Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
File: vddoJJ1zZYBx-TRWA5OaudYgw1s.mft (raw, json)
Hash identifier: jTWSTVQjCeHgjZboqoE3jp2c79dK/tyXkwjGbzAWJNE=
Subject key identifier: 83:68:1A:56:27:68:5B:46:BF:7B:4B:A8:84:78:57:F4:12:6E:2A:AC
Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b
Certificate serial: 019D29CE71F6A74C2723CA0C511F9A315A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
Manifest number: 0162
Signing time: Thu 26 Mar 2026 11:01:28 +0000
Manifest this update: Thu 26 Mar 2026 11:01:28 +0000
Manifest next update: Fri 27 Mar 2026 11:01:28 +0000
Files and hashes: 1: PDxQWyYqgaGOkX5GZzt20B-Uems.roa (hash: B+Ao0KhpwV0cvFRAJ4KyvfBL5J8+ktllkURKL/vgcAg=)
2: vddoJJ1zZYBx-TRWA5OaudYgw1s.crl (hash: vLgtrseIlvpEp1uJtz8eB+ns3r34yLNbuFrB8QL0Dbk=)
3: yFX62ci1qBUDucLwJ8wtZh6slII.roa (hash: jSh0LUqy7JqqicLthv+W+VrwTZt3JtqwoMS9ylaeVMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:71:f6:a7:4c:27:23:ca:0c:51:1f:9a:31:5a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b
Validity
Not Before: Mar 26 11:01:28 2026 GMT
Not After : Mar 27 11:01:28 2026 GMT
Subject: CN=83681a5627685b46bf7b4ba8847857f4126e2aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:1c:f1:85:b9:86:de:5c:b6:2b:c9:51:e8:
2c:e7:27:81:8a:6d:34:11:8e:35:2e:cd:df:20:ad:
3b:a7:82:44:b2:f9:ec:e2:be:a2:ae:8e:1f:5c:cf:
b9:21:71:e1:c4:4e:c8:3e:c1:db:13:ad:22:20:a5:
f1:12:e5:05:a5:40:2c:42:d8:37:e6:81:67:d9:02:
cf:be:1f:87:a7:c0:3c:6b:25:43:d7:18:d0:b1:5e:
05:57:15:e5:b4:ed:a9:ac:a6:9b:0e:0d:24:a8:3e:
b5:35:b7:ce:11:6f:db:77:a4:67:17:4e:1e:47:21:
33:e4:6f:39:ab:f5:dd:b0:7a:13:c4:7a:f4:27:cf:
e9:9a:cf:f1:28:58:a4:4d:a9:1c:41:6a:13:88:ee:
48:ff:96:21:00:34:a7:ce:da:93:23:9a:74:32:b8:
3d:9f:d3:9f:de:db:61:c0:25:62:53:7a:bc:b1:12:
c1:85:36:c1:23:0b:22:5b:8f:2e:f9:f7:6b:7f:4c:
35:f1:cc:17:c2:ab:34:c2:96:e1:88:92:0b:a6:bd:
df:00:c1:14:f2:9d:d9:f8:32:f4:bf:5b:00:dc:0d:
16:b1:f4:95:38:96:31:60:b2:31:4f:a5:48:06:57:
a1:c1:f7:b7:1f:0d:b1:73:e6:e8:ac:52:42:9b:36:
51:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:68:1A:56:27:68:5B:46:BF:7B:4B:A8:84:78:57:F4:12:6E:2A:AC
X509v3 Authority Key Identifier:
keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:56:bd:b7:da:78:9a:57:7c:63:4a:15:6c:ce:aa:84:8d:23:
1e:46:84:1a:34:5b:2b:8b:97:84:e8:bf:25:85:ec:01:90:23:
82:57:8a:7a:0e:c4:fa:6d:27:06:db:57:83:80:47:c9:a0:9c:
96:1b:43:f7:63:96:b3:01:4c:89:9b:a5:34:5c:47:5e:1c:63:
a5:7f:1a:cf:26:ec:28:3d:b4:9a:e6:7e:21:2d:a5:b8:ca:8d:
f2:75:7e:a0:b4:f7:6c:18:d2:3e:28:d2:de:28:a4:f1:72:bb:
a4:63:48:e7:2d:36:a1:6c:4b:33:50:93:72:d3:fc:a7:06:61:
23:85:fa:f3:1b:74:b8:88:a2:ec:35:67:38:4f:67:40:c7:ed:
d3:3a:3c:03:63:86:9f:ec:76:94:5e:c4:9f:a3:aa:9d:be:a6:
84:db:e9:24:37:52:95:77:68:ed:0f:8f:3d:9e:0d:e1:f8:78:
87:88:fd:68:31:5e:5a:e3:3f:d5:4d:78:d3:f7:82:7a:ea:1c:
8a:fe:a6:06:c4:92:e1:13:ff:92:25:59:6b:3e:a0:46:04:69:
bb:78:d5:62:22:34:60:ed:24:92:3e:75:b1:c5:0e:49:89:4e:
b7:32:0c:94:25:10:81:b9:a3:9c:2d:54:b8:83:75:82:7f:13:
c5:62:9a:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pznH2p0wnI8oMUR+aMVpYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDc2ODI0OWQ3MzY1ODA3MWY5MzQ1NjAzOTM5YWI5ZDYy
MGMzNWIwHhcNMjYwMzI2MTEwMTI4WhcNMjYwMzI3MTEwMTI4WjAzMTEwLwYDVQQD
Eyg4MzY4MWE1NjI3Njg1YjQ2YmY3YjRiYTg4NDc4NTdmNDEyNmUyYWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXsc8YW5ht5ctivJUegs5yeBim00
EY41Ls3fIK07p4JEsvns4r6iro4fXM+5IXHhxE7IPsHbE60iIKXxEuUFpUAsQtg3
5oFn2QLPvh+Hp8A8ayVD1xjQsV4FVxXltO2prKabDg0kqD61NbfOEW/bd6RnF04e
RyEz5G85q/XdsHoTxHr0J8/pms/xKFikTakcQWoTiO5I/5YhADSnztqTI5p0Mrg9
n9Of3tthwCViU3q8sRLBhTbBIwsiW48u+fdrf0w18cwXwqs0wpbhiJILpr3fAMEU
8p3Z+DL0v1sA3A0WsfSVOJYxYLIxT6VIBlehwfe3Hw2xc+borFJCmzZRlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINoGlYnaFtGv3tLqIR4V/QSbiqsMB8GA1UdIwQY
MBaAFL3XaCSdc2WAcfk0VgOTmrnWIMNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzct
MDY5NjA2NDQxNTE0LzEvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzctMDY5NjA2NDQxNTE0
LzEvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFa9t9p4
mld8Y0oVbM6qhI0jHkaEGjRbK4uXhOi/JYXsAZAjgleKeg7E+m0nBttXg4BHyaCc
lhtD92OWswFMiZulNFxHXhxjpX8azybsKD20muZ+IS2luMqN8nV+oLT3bBjSPijS
3iik8XK7pGNI5y02oWxLM1CTctP8pwZhI4X68xt0uIii7DVnOE9nQMft0zo8A2OG
n+x2lF7En6Oqnb6mhNvpJDdSlXdo7Q+PPZ4N4fh4h4j9aDFeWuM/1U140/eCeuoc
iv6mBsSS4RP/kiVZaz6gRgRpu3jVYiI0YO0kkj51scUOSYlOtzIMlCUQgbmjnC1U
uIN1gn8TxWKaQQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:45:33 2026 by rpki-client