Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
File: vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft (raw, json)
Hash identifier: q3FbJnLwUl/bGSBR5VNYHFzoynH8vRIpGyt/SwuCdIo=
Subject key identifier: 8B:67:6E:C0:36:CE:23:44:02:B3:77:4F:A8:4E:56:9B:39:11:D4:D9
Authority key identifier: BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE
Certificate issuer: /CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
Certificate serial: 019E1D90015C0D79DF685D7C9D702C75DE0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
Manifest number: 0BD2
Signing time: Tue 12 May 2026 19:00:36 +0000
Manifest this update: Tue 12 May 2026 19:00:36 +0000
Manifest next update: Wed 13 May 2026 19:00:36 +0000
Files and hashes: 1: 0ttkVx2NWCTHv4qe688EscfORjE.roa (hash: ghKgYeI4Lfc7/b9uWLhvosp/wzvsgali/oUedQGdwGg=)
2: mNC5GkRzpe0TcIftq03m_ZQlLiM.asa (hash: l/sJ49tKEXd94Ikw8096y/GdUHEWeA7yG1kPodLn6rw=)
3: vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl (hash: fpX8ClomOk5qk46JKnDmej5dODA1mbBWojBTTmUrxuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:01:5c:0d:79:df:68:5d:7c:9d:70:2c:75:de:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
Validity
Not Before: May 12 19:00:36 2026 GMT
Not After : May 13 19:00:36 2026 GMT
Subject: CN=8b676ec036ce234402b3774fa84e569b3911d4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1d:e6:d4:7e:0d:3e:50:f5:c4:72:89:8a:d5:
d5:7f:ce:97:ad:c0:44:d1:0c:aa:36:da:36:15:3f:
78:04:4c:da:1a:8a:6d:13:34:a7:c3:3c:a6:44:b5:
49:86:d8:d1:62:73:aa:27:d3:db:49:df:59:6e:f4:
08:d3:ab:7e:fb:b6:1f:ed:2e:c0:6b:30:ad:7f:f0:
b2:f2:ec:5f:c2:b9:f7:7c:a1:dc:7c:47:7f:64:cc:
43:f3:c2:18:c5:10:84:c2:58:48:cc:10:4f:9e:e9:
ef:5e:05:ca:c1:99:19:dd:1f:ad:bb:1b:c1:09:fa:
78:1d:61:71:17:f7:d4:6a:50:16:78:f3:8b:3b:ff:
dc:1e:6e:07:43:e2:57:cc:27:b8:cb:ca:98:96:39:
ba:c4:46:67:48:dd:08:95:62:07:09:df:79:9f:50:
ca:63:df:2f:1c:9e:f6:86:33:b0:4b:16:20:0a:b9:
9e:07:1f:03:20:7f:f7:f1:95:3d:70:8f:91:a7:29:
45:eb:69:4c:bd:b4:c5:49:e2:ee:13:41:3f:bc:5d:
98:e0:4a:b1:a0:c4:30:69:49:98:da:1c:2c:31:86:
76:b2:41:e4:11:af:82:3e:ab:4c:4c:ab:69:1f:a3:
a7:af:16:82:4c:47:62:48:71:95:7f:86:bb:96:01:
a0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:67:6E:C0:36:CE:23:44:02:B3:77:4F:A8:4E:56:9B:39:11:D4:D9
X509v3 Authority Key Identifier:
keyid:BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e3:d5:d8:18:81:4c:fe:75:cd:07:d3:8f:a8:af:9c:31:b9:
6a:0c:a5:87:ee:3c:7b:83:43:da:db:da:98:44:9b:99:c7:0e:
1e:eb:e6:9a:e6:c0:2b:d1:2b:fb:77:f8:dd:db:9b:59:41:1d:
c4:e7:c2:32:7c:70:6f:16:3a:c5:ee:df:9c:8f:06:6e:4f:e7:
03:3a:bd:a9:5c:12:ef:e9:5e:c6:10:7a:2c:66:36:46:de:12:
6c:93:65:0e:8e:ea:3b:75:36:66:a2:ff:98:12:f5:94:15:d3:
7e:ab:a6:fa:bc:b9:5e:b7:64:79:8c:cd:d2:d7:7b:3a:44:40:
9e:f5:ea:7c:6c:46:14:57:13:17:38:69:a5:e4:9f:e4:a9:4b:
17:88:e7:5a:71:2a:d1:c1:05:49:6b:bb:33:38:a0:e3:63:53:
ea:ff:d3:4c:19:f6:62:1b:8b:fd:22:a5:70:a8:c9:87:9a:6d:
29:21:c1:18:8b:17:03:f4:a8:d0:19:d0:97:26:96:29:08:31:
d7:65:de:51:e0:f0:b1:3f:4c:f7:07:03:e4:58:7c:2a:86:86:
66:ef:00:3b:c8:e2:43:33:b6:56:db:46:6e:44:9f:8b:56:a0:
a4:01:ee:4c:e3:c7:e9:38:64:ec:f8:a3:ab:6e:df:30:c1:ce:
02:e8:a8:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkAFcDXnfaF18nXAsdd4PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNGFkMjFhMGE2OWRjMDQxYzRlMTc3MGViMThiYTQzYjZk
YjI5Y2UwHhcNMjYwNTEyMTkwMDM2WhcNMjYwNTEzMTkwMDM2WjAzMTEwLwYDVQQD
Eyg4YjY3NmVjMDM2Y2UyMzQ0MDJiMzc3NGZhODRlNTY5YjM5MTFkNGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R3m1H4NPlD1xHKJitXVf86XrcBE
0QyqNto2FT94BEzaGoptEzSnwzymRLVJhtjRYnOqJ9PbSd9ZbvQI06t++7Yf7S7A
azCtf/Cy8uxfwrn3fKHcfEd/ZMxD88IYxRCEwlhIzBBPnunvXgXKwZkZ3R+tuxvB
Cfp4HWFxF/fUalAWePOLO//cHm4HQ+JXzCe4y8qYljm6xEZnSN0IlWIHCd95n1DK
Y98vHJ72hjOwSxYgCrmeBx8DIH/38ZU9cI+RpylF62lMvbTFSeLuE0E/vF2Y4Eqx
oMQwaUmY2hwsMYZ2skHkEa+CPqtMTKtpH6OnrxaCTEdiSHGVf4a7lgGgzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItnbsA2ziNEArN3T6hOVps5EdTZMB8GA1UdIwQY
MBaAFL1K0hoKadwEHE4XcOsYukO22ynOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlVyU0dncHAzQVFjVGhkdzZ4aTZRN2JiS2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82N2Y3MDctMDAwNi00NjlkLWIzMTEt
Y2RkNGQ4ZjhkMGQ5LzEvdlVyU0dncHAzQVFjVGhkdzZ4aTZRN2JiS2M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC82N2Y3MDctMDAwNi00NjlkLWIzMTEtY2RkNGQ4ZjhkMGQ5
LzEvdlVyU0dncHAzQVFjVGhkdzZ4aTZRN2JiS2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+PV2BiB
TP51zQfTj6ivnDG5agylh+48e4ND2tvamESbmccOHuvmmubAK9Er+3f43dubWUEd
xOfCMnxwbxY6xe7fnI8Gbk/nAzq9qVwS7+lexhB6LGY2Rt4SbJNlDo7qO3U2ZqL/
mBL1lBXTfqum+ry5XrdkeYzN0td7OkRAnvXqfGxGFFcTFzhppeSf5KlLF4jnWnEq
0cEFSWu7Mzig42NT6v/TTBn2YhuL/SKlcKjJh5ptKSHBGIsXA/So0BnQlyaWKQgx
12XeUeDwsT9M9wcD5Fh8KoaGZu8AO8jiQzO2VttGbkSfi1agpAHuTOPH6Thk7Pij
q27fMMHOAuiocg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:35:01 2026 by rpki-client