Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
File: vddoJJ1zZYBx-TRWA5OaudYgw1s.mft (raw, json)
Hash identifier: 2udFzTS+TvcpQR16au85sgYDDB9qvIAm9vKkagLU/aY=
Subject key identifier: 4F:64:87:57:2A:DA:82:A8:F7:65:8B:5E:08:C4:6F:33:11:F6:38:8E
Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b
Certificate serial: 01A0E7AE2DF55F1FCCD2DD2B185BCF54F20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
Manifest number: 0352
Signing time: Mon 28 Sep 2026 11:02:26 +0000
Manifest this update: Mon 28 Sep 2026 11:02:26 +0000
Manifest next update: Tue 29 Sep 2026 11:02:26 +0000
Files and hashes: 1: PDxQWyYqgaGOkX5GZzt20B-Uems.roa (hash: B+Ao0KhpwV0cvFRAJ4KyvfBL5J8+ktllkURKL/vgcAg=)
2: vddoJJ1zZYBx-TRWA5OaudYgw1s.crl (hash: DbKdz8d0bHQCZhznfUgjknUQ8bKY0fQaqldJE8V2U+Q=)
3: yFX62ci1qBUDucLwJ8wtZh6slII.roa (hash: jSh0LUqy7JqqicLthv+W+VrwTZt3JtqwoMS9ylaeVMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:2d:f5:5f:1f:cc:d2:dd:2b:18:5b:cf:54:f2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b
Validity
Not Before: Sep 28 11:02:26 2026 GMT
Not After : Sep 29 11:02:26 2026 GMT
Subject: CN=4f6487572ada82a8f7658b5e08c46f3311f6388e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:51:5d:0a:88:6d:d6:db:24:05:e1:94:4d:
43:f6:37:e3:f3:3b:c7:4a:5b:26:5d:58:6a:bf:cb:
80:c6:71:fb:1b:3e:2b:f4:18:50:12:d1:29:eb:71:
b7:5a:c3:d2:84:ba:83:7d:ac:40:19:b3:d7:12:72:
fd:2a:db:98:7e:99:e6:d0:05:a8:df:a3:ec:8c:67:
e7:46:98:30:05:24:5f:21:d0:3e:16:d9:9a:ac:4d:
77:00:32:e4:f6:75:f1:ca:87:65:45:a7:c8:ed:a9:
21:79:5a:f6:8d:bf:21:b3:a6:b3:37:89:f3:82:ca:
d3:7d:aa:9f:6a:53:62:b2:02:fc:c7:e8:9f:96:5e:
bb:04:22:c0:a8:d8:99:c7:b2:57:a0:91:99:92:fa:
25:fb:65:2c:0c:3a:4e:fe:04:0e:7c:44:ff:87:b2:
55:c3:b9:a8:67:86:d6:91:db:f5:09:1f:27:66:1e:
52:51:69:42:32:c1:53:d0:9e:f7:74:01:bd:11:8f:
fd:76:f5:9f:52:03:62:4a:6f:91:cd:79:f9:3b:75:
8a:d3:18:41:56:af:77:af:b0:77:a5:87:88:81:08:
7e:2b:2c:1d:a1:58:76:44:11:cd:63:bd:10:79:df:
4e:d1:d5:af:b0:eb:40:6f:2a:ab:b2:dd:9e:49:2e:
74:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:64:87:57:2A:DA:82:A8:F7:65:8B:5E:08:C4:6F:33:11:F6:38:8E
X509v3 Authority Key Identifier:
keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:54:6d:e3:72:8d:ad:ec:55:ed:81:59:5e:15:d2:6d:4a:54:
fb:23:9b:4e:b8:dd:5b:fc:cb:d5:0d:9e:bf:03:cd:0d:b8:94:
91:e5:05:92:33:f8:a2:d9:cf:70:fb:7f:5b:23:11:f3:8a:82:
02:b3:40:cc:68:73:f9:46:81:72:4b:e0:96:9d:28:e7:47:7f:
78:de:1b:44:4e:14:5b:00:0f:b5:20:74:a7:d2:98:a2:d5:17:
61:7e:0f:6e:11:eb:65:ef:92:a0:3f:ff:f6:67:4c:fc:5b:5c:
4e:f4:a8:0a:b6:09:31:8a:66:eb:3e:56:ae:8a:92:5f:2b:b8:
b3:f2:d9:e6:3d:0e:23:44:c9:2e:bc:79:f1:58:81:75:ef:88:
7b:fe:c2:68:9b:f9:be:1e:fd:c2:43:a3:46:70:60:6d:10:38:
36:0b:c2:81:0c:d8:3e:50:c3:55:3b:1c:8e:05:bd:f8:dc:58:
d7:ba:f1:0e:3f:88:99:8c:d3:32:ee:ce:8c:6f:27:96:34:23:
74:63:94:d2:a3:e8:20:e9:28:ca:4c:c6:1d:3c:4f:d2:41:4d:
1d:28:9c:88:8d:0b:3c:34:2c:1d:52:5e:ea:cc:84:62:3c:61:
aa:5d:a4:e6:f7:63:e4:4c:8d:20:89:28:37:f9:e3:30:2e:7d:
f0:4b:ce:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnri31Xx/M0t0rGFvPVPIPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDc2ODI0OWQ3MzY1ODA3MWY5MzQ1NjAzOTM5YWI5ZDYy
MGMzNWIwHhcNMjYwOTI4MTEwMjI2WhcNMjYwOTI5MTEwMjI2WjAzMTEwLwYDVQQD
Eyg0ZjY0ODc1NzJhZGE4MmE4Zjc2NThiNWUwOGM0NmYzMzExZjYzODhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy31RXQqIbdbbJAXhlE1D9jfj8zvH
SlsmXVhqv8uAxnH7Gz4r9BhQEtEp63G3WsPShLqDfaxAGbPXEnL9KtuYfpnm0AWo
36PsjGfnRpgwBSRfIdA+FtmarE13ADLk9nXxyodlRafI7akheVr2jb8hs6azN4nz
gsrTfaqfalNisgL8x+ifll67BCLAqNiZx7JXoJGZkvol+2UsDDpO/gQOfET/h7JV
w7moZ4bWkdv1CR8nZh5SUWlCMsFT0J73dAG9EY/9dvWfUgNiSm+RzXn5O3WK0xhB
Vq93r7B3pYeIgQh+KywdoVh2RBHNY70Qed9O0dWvsOtAbyqrst2eSS50awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9kh1cq2oKo92WLXgjEbzMR9jiOMB8GA1UdIwQY
MBaAFL3XaCSdc2WAcfk0VgOTmrnWIMNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzct
MDY5NjA2NDQxNTE0LzEvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzctMDY5NjA2NDQxNTE0
LzEvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglRt43KN
rexV7YFZXhXSbUpU+yObTrjdW/zL1Q2evwPNDbiUkeUFkjP4otnPcPt/WyMR84qC
ArNAzGhz+UaBckvglp0o50d/eN4bRE4UWwAPtSB0p9KYotUXYX4PbhHrZe+SoD//
9mdM/FtcTvSoCrYJMYpm6z5WroqSXyu4s/LZ5j0OI0TJLrx58ViBde+Ie/7CaJv5
vh79wkOjRnBgbRA4NgvCgQzYPlDDVTscjgW9+NxY17rxDj+ImYzTMu7OjG8nljQj
dGOU0qPoIOkoykzGHTxP0kFNHSiciI0LPDQsHVJe6syEYjxhql2k5vdj5EyNIIko
N/njMC598EvOTw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:17:18 2026 by rpki-client