Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
File: vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft (raw, json)
Hash identifier: GqaLLzwZUbvwhI73Ur9RZXQlDA9lxaRZR93o1RU3bHA=
Subject key identifier: D0:19:7E:26:41:72:DA:55:9C:0F:59:DC:5D:F0:7F:48:33:4D:D7:D4
Authority key identifier: BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
Certificate issuer: /CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Certificate serial: 019D2695CBDE6648812861D16B7B46535969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
Manifest number: 13C8
Signing time: Wed 25 Mar 2026 20:00:44 +0000
Manifest this update: Wed 25 Mar 2026 20:00:44 +0000
Manifest next update: Thu 26 Mar 2026 20:00:44 +0000
Files and hashes: 1: hYLp43OSPXsL4JxLswilkc5UtXM.roa (hash: rqjG85ikI7yDLzBtgViqukIp7fUAhh1OKd6HYF2+ojM=)
2: vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl (hash: gR1GaFxBI8f0f+IIIk00ink6ykhGAEVurXh/w5zjqEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:cb:de:66:48:81:28:61:d1:6b:7b:46:53:59:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Validity
Not Before: Mar 25 20:00:44 2026 GMT
Not After : Mar 26 20:00:44 2026 GMT
Subject: CN=d0197e264172da559c0f59dc5df07f48334dd7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:51:65:ce:fd:11:e7:c5:20:71:54:1a:6b:
33:9e:fa:a5:8c:1a:de:fe:fc:4d:14:51:12:7e:6b:
9d:7b:82:53:bc:8b:71:71:02:74:e2:59:88:ab:b3:
3a:50:95:b7:01:f8:7a:42:83:b8:bb:81:08:b7:b6:
45:32:36:a1:10:c5:da:81:af:be:b1:f2:73:c0:e9:
17:1b:f7:72:27:70:e5:b3:8e:aa:b3:ff:e8:98:0d:
d7:c4:9a:bb:3d:a2:e9:ec:cf:37:99:2d:7e:02:54:
1f:b8:28:c7:0a:1d:6c:d9:a7:6e:d9:20:d5:3d:ab:
d2:4c:fa:4a:69:5d:30:2a:9d:bb:4e:0b:f7:e3:d6:
87:68:bc:68:c9:06:9b:7c:1d:f3:f4:14:2a:bb:b7:
fc:6d:5b:33:b3:5e:b4:bb:05:8c:9d:d6:71:fa:31:
27:a4:29:d7:0b:63:fa:d8:c8:d0:91:4f:37:e8:9c:
58:6b:e8:85:37:b4:f9:d4:16:b1:58:33:dc:df:39:
15:b9:c7:8a:ea:76:ad:04:a6:60:98:bd:38:5a:02:
61:c8:c4:b9:fe:79:ee:39:c5:30:c7:a9:89:b0:c1:
9b:8b:ea:15:f1:e3:01:46:0f:fb:e1:38:7b:88:55:
6e:08:53:5e:99:d7:2f:e9:1b:c4:95:56:03:49:e7:
cd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:19:7E:26:41:72:DA:55:9C:0F:59:DC:5D:F0:7F:48:33:4D:D7:D4
X509v3 Authority Key Identifier:
keyid:BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4d:1c:25:21:c6:e2:84:7f:10:50:08:2d:94:0a:12:8d:80:
19:b7:46:ea:f1:38:99:ae:ea:3d:a4:55:7e:84:65:ce:a3:e2:
2c:a6:1a:1d:e1:39:90:3b:b7:d7:34:23:12:1e:da:6d:d7:8e:
c3:94:8d:c6:39:1d:f5:29:5e:a3:8e:d3:aa:96:d7:2f:d2:9c:
72:54:e6:e9:fd:85:a6:f0:e7:c3:57:b0:99:e5:9c:ee:87:bb:
c9:ee:80:a2:ad:af:3a:d4:dd:60:09:92:41:96:29:60:53:70:
4b:eb:3e:64:d6:78:a6:9e:7a:75:75:98:35:b5:f3:c8:a3:d3:
1e:5f:90:c1:0e:b9:1e:59:65:15:72:a0:04:f4:bd:87:81:9c:
62:40:fe:fa:04:f2:84:0c:35:d2:98:b0:07:6d:8d:79:6d:b9:
58:13:c8:e9:8d:12:14:81:a4:2d:fe:81:9b:b3:91:23:68:97:
9f:ac:9f:42:39:67:97:ee:68:9e:48:61:91:fd:25:87:a6:2a:
b3:a1:02:49:b3:75:4b:64:0f:14:b6:48:a8:41:e8:e7:82:6e:
86:ce:c4:1b:ef:32:26:33:f1:ad:83:19:88:6e:db:35:e3:42:
49:44:88:9c:4c:e1:21:7f:58:89:e4:47:5b:70:f7:52:d0:1f:
6e:7b:eb:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlcveZkiBKGHRa3tGU1lpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMmYyY2NmMWJhYTM5MDMzZWM3NmE1ODZmODQ2YTM2MjE4
ZjIwOWQwHhcNMjYwMzI1MjAwMDQ0WhcNMjYwMzI2MjAwMDQ0WjAzMTEwLwYDVQQD
EyhkMDE5N2UyNjQxNzJkYTU1OWMwZjU5ZGM1ZGYwN2Y0ODMzNGRkN2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWZRZc79EefFIHFUGmsznvqljBre
/vxNFFESfmude4JTvItxcQJ04lmIq7M6UJW3Afh6QoO4u4EIt7ZFMjahEMXaga++
sfJzwOkXG/dyJ3Dls46qs//omA3XxJq7PaLp7M83mS1+AlQfuCjHCh1s2adu2SDV
PavSTPpKaV0wKp27Tgv349aHaLxoyQabfB3z9BQqu7f8bVszs160uwWMndZx+jEn
pCnXC2P62MjQkU836JxYa+iFN7T51BaxWDPc3zkVuceK6natBKZgmL04WgJhyMS5
/nnuOcUwx6mJsMGbi+oV8eMBRg/74Th7iFVuCFNemdcv6RvElVYDSefN3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAZfiZBctpVnA9Z3F3wf0gzTdfUMB8GA1UdIwQY
MBaAFL4vLM8bqjkDPsdqWG+EajYhjyCdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmk4c3p4dXFPUU0teDJwWWI0UnFOaUdQSUowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85Nzc0NGQtNTk4OC00NmFlLTgyZjEt
NjQxODdlMzA0MzViLzEvdmk4c3p4dXFPUU0teDJwWWI0UnFOaUdQSUowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85Nzc0NGQtNTk4OC00NmFlLTgyZjEtNjQxODdlMzA0MzVi
LzEvdmk4c3p4dXFPUU0teDJwWWI0UnFOaUdQSUowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiE0cJSHG
4oR/EFAILZQKEo2AGbdG6vE4ma7qPaRVfoRlzqPiLKYaHeE5kDu31zQjEh7abdeO
w5SNxjkd9Sleo47TqpbXL9KcclTm6f2FpvDnw1ewmeWc7oe7ye6Aoq2vOtTdYAmS
QZYpYFNwS+s+ZNZ4pp56dXWYNbXzyKPTHl+QwQ65HlllFXKgBPS9h4GcYkD++gTy
hAw10piwB22NeW25WBPI6Y0SFIGkLf6Bm7ORI2iXn6yfQjlnl+5onkhhkf0lh6Yq
s6ECSbN1S2QPFLZIqEHo54Juhs7EG+8yJjPxrYMZiG7bNeNCSUSInEzhIX9YieRH
W3D3UtAfbnvrRg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:26 2026 by rpki-client