Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
File: bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft (raw, json)
Hash identifier: rZFOJnMgWttpYOy1byXV1XyyzcWRtmIaEPnGlY+jGT0=
Subject key identifier: 91:26:28:E1:D0:28:7B:E4:8E:A1:FC:7D:2C:71:49:6F:BB:72:0F:7B
Authority key identifier: 6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54
Certificate issuer: /CN=6d5700916f90983bd8e89cd05fe629ec183bfa54
Certificate serial: 019D27049F098D3A5544A45E3AF24E53B445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
Manifest number: 0CF0
Signing time: Wed 25 Mar 2026 22:01:47 +0000
Manifest this update: Wed 25 Mar 2026 22:01:47 +0000
Manifest next update: Thu 26 Mar 2026 22:01:47 +0000
Files and hashes: 1: bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl (hash: 9OU1yUUVPf3o396TweM2l3BnbuZRCU88b1DU/ICOOto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:9f:09:8d:3a:55:44:a4:5e:3a:f2:4e:53:b4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5700916f90983bd8e89cd05fe629ec183bfa54
Validity
Not Before: Mar 25 22:01:47 2026 GMT
Not After : Mar 26 22:01:47 2026 GMT
Subject: CN=912628e1d0287be48ea1fc7d2c71496fbb720f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:39:19:ab:e2:91:4f:c6:af:b8:75:d4:90:
27:b6:f3:e7:a0:75:06:f2:d5:89:18:44:3a:bf:ab:
18:64:17:4c:11:30:ec:a2:c1:2a:22:3a:cf:95:c9:
67:cd:0d:2e:b1:42:07:29:81:55:ee:2c:a1:d9:81:
34:00:bd:2a:df:33:22:0e:3e:5c:0e:a0:c2:6e:cc:
15:00:9e:29:b1:1d:29:1e:4a:63:f3:90:0a:01:e6:
39:29:93:94:fa:cc:4f:80:5d:19:4f:a2:15:eb:de:
90:9e:43:aa:5c:33:0a:c5:fd:a2:eb:44:77:03:f9:
1c:03:59:a1:e9:8b:eb:41:2a:20:70:34:1d:cc:0c:
92:9d:d7:d9:f4:1d:3c:f8:29:ad:a5:28:6a:92:db:
85:3a:e3:07:cd:da:d2:33:b5:ce:14:bb:f1:5b:b4:
8e:cf:0c:93:87:08:1b:79:66:b9:32:70:1d:ef:e2:
c4:3b:69:d7:fa:96:f9:75:ee:b4:20:ad:8d:6e:fc:
14:a3:be:f8:d2:3a:ca:53:ee:10:3f:b0:2b:c4:c6:
3c:14:af:7c:d2:88:b8:09:a9:99:17:73:0b:20:40:
15:6e:01:24:61:ec:43:0e:7d:6b:b8:9f:5c:48:b3:
61:82:e0:c7:62:23:71:11:5d:03:88:6a:80:ac:41:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:26:28:E1:D0:28:7B:E4:8E:A1:FC:7D:2C:71:49:6F:BB:72:0F:7B
X509v3 Authority Key Identifier:
keyid:6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:05:bf:7d:4d:c0:9a:53:63:b8:63:74:7b:ad:7a:0a:5f:ea:
99:b7:c9:c2:0b:d2:47:b3:1c:41:b0:80:33:d3:91:d5:02:65:
a9:23:63:a6:1b:f8:2d:35:dd:9e:0e:62:fb:bd:c4:b8:f9:85:
51:ae:b5:a3:73:a5:aa:83:a2:cd:82:41:51:88:76:ed:ab:46:
d3:ba:df:3d:d6:d0:59:97:a4:39:57:ff:b7:fe:83:5b:8f:1f:
a4:02:52:6b:a4:85:31:e5:66:de:db:7e:4a:10:f6:2a:d4:6b:
a0:2d:07:d7:e9:62:bd:ea:03:d5:84:fe:62:d0:2f:38:87:23:
4a:ae:5d:c4:08:c5:2f:c7:82:4d:1c:0f:7c:1e:58:c3:db:35:
0b:8a:cb:dd:60:5e:87:a4:e1:06:08:22:79:19:18:64:d3:af:
78:5b:53:d2:3c:0a:96:c0:a7:dd:9c:8c:06:55:69:05:f0:c1:
49:60:7d:b6:73:47:8f:00:9d:ae:5e:55:84:4f:b2:e3:5c:09:
ed:84:40:8e:9e:f6:80:dd:04:00:95:5c:d1:82:92:6b:04:af:
0c:78:da:a2:31:b5:f1:1c:a9:e0:0a:5e:b2:55:1c:db:a1:a2:
44:46:c0:70:2d:e1:fc:eb:2b:88:93:f6:aa:57:a8:68:37:ad:
43:ed:82:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBJ8JjTpVRKReOvJOU7RFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNTcwMDkxNmY5MDk4M2JkOGU4OWNkMDVmZTYyOWVjMTgz
YmZhNTQwHhcNMjYwMzI1MjIwMTQ3WhcNMjYwMzI2MjIwMTQ3WjAzMTEwLwYDVQQD
Eyg5MTI2MjhlMWQwMjg3YmU0OGVhMWZjN2QyYzcxNDk2ZmJiNzIwZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRo5GavikU/Gr7h11JAntvPnoHUG
8tWJGEQ6v6sYZBdMETDsosEqIjrPlclnzQ0usUIHKYFV7iyh2YE0AL0q3zMiDj5c
DqDCbswVAJ4psR0pHkpj85AKAeY5KZOU+sxPgF0ZT6IV696QnkOqXDMKxf2i60R3
A/kcA1mh6YvrQSogcDQdzAySndfZ9B08+CmtpShqktuFOuMHzdrSM7XOFLvxW7SO
zwyThwgbeWa5MnAd7+LEO2nX+pb5de60IK2NbvwUo7740jrKU+4QP7ArxMY8FK98
0oi4CamZF3MLIEAVbgEkYexDDn1ruJ9cSLNhguDHYiNxEV0DiGqArEGchQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEmKOHQKHvkjqH8fSxxSW+7cg97MB8GA1UdIwQY
MBaAFG1XAJFvkJg72Oic0F/mKewYO/pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlZjQWtXLVFtRHZZNkp6UVgtWXA3Qmc3LWxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85YmZkYjYtMDhiNy00YjFkLThhODgt
OTI2YjM0ODE0MTMwLzEvYlZjQWtXLVFtRHZZNkp6UVgtWXA3Qmc3LWxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi85YmZkYjYtMDhiNy00YjFkLThhODgtOTI2YjM0ODE0MTMw
LzEvYlZjQWtXLVFtRHZZNkp6UVgtWXA3Qmc3LWxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqAW/fU3A
mlNjuGN0e616Cl/qmbfJwgvSR7McQbCAM9OR1QJlqSNjphv4LTXdng5i+73EuPmF
Ua61o3OlqoOizYJBUYh27atG07rfPdbQWZekOVf/t/6DW48fpAJSa6SFMeVm3tt+
ShD2KtRroC0H1+liveoD1YT+YtAvOIcjSq5dxAjFL8eCTRwPfB5Yw9s1C4rL3WBe
h6ThBggieRkYZNOveFtT0jwKlsCn3ZyMBlVpBfDBSWB9tnNHjwCdrl5VhE+y41wJ
7YRAjp72gN0EAJVc0YKSawSvDHjaojG18Ryp4ApeslUc26GiREbAcC3h/OsriJP2
qleoaDetQ+2CaA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:41 2026 by rpki-client