Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
File: vE4hsn1vhOvdiIxo55zlVchG2ss.mft (raw, json)
Hash identifier: q/SApvr9qYVNnCaVqAxdCqWU2RVfCKFfu2UCd6Ku38g=
Subject key identifier: 81:D5:DC:E7:92:94:D1:0C:23:F3:5C:0E:DC:E0:D2:48:5B:6E:1B:8A
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Certificate issuer: /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial: 01A0E7406D61D851C391D37AB9E7447C72F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
Manifest number: 1A79
Signing time: Mon 28 Sep 2026 09:02:34 +0000
Manifest this update: Mon 28 Sep 2026 09:02:34 +0000
Manifest next update: Tue 29 Sep 2026 09:02:34 +0000
Files and hashes: 1: Wl_TNY94WK2rcly6xRH5gNybF90.roa (hash: l+YPId6RKLguzaCBjAcOhdZYbBy4KT7l6mfJmlUnqwM=)
2: tW2R0GRUoyNtK2_YkFvWz0zKBzc.roa (hash: K1KWr86aOYdf4AA1AHrR6w9+58FTKX+8pbTwDlMtG2M=)
3: vE4hsn1vhOvdiIxo55zlVchG2ss.crl (hash: ddSAPE6QdTXyq6w796KbI7RZRm5T5tvd8MU4wofeS3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:40:6d:61:d8:51:c3:91:d3:7a:b9:e7:44:7c:72:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Validity
Not Before: Sep 28 09:02:34 2026 GMT
Not After : Sep 29 09:02:34 2026 GMT
Subject: CN=81d5dce79294d10c23f35c0edce0d2485b6e1b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:98:66:14:fd:69:a4:af:08:50:54:8c:d9:9b:
ea:96:f7:6d:b0:5e:c1:10:90:96:db:56:a6:34:4d:
e2:f2:17:2d:ac:34:59:31:27:65:2e:f4:22:1e:b4:
ea:9b:18:dc:a2:e1:c8:2b:2a:3b:0c:8c:bd:85:15:
96:b8:2a:65:32:81:62:d0:6f:2e:d5:4a:05:dd:bb:
c4:7d:51:75:3e:5b:32:fa:8d:4c:a9:9b:79:d9:7e:
57:cb:c5:aa:08:98:7c:90:06:f9:f3:4b:8b:f0:62:
25:e3:d5:49:f7:bd:1c:e2:30:74:ca:5f:35:49:38:
58:e7:e3:2a:b7:84:ff:43:e9:d3:70:d9:b4:53:d8:
b7:8d:7e:fa:87:93:99:b4:94:24:a5:3d:f7:c5:05:
f0:54:c7:05:de:fe:02:2c:01:e8:6e:0b:34:d1:26:
6a:90:fd:2c:a1:91:73:b0:ba:90:dd:75:bc:af:b1:
50:bf:0f:ea:68:a2:98:70:96:7d:72:6e:e6:61:69:
09:a3:c9:e5:c1:49:bc:05:3e:c1:73:60:86:cb:be:
fa:d3:b6:36:10:b1:df:6d:1d:cd:1f:bb:12:fd:24:
c9:73:08:f9:3a:26:d4:db:18:63:09:5a:b9:a6:ff:
e3:8a:16:2a:73:48:3d:94:dc:43:49:99:3d:17:99:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D5:DC:E7:92:94:D1:0C:23:F3:5C:0E:DC:E0:D2:48:5B:6E:1B:8A
X509v3 Authority Key Identifier:
keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e7:f5:b9:1d:79:d8:ea:12:0a:75:f4:cc:14:21:f3:65:0e:
23:65:dc:ce:dd:ec:42:93:b5:2d:f1:ad:29:21:4e:1d:e4:42:
7f:0c:3f:8d:2a:08:25:13:1c:1c:68:12:7e:12:9d:3d:71:d1:
45:58:4e:a6:02:46:a3:7c:eb:10:24:07:1f:a6:ba:58:85:4d:
8a:bc:2f:aa:23:74:86:9c:9a:b2:60:ec:9a:fb:cd:93:ee:18:
aa:7d:e0:c9:a6:d7:cc:dc:e2:a8:63:ff:c6:02:2c:bb:d9:fa:
f1:a1:e4:f2:79:25:58:3c:92:09:c2:f9:35:e3:e6:e6:10:e9:
1a:ae:a1:f3:66:ab:a8:87:43:3e:15:d1:30:37:52:11:aa:e3:
ae:9f:92:df:b0:d4:e0:e1:78:17:bd:ed:a1:6d:de:06:7a:57:
3a:dc:f5:93:f8:53:0f:03:20:6d:e4:6e:14:1e:ed:10:73:8c:
c0:d4:09:6e:65:3c:e9:c7:2a:0b:e8:db:22:e6:0d:73:d2:af:
64:63:f6:b0:e0:54:db:7d:40:66:02:b3:d1:6c:b0:38:ba:25:
e0:02:fd:5f:1c:ec:9e:54:fa:74:f6:9f:a5:e8:e0:5f:22:bc:
43:7f:01:31:92:92:d3:62:34:45:d9:12:c0:f2:5c:72:30:07:
e5:b3:0d:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnQG1h2FHDkdN6uedEfHL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNGUyMWIyN2Q2Zjg0ZWJkZDg4OGM2OGU3OWNlNTU1Yzg0
NmRhY2IwHhcNMjYwOTI4MDkwMjM0WhcNMjYwOTI5MDkwMjM0WjAzMTEwLwYDVQQD
Eyg4MWQ1ZGNlNzkyOTRkMTBjMjNmMzVjMGVkY2UwZDI0ODViNmUxYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05hmFP1ppK8IUFSM2ZvqlvdtsF7B
EJCW21amNE3i8hctrDRZMSdlLvQiHrTqmxjcouHIKyo7DIy9hRWWuCplMoFi0G8u
1UoF3bvEfVF1Plsy+o1MqZt52X5Xy8WqCJh8kAb580uL8GIl49VJ970c4jB0yl81
SThY5+Mqt4T/Q+nTcNm0U9i3jX76h5OZtJQkpT33xQXwVMcF3v4CLAHobgs00SZq
kP0soZFzsLqQ3XW8r7FQvw/qaKKYcJZ9cm7mYWkJo8nlwUm8BT7Bc2CGy77607Y2
ELHfbR3NH7sS/STJcwj5OibU2xhjCVq5pv/jihYqc0g9lNxDSZk9F5n6rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHV3OeSlNEMI/NcDtzg0khbbhuKMB8GA1UdIwQY
MBaAFLxOIbJ9b4Tr3YiMaOec5VXIRtrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkU0aHNuMXZoT3ZkaUl4bzU1emxWY2hHMnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hMGQ3M2QtNjU2NC00MTQyLWE2ZWUt
ODNlNzNjYjI1ZWE1LzEvdkU0aHNuMXZoT3ZkaUl4bzU1emxWY2hHMnNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9hMGQ3M2QtNjU2NC00MTQyLWE2ZWUtODNlNzNjYjI1ZWE1
LzEvdkU0aHNuMXZoT3ZkaUl4bzU1emxWY2hHMnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuf1uR15
2OoSCnX0zBQh82UOI2Xczt3sQpO1LfGtKSFOHeRCfww/jSoIJRMcHGgSfhKdPXHR
RVhOpgJGo3zrECQHH6a6WIVNirwvqiN0hpyasmDsmvvNk+4Yqn3gyabXzNziqGP/
xgIsu9n68aHk8nklWDySCcL5NePm5hDpGq6h82arqIdDPhXRMDdSEarjrp+S37DU
4OF4F73toW3eBnpXOtz1k/hTDwMgbeRuFB7tEHOMwNQJbmU86ccqC+jbIuYNc9Kv
ZGP2sOBU231AZgKz0WywOLol4AL9XxzsnlT6dPafpejgXyK8Q38BMZKS02I0RdkS
wPJccjAH5bMNkQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:26:00 2026 by rpki-client