB8390vE=)
3: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl (hash: 7XQk+cJWl98KCY519zp02eLf9mbFuTuBjct3cWlztHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:f3:0b:9d:7b:48:f7:9c:35:bb:03:f3:17:d1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Validity
Not Before: Mar 25 17:00:40 2026 GMT
Not After : Mar 26 17:00:40 2026 GMT
Subject: CN=38094b2a81c48e688f451827caaa534bc58029cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:ea:a6:a2:7d:cc:31:49:ba:3f:02:67:08:
66:e7:3b:7b:48:e6:ee:04:8b:04:ca:b0:f3:42:04:
77:b1:13:2b:57:ec:73:94:aa:e9:54:cc:82:d4:c3:
98:5e:d5:6a:97:1d:07:d7:f6:6e:a3:a5:36:be:da:
b5:9d:53:2e:29:43:0d:36:2b:97:92:bc:ad:91:61:
bb:80:fe:4d:ca:e5:6e:d5:aa:1f:7d:be:07:d3:2b:
ec:43:a2:bc:d0:c4:a1:5d:16:b8:b2:59:b5:83:a4:
14:43:a7:52:d0:95:e5:de:be:b1:81:08:f6:04:73:
6a:16:5d:a9:cb:da:a0:fb:7c:fb:6d:61:db:32:3b:
7f:f3:6a:c2:5c:40:84:d9:0b:a4:4f:69:26:42:bd:
80:47:df:93:cc:db:1d:f1:8a:b5:05:5b:f6:bc:00:
1e:f4:a5:95:23:41:ff:7b:61:af:3e:ba:50:06:3e:
0f:b2:c6:96:3d:fa:e4:f2:02:38:01:2a:23:17:4a:
b5:45:b7:d5:0f:b4:8f:29:f5:eb:a0:0f:59:8a:5d:
b7:29:83:7f:f3:d7:4c:f4:ad:69:59:ce:ce:4c:da:
a0:0c:c9:71:9a:94:27:06:89:8f:6d:7e:df:9c:b9:
3d:7b:ca:c0:1a:ce:f4:e2:f8:e1:74:72:59:6c:df:
21:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:09:4B:2A:81:C4:8E:68:8F:45:18:27:CA:AA:53:4B:C5:80:29:CB
X509v3 Authority Key Identifier:
keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:62:84:1e:46:96:a1:5b:ad:43:47:99:35:ab:d1:07:89:ca:
10:fc:af:c1:0b:3b:e3:e8:80:79:55:a3:ec:26:1d:27:e6:db:
93:05:aa:d0:66:24:0e:95:e1:92:78:43:de:d7:40:46:72:2d:
85:06:ad:db:a4:f0:18:03:35:44:0b:24:b2:c6:a6:07:47:75:
e1:bb:e4:a3:57:af:c9:74:99:f0:df:b1:c7:25:93:27:8e:dd:
63:4e:d8:5a:36:db:b4:9d:fd:63:a1:27:5a:9b:6e:55:20:14:
fa:75:fa:9a:6f:d1:43:b8:a1:6e:a2:5a:a1:14:1c:b8:58:ee:
32:8a:36:7e:1b:c6:23:6a:62:eb:8f:53:81:5c:bc:3e:e3:5e:
3d:64:8b:e1:bc:b9:d2:12:d6:e6:2f:4f:8a:15:bf:27:6e:f2:
1a:5e:94:d7:f0:3e:65:d3:21:72:26:ec:49:37:63:63:f1:f5:
8c:d6:0b:81:b6:00:cd:0e:d0:ca:61:d0:db:b5:d6:f6:b1:7b:
ff:8e:05:6e:dd:40:f6:25:38:4e:1f:cb:df:6b:01:d5:17:c1:
d2:40:c2:c9:19:3c:f4:bd:5a:4c:1a:f5:a0:ec:e4:b4:66:ec:
e9:4e:b6:ee:0d:85:2e:89:c7:fc:86:86:3b:48:06:de:b8:e2:
7f:15:ae:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8PMLnXtI95w1uwPzF9HHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjBlNjRiMTg4MzFiYzk4NTI3Y2JlMGUxMDY3YzFhOTVk
MTY4N2QwHhcNMjYwMzI1MTcwMDQwWhcNMjYwMzI2MTcwMDQwWjAzMTEwLwYDVQQD
EygzODA5NGIyYTgxYzQ4ZTY4OGY0NTE4MjdjYWFhNTM0YmM1ODAyOWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBvqpqJ9zDFJuj8CZwhm5zt7SObu
BIsEyrDzQgR3sRMrV+xzlKrpVMyC1MOYXtVqlx0H1/Zuo6U2vtq1nVMuKUMNNiuX
krytkWG7gP5NyuVu1aoffb4H0yvsQ6K80MShXRa4slm1g6QUQ6dS0JXl3r6xgQj2
BHNqFl2py9qg+3z7bWHbMjt/82rCXECE2QukT2kmQr2AR9+TzNsd8Yq1BVv2vAAe
9KWVI0H/e2GvPrpQBj4PssaWPfrk8gI4ASojF0q1RbfVD7SPKfXroA9Zil23KYN/
89dM9K1pWc7OTNqgDMlxmpQnBomPbX7fnLk9e8rAGs704vjhdHJZbN8hbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgJSyqBxI5oj0UYJ8qqU0vFgCnLMB8GA1UdIwQY
MBaAFL8g5ksYgxvJhSfL4OEGfBqV0Wh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlEbVN4aURHOG1GSjh2ZzRRWjhHcFhSYUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lYjM0MGYtODA1My00ZjVmLWEzYTUt
MjI5YjY0MDlmMmEwLzEvdnlEbVN4aURHOG1GSjh2ZzRRWjhHcFhSYUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9lYjM0MGYtODA1My00ZjVmLWEzYTUtMjI5YjY0MDlmMmEw
LzEvdnlEbVN4aURHOG1GSjh2ZzRRWjhHcFhSYUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGKEHkaW
oVutQ0eZNavRB4nKEPyvwQs74+iAeVWj7CYdJ+bbkwWq0GYkDpXhknhD3tdARnIt
hQat26TwGAM1RAskssamB0d14bvko1evyXSZ8N+xxyWTJ47dY07YWjbbtJ39Y6En
WptuVSAU+nX6mm/RQ7ihbqJaoRQcuFjuMoo2fhvGI2pi649TgVy8PuNePWSL4by5
0hLW5i9PihW/J27yGl6U1/A+ZdMhcibsSTdjY/H1jNYLgbYAzQ7QymHQ27XW9rF7
/44Fbt1A9iU4Th/L32sB1RfB0kDCyRk89L1aTBr1oOzktGbs6U627g2FLonH/IaG
O0gG3rjifxWurA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:46:53 2026 by rpki-client