Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
File: vf3CTv25YU3JPpd3TOicHJcw5mU.mft (raw, json)
Hash identifier: 3hZ6pXnojjop1YkiHE5MLKK0fPYNpoaYZ3ki2hqi5Jg=
Subject key identifier: BC:3F:F0:41:77:00:B5:AF:1B:AD:41:01:3A:BC:DD:3F:A3:FF:53:DD
Authority key identifier: BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
Certificate issuer: /CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Certificate serial: 019D262822A5A10FAA79E0A52AECFBD6EAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
Manifest number: 01E9
Signing time: Wed 25 Mar 2026 18:00:57 +0000
Manifest this update: Wed 25 Mar 2026 18:00:57 +0000
Manifest next update: Thu 26 Mar 2026 18:00:57 +0000
Files and hashes: 1: gAWk_30h7y4VaoOZxcAdDFowjFc.roa (hash: odqu0T0Eb3GJ36/dwAalvTu2Dwy1IIPBya2kP6/fxjk=)
2: vf3CTv25YU3JPpd3TOicHJcw5mU.crl (hash: AHKxnOMsdIqWi32iEtmEJvKO1gnvs2Y+7p60WCgvFzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:22:a5:a1:0f:aa:79:e0:a5:2a:ec:fb:d6:ea:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Validity
Not Before: Mar 25 18:00:57 2026 GMT
Not After : Mar 26 18:00:57 2026 GMT
Subject: CN=bc3ff0417700b5af1bad41013abcdd3fa3ff53dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:9f:01:a0:17:ce:50:dd:30:9f:23:24:c3:
94:fb:21:cd:29:8f:6e:b3:bf:e4:43:63:ae:a8:41:
ae:7f:84:06:9b:89:ff:ba:53:fb:92:2e:94:34:63:
86:ed:06:1c:79:56:b5:09:0c:f3:f9:e5:0d:33:78:
94:7c:ce:87:15:8e:11:09:76:39:13:b4:71:ba:4a:
c3:3c:28:32:33:a1:9f:6f:d4:e4:79:84:32:cd:38:
6d:78:20:7b:3d:de:71:ce:56:b0:67:17:1f:bf:5a:
e5:52:37:1a:1a:0d:a0:de:0a:e3:ac:b1:86:00:17:
c5:60:f8:2c:84:9b:1c:02:92:c6:53:5c:a0:d2:58:
1d:a1:29:9e:9b:fd:29:32:a8:0b:55:31:6a:9d:92:
3b:4b:b7:6f:19:5b:8a:f2:ef:f3:22:49:24:76:43:
ff:7e:5a:4f:2b:7c:03:96:0d:0d:93:75:b5:d7:97:
c2:14:05:71:d7:7c:29:dc:58:ca:e5:6e:d7:9e:33:
ba:11:41:93:82:c0:77:bb:df:95:04:80:e7:1b:23:
31:54:64:19:67:a6:11:72:c8:11:20:4d:9d:38:01:
18:85:fe:41:af:db:c9:94:d1:4f:43:41:c6:92:20:
b4:d2:c7:86:bf:27:78:4f:35:af:b4:46:69:09:d4:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3F:F0:41:77:00:B5:AF:1B:AD:41:01:3A:BC:DD:3F:A3:FF:53:DD
X509v3 Authority Key Identifier:
keyid:BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a4:ce:ec:25:c7:a9:52:40:61:f4:ed:a9:3c:00:e9:03:e4:
35:77:8b:b3:34:ce:a3:af:ea:a2:3a:83:32:d0:9a:49:35:37:
19:b2:4f:e6:5c:51:32:ba:c1:72:4b:5c:a0:7a:3c:f5:c0:82:
40:0a:ee:71:50:0a:f7:a7:ea:06:b0:15:ac:a4:dc:60:bc:e9:
e9:c1:cf:89:3b:19:17:f2:ee:ac:90:f5:e8:00:ff:cf:ce:de:
ab:b2:04:29:ed:1f:0a:16:3a:fe:b6:2f:24:d7:6f:00:70:bc:
d4:02:ef:84:58:4c:a8:e5:de:08:75:f4:c3:3e:43:04:2c:18:
b4:bb:1d:23:c4:29:8c:3e:d6:45:fe:74:b5:fa:ee:13:a8:d3:
05:dd:32:b9:3b:8c:2a:d3:d4:db:7c:eb:97:dd:e8:91:00:fe:
23:3c:b2:42:fe:8f:b3:e5:2d:e2:c4:e7:e3:8f:9e:92:db:a6:
a3:13:87:6e:12:5f:46:8a:7b:4e:50:76:df:f7:2a:cb:f5:d3:
ef:0d:03:f5:40:a7:03:62:31:4c:cb:b7:ed:27:4f:87:f3:77:
35:dc:cc:b8:8b:39:bf:27:05:8e:7a:7d:c3:29:88:18:68:3d:
7c:d1:da:05:c5:f3:5f:a0:b6:2a:cd:97:ea:6f:0c:27:b6:5b:
8c:af:e1:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKCKloQ+qeeClKuz71urzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmRjMjRlZmRiOTYxNGRjOTNlOTc3NzRjZTg5YzFjOTcz
MGU2NjUwHhcNMjYwMzI1MTgwMDU3WhcNMjYwMzI2MTgwMDU3WjAzMTEwLwYDVQQD
EyhiYzNmZjA0MTc3MDBiNWFmMWJhZDQxMDEzYWJjZGQzZmEzZmY1M2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6CfAaAXzlDdMJ8jJMOU+yHNKY9u
s7/kQ2OuqEGuf4QGm4n/ulP7ki6UNGOG7QYceVa1CQzz+eUNM3iUfM6HFY4RCXY5
E7RxukrDPCgyM6Gfb9TkeYQyzThteCB7Pd5xzlawZxcfv1rlUjcaGg2g3grjrLGG
ABfFYPgshJscApLGU1yg0lgdoSmem/0pMqgLVTFqnZI7S7dvGVuK8u/zIkkkdkP/
flpPK3wDlg0Nk3W115fCFAVx13wp3FjK5W7XnjO6EUGTgsB3u9+VBIDnGyMxVGQZ
Z6YRcsgRIE2dOAEYhf5Br9vJlNFPQ0HGkiC00seGvyd4TzWvtEZpCdSVwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLw/8EF3ALWvG61BATq83T+j/1PdMB8GA1UdIwQY
MBaAFL39wk79uWFNyT6Xd0zonByXMOZlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmYzQ1R2MjVZVTNKUHBkM1RPaWNISmN3NW1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85Nzg1NDctZTEwMS00ZjRhLTk1Zjct
NGYzYTUzNDNhMDRmLzEvdmYzQ1R2MjVZVTNKUHBkM1RPaWNISmN3NW1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85Nzg1NDctZTEwMS00ZjRhLTk1ZjctNGYzYTUzNDNhMDRm
LzEvdmYzQ1R2MjVZVTNKUHBkM1RPaWNISmN3NW1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaTO7CXH
qVJAYfTtqTwA6QPkNXeLszTOo6/qojqDMtCaSTU3GbJP5lxRMrrBcktcoHo89cCC
QArucVAK96fqBrAVrKTcYLzp6cHPiTsZF/LurJD16AD/z87eq7IEKe0fChY6/rYv
JNdvAHC81ALvhFhMqOXeCHX0wz5DBCwYtLsdI8QpjD7WRf50tfruE6jTBd0yuTuM
KtPU23zrl93okQD+IzyyQv6Ps+Ut4sTn44+ektumoxOHbhJfRop7TlB23/cqy/XT
7w0D9UCnA2IxTMu37SdPh/N3NdzMuIs5vycFjnp9wymIGGg9fNHaBcXzX6C2Ks2X
6m8MJ7ZbjK/hSg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:41 2026 by rpki-client