Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft
File: vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft (raw, json)
Hash identifier: TOha1IiSRhgh0sZX0pJA0BBXWHzFLGFge1EyE8C0O08=
Subject key identifier: A4:F3:BC:37:FC:F3:9D:47:62:6B:91:CD:81:37:79:B3:53:E4:BB:99
Authority key identifier: BC:C8:60:D9:54:97:4D:CA:91:D5:B3:47:B6:3B:22:65:36:67:DA:6D
Certificate issuer: /CN=bcc860d954974dca91d5b347b63b22653667da6d
Certificate serial: 019D29973D7979615098D92E0514FB53104D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMhg2VSXTcqR1bNHtjsiZTZn2m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft
Manifest number: 025D
Signing time: Thu 26 Mar 2026 10:01:10 +0000
Manifest this update: Thu 26 Mar 2026 10:01:10 +0000
Manifest next update: Fri 27 Mar 2026 10:01:10 +0000
Files and hashes: 1: KTqLgw8eo-mzgCP7WPEbanHjWjU.roa (hash: CQn/2K4EIIaRAwMrCV20ReKfEOH3rokR++XishuQ6Ik=)
2: vMhg2VSXTcqR1bNHtjsiZTZn2m0.crl (hash: 1gdWeGudeVBCOwdtIZKSJfv3N06Yd+mKhHofZ+RhOUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMhg2VSXTcqR1bNHtjsiZTZn2m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:3d:79:79:61:50:98:d9:2e:05:14:fb:53:10:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc860d954974dca91d5b347b63b22653667da6d
Validity
Not Before: Mar 26 10:01:10 2026 GMT
Not After : Mar 27 10:01:10 2026 GMT
Subject: CN=a4f3bc37fcf39d47626b91cd813779b353e4bb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3a:2e:07:76:3c:87:c7:39:2a:cb:41:b3:78:
6a:b3:42:ad:c3:6b:7e:65:ee:55:76:d3:d1:fc:9e:
47:21:6c:34:9d:85:41:f1:62:60:05:94:e7:a6:02:
27:09:64:53:39:48:5c:cd:5b:c3:39:91:3a:00:64:
25:b2:65:d0:a2:32:4d:59:09:68:1a:b1:a1:4d:cb:
de:78:96:1b:c8:e4:6a:52:91:4d:69:08:a5:4f:22:
b7:62:1b:23:45:7c:6d:92:63:b4:ca:3a:77:47:50:
dc:8f:8c:a7:da:36:3d:8b:01:75:9a:a2:77:34:27:
c2:8d:72:94:b7:7b:ae:e2:d1:f0:f6:f6:a7:6e:60:
6b:03:f2:f2:0c:b6:c3:07:42:67:fa:be:cc:f5:7f:
78:79:30:d0:2a:a9:d5:c9:cf:67:69:6a:f7:26:67:
c3:ba:d9:24:00:46:9c:af:b4:5d:b2:7a:4e:04:4a:
6f:53:29:1d:a4:c1:02:fd:77:b7:d1:67:8f:61:f7:
e6:ff:1f:76:ad:8c:68:22:29:52:ab:87:5a:ba:df:
33:2c:f2:33:cc:7e:19:2a:49:f1:f9:ea:48:cd:4a:
33:da:de:32:8b:0f:63:af:68:62:ae:31:f5:e4:ed:
b9:ab:d9:1c:13:c3:94:3f:4b:42:4e:89:33:2c:b5:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F3:BC:37:FC:F3:9D:47:62:6B:91:CD:81:37:79:B3:53:E4:BB:99
X509v3 Authority Key Identifier:
keyid:BC:C8:60:D9:54:97:4D:CA:91:D5:B3:47:B6:3B:22:65:36:67:DA:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMhg2VSXTcqR1bNHtjsiZTZn2m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7b:f1:07:2f:65:a1:ea:63:17:75:a1:78:d1:75:b2:82:35:
66:df:fe:8e:20:af:23:81:77:ab:a6:35:c2:67:38:a8:8a:f3:
e0:98:6e:6e:ff:8b:d2:0d:60:71:1a:56:a8:de:71:da:48:31:
df:ce:10:a4:79:9e:20:39:4d:86:57:71:e7:ab:9e:52:09:73:
7c:5c:cd:1f:23:8d:a2:6a:0d:f3:cf:b4:d2:3a:36:d3:d1:06:
72:20:ab:b1:37:87:bc:ed:70:93:51:3c:a1:c7:fb:ba:bf:92:
9f:d3:e1:5c:53:dc:09:02:6e:aa:0f:a2:62:34:75:4e:5b:73:
13:c9:c9:58:d8:7c:b5:8b:29:ce:68:b5:b3:33:8d:02:df:23:
ba:22:78:7f:67:21:13:82:33:70:c7:dd:eb:15:e2:bc:9c:1d:
86:5d:45:c1:fc:95:02:b8:b2:bd:da:18:15:89:ed:96:ff:9f:
13:31:54:5a:4b:ac:66:5a:3b:6b:e0:ce:4f:bb:70:1e:42:5e:
59:ac:23:52:ca:95:56:2e:67:e3:3c:94:5b:86:00:b2:cb:c7:
3e:a7:7a:d9:f1:f3:c7:e4:16:fb:3d:c9:95:78:8d:bd:73:a4:
51:c8:a4:dd:44:3e:d2:a0:aa:d9:18:af:2e:94:95:2b:b7:f6:
f1:5c:0a:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plz15eWFQmNkuBRT7UxBNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYzg2MGQ5NTQ5NzRkY2E5MWQ1YjM0N2I2M2IyMjY1MzY2
N2RhNmQwHhcNMjYwMzI2MTAwMTEwWhcNMjYwMzI3MTAwMTEwWjAzMTEwLwYDVQQD
EyhhNGYzYmMzN2ZjZjM5ZDQ3NjI2YjkxY2Q4MTM3NzliMzUzZTRiYjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jouB3Y8h8c5KstBs3hqs0Ktw2t+
Ze5VdtPR/J5HIWw0nYVB8WJgBZTnpgInCWRTOUhczVvDOZE6AGQlsmXQojJNWQlo
GrGhTcveeJYbyORqUpFNaQilTyK3YhsjRXxtkmO0yjp3R1Dcj4yn2jY9iwF1mqJ3
NCfCjXKUt3uu4tHw9vanbmBrA/LyDLbDB0Jn+r7M9X94eTDQKqnVyc9naWr3JmfD
utkkAEacr7RdsnpOBEpvUykdpMEC/Xe30WePYffm/x92rYxoIilSq4daut8zLPIz
zH4ZKknx+epIzUoz2t4yiw9jr2hirjH15O25q9kcE8OUP0tCTokzLLXTvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTzvDf8851HYmuRzYE3ebNT5LuZMB8GA1UdIwQY
MBaAFLzIYNlUl03KkdWzR7Y7ImU2Z9ptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk1oZzJWU1hUY3FSMWJOSHRqc2laVFpuMm0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS80Mzk4NzgtNGE5NS00NDc4LTgxNjMt
ZjM3MGYwNDI2NWE1LzEvdk1oZzJWU1hUY3FSMWJOSHRqc2laVFpuMm0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS80Mzk4NzgtNGE5NS00NDc4LTgxNjMtZjM3MGYwNDI2NWE1
LzEvdk1oZzJWU1hUY3FSMWJOSHRqc2laVFpuMm0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3vxBy9l
oepjF3WheNF1soI1Zt/+jiCvI4F3q6Y1wmc4qIrz4Jhubv+L0g1gcRpWqN5x2kgx
384QpHmeIDlNhldx56ueUglzfFzNHyONomoN88+00jo209EGciCrsTeHvO1wk1E8
ocf7ur+Sn9PhXFPcCQJuqg+iYjR1TltzE8nJWNh8tYspzmi1szONAt8juiJ4f2ch
E4IzcMfd6xXivJwdhl1FwfyVAriyvdoYFYntlv+fEzFUWkusZlo7a+DOT7twHkJe
WawjUsqVVi5n4zyUW4YAssvHPqd62fHzx+QW+z3JlXiNvXOkUcik3UQ+0qCq2Riv
LpSVK7f28VwKCA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:22 2026 by rpki-client