Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft
File: vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft (raw, json)
Hash identifier: uF8CukHqu5QQbkSGrrDgJdCSHDCbyItwUk9u4heM+B4=
Subject key identifier: 8F:18:2A:78:39:4B:3E:B1:BF:78:4A:63:9C:1A:17:37:7D:67:2B:3E
Authority key identifier: BD:D6:41:05:A1:9D:CD:5C:67:5C:0A:3F:98:EE:8C:60:4E:80:8F:1B
Certificate issuer: /CN=bdd64105a19dcd5c675c0a3f98ee8c604e808f1b
Certificate serial: 019D28F3009BE2A7FD1CD51F01BE560C8BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft
Manifest number: 0D61
Signing time: Thu 26 Mar 2026 07:01:47 +0000
Manifest this update: Thu 26 Mar 2026 07:01:47 +0000
Manifest next update: Fri 27 Mar 2026 07:01:47 +0000
Files and hashes: 1: vdZBBaGdzVxnXAo_mO6MYE6Ajxs.crl (hash: 6ImnXd8UrApS9KCzVOKRwRbP4e2+g1aNEsHwEWtIaVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:00:9b:e2:a7:fd:1c:d5:1f:01:be:56:0c:8b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd64105a19dcd5c675c0a3f98ee8c604e808f1b
Validity
Not Before: Mar 26 07:01:47 2026 GMT
Not After : Mar 27 07:01:47 2026 GMT
Subject: CN=8f182a78394b3eb1bf784a639c1a17377d672b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:90:3c:ef:f6:b7:f3:06:88:17:59:25:c6:
d1:80:53:45:1e:26:79:d5:67:a2:2e:eb:58:95:e0:
c8:7f:00:07:74:fa:aa:a1:4f:0c:3a:43:07:df:95:
09:cc:0b:d0:29:ba:d3:b7:e5:a8:aa:57:70:67:22:
ac:47:dd:b8:6f:f7:a8:8f:91:52:5a:53:49:8a:24:
2b:c2:0b:9a:88:1c:fa:57:bd:76:66:1a:d4:25:25:
60:e7:19:3c:96:c2:ad:da:72:5d:0e:88:96:21:de:
b2:cd:0a:4a:82:92:2f:3b:05:6a:9f:2a:b4:dd:bd:
71:6d:45:e5:7f:c5:18:ac:1d:66:4e:a5:2b:2c:e8:
ef:49:f4:f9:96:08:cc:f2:73:f2:e8:92:99:ca:c3:
af:42:05:b9:3e:a2:d0:aa:9a:a8:b0:48:28:ca:2f:
37:33:3d:42:ba:97:cf:79:b3:1a:5a:f5:a4:84:89:
b0:d9:fc:73:62:e8:ed:c1:c7:35:5a:56:14:0e:bd:
a5:7e:a5:4a:09:37:28:fa:92:3f:d6:33:5e:6c:45:
78:f2:b7:a0:70:3a:a1:57:11:66:9f:60:02:86:6e:
81:f8:ea:59:15:f8:98:6c:d1:6a:27:d9:06:5f:62:
ce:92:45:33:1b:66:19:59:f4:0f:10:11:39:c1:fe:
92:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:18:2A:78:39:4B:3E:B1:BF:78:4A:63:9C:1A:17:37:7D:67:2B:3E
X509v3 Authority Key Identifier:
keyid:BD:D6:41:05:A1:9D:CD:5C:67:5C:0A:3F:98:EE:8C:60:4E:80:8F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:36:09:05:f8:57:15:e2:aa:7b:14:97:99:e1:1a:3b:0c:da:
0f:fd:90:77:58:ab:cc:af:ce:b5:07:e2:b9:69:84:1f:a3:cf:
33:3e:d9:80:5b:40:40:ca:de:00:04:08:31:66:7f:3f:38:20:
a1:ae:e7:eb:ea:db:40:d5:6e:e7:e8:39:c0:65:da:b3:28:04:
61:ae:29:e5:3a:04:e3:7d:3b:6f:39:c7:ef:16:1d:d7:cf:02:
6d:33:38:2d:21:c7:c7:89:59:4c:cb:39:4e:2c:d1:86:39:8c:
67:0c:8d:b7:b2:6c:ed:6a:f3:34:8f:46:e3:1d:e6:57:fb:24:
79:6d:67:8f:6a:d7:82:57:c4:86:7c:04:08:51:06:9e:2f:41:
83:4d:99:e6:6c:4e:ab:5a:ae:f7:d6:ad:58:e8:c1:9d:40:44:
25:b8:dd:82:c9:07:66:11:9c:ff:a9:ff:e7:4a:ba:70:56:8b:
24:47:d0:3d:fd:dd:a5:c2:ea:60:6f:61:ae:da:de:7f:cb:11:
61:38:19:ba:80:af:74:c7:5d:bc:8a:75:1c:aa:72:61:f3:ef:
d3:82:19:a9:a2:02:27:86:19:46:45:18:a6:3a:c0:e6:1b:f9:
d6:32:74:a9:ae:b3:8c:d8:8c:68:05:6c:44:e4:2a:f7:0e:2c:
0f:fe:ef:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8wCb4qf9HNUfAb5WDIu3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDY0MTA1YTE5ZGNkNWM2NzVjMGEzZjk4ZWU4YzYwNGU4
MDhmMWIwHhcNMjYwMzI2MDcwMTQ3WhcNMjYwMzI3MDcwMTQ3WjAzMTEwLwYDVQQD
Eyg4ZjE4MmE3ODM5NGIzZWIxYmY3ODRhNjM5YzFhMTczNzdkNjcyYjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgmQPO/2t/MGiBdZJcbRgFNFHiZ5
1WeiLutYleDIfwAHdPqqoU8MOkMH35UJzAvQKbrTt+WoqldwZyKsR924b/eoj5FS
WlNJiiQrwguaiBz6V712ZhrUJSVg5xk8lsKt2nJdDoiWId6yzQpKgpIvOwVqnyq0
3b1xbUXlf8UYrB1mTqUrLOjvSfT5lgjM8nPy6JKZysOvQgW5PqLQqpqosEgoyi83
Mz1CupfPebMaWvWkhImw2fxzYujtwcc1WlYUDr2lfqVKCTco+pI/1jNebEV48reg
cDqhVxFmn2AChm6B+OpZFfiYbNFqJ9kGX2LOkkUzG2YZWfQPEBE5wf6SKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8YKng5Sz6xv3hKY5waFzd9Zys+MB8GA1UdIwQY
MBaAFL3WQQWhnc1cZ1wKP5jujGBOgI8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRaQkJhR2R6VnhuWEFvX21PNk1ZRTZBanhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMTg0YmQtYjVkMi00YjljLTkxNmIt
ZDA0NTZmNzI5ODczLzEvdmRaQkJhR2R6VnhuWEFvX21PNk1ZRTZBanhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wMTg0YmQtYjVkMi00YjljLTkxNmItZDA0NTZmNzI5ODcz
LzEvdmRaQkJhR2R6VnhuWEFvX21PNk1ZRTZBanhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjYJBfhX
FeKqexSXmeEaOwzaD/2Qd1irzK/OtQfiuWmEH6PPMz7ZgFtAQMreAAQIMWZ/Pzgg
oa7n6+rbQNVu5+g5wGXasygEYa4p5ToE4307bznH7xYd188CbTM4LSHHx4lZTMs5
TizRhjmMZwyNt7Js7WrzNI9G4x3mV/skeW1nj2rXglfEhnwECFEGni9Bg02Z5mxO
q1qu99atWOjBnUBEJbjdgskHZhGc/6n/50q6cFaLJEfQPf3dpcLqYG9hrtref8sR
YTgZuoCvdMddvIp1HKpyYfPv04IZqaICJ4YZRkUYpjrA5hv51jJ0qa6zjNiMaAVs
ROQq9w4sD/7vgQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:58:40 2026 by rpki-client