Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
File: vZyAy-XVeXI0X1-l66NchoieVco.mft (raw, json)
Hash identifier: R1r8kZjJ5S92n5il4UFyQEYTugvplUS6aKtwv6Hqq9Y=
Subject key identifier: 9E:91:B6:3B:47:3A:54:EA:07:78:FB:E2:7B:D8:45:95:E5:50:D3:B0
Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Certificate serial: 019D262836ED56C5015F179284208A0AE930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
Manifest number: 1205
Signing time: Wed 25 Mar 2026 18:01:02 +0000
Manifest this update: Wed 25 Mar 2026 18:01:02 +0000
Manifest next update: Thu 26 Mar 2026 18:01:02 +0000
Files and hashes: 1: C5LrSLcRHuSrJ5qA7Ys4buh2aCk.roa (hash: 6iHK7B3B74ju73Bu4UIi5X39juU33AzJxjN7DE2wqoc=)
2: vZyAy-XVeXI0X1-l66NchoieVco.crl (hash: kzRpWfjR3YDI0IvHrrlDQxU4bwgOH6gffqnyrC5m93c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:36:ed:56:c5:01:5f:17:92:84:20:8a:0a:e9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Validity
Not Before: Mar 25 18:01:02 2026 GMT
Not After : Mar 26 18:01:02 2026 GMT
Subject: CN=9e91b63b473a54ea0778fbe27bd84595e550d3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:73:68:d3:41:ec:63:b1:16:0c:01:f9:a1:ba:
12:a4:75:54:ff:c0:a3:ba:c2:b6:df:87:04:50:c6:
6d:ed:46:02:76:35:75:85:d8:94:1c:3f:02:2d:56:
21:87:d0:73:f9:a4:47:7e:c8:79:43:e5:3d:ff:3e:
38:07:44:24:1c:9b:ba:e8:e7:8d:79:10:f9:d9:11:
47:a9:3b:44:6a:a3:ca:70:92:c3:bf:82:98:0e:a8:
51:9c:1f:6b:43:9e:c4:e9:09:27:af:3c:62:2f:f5:
cd:9a:af:63:85:84:13:cc:4c:2e:ca:29:51:73:f8:
3b:d4:cb:ac:06:af:13:f0:b9:35:f2:f5:fb:2b:9c:
88:22:45:54:91:f4:c6:7b:3d:e6:5e:c1:75:e9:b8:
78:e2:bb:39:f2:70:bb:be:09:fc:20:68:c9:21:2f:
14:75:dd:da:83:cd:cb:9f:dd:4e:34:44:14:59:f6:
fa:9e:be:95:09:7c:21:26:c2:c4:c5:bd:22:bf:25:
d4:08:f0:db:ae:c2:de:ca:33:fd:ee:21:ec:36:15:
ff:6c:0d:8f:80:3e:a3:89:8d:1c:e9:10:0b:72:02:
13:3e:44:67:cf:99:76:42:6a:9d:00:e8:c4:36:a2:
90:26:34:63:05:f1:7c:c5:ad:1b:e5:f2:70:aa:67:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:91:B6:3B:47:3A:54:EA:07:78:FB:E2:7B:D8:45:95:E5:50:D3:B0
X509v3 Authority Key Identifier:
keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8c:b3:2b:27:5f:f9:45:9f:35:8f:f0:c1:1b:c9:45:36:a1:
2f:db:6a:2a:79:da:09:f2:0a:75:b7:70:ae:a6:d8:37:b4:3e:
0e:4b:2f:9a:71:01:e9:99:15:df:62:8d:a4:8d:64:9a:0f:5b:
57:19:d0:1d:f0:cd:1d:dc:5d:cf:be:92:f9:e6:d9:7b:f5:c5:
8d:3b:fc:12:40:c0:71:00:91:f3:01:e2:24:08:b4:43:53:0a:
62:2c:a5:62:1b:14:cf:bb:68:a2:25:e3:5b:69:94:a6:5e:2f:
98:41:f8:01:f6:30:fc:0b:2e:71:46:15:56:16:b1:9a:37:75:
ba:7b:08:8c:ae:3e:d0:0d:4b:fb:ee:29:9e:22:25:ae:20:85:
81:5c:d4:b5:e3:d9:0f:00:d0:07:0e:2f:59:2a:24:95:23:41:
3b:02:cc:78:9c:db:7b:f4:1f:94:1d:b8:63:52:4d:69:44:26:
87:1e:d9:9f:8c:d3:b7:66:8b:11:3a:02:77:fe:c4:a2:f7:48:
bc:32:3c:91:ff:cd:4f:12:05:7f:54:1e:79:ab:43:66:6a:65:
3e:eb:53:cc:95:e4:88:e6:5f:7c:f7:f1:46:c8:e1:ef:79:62:
70:ec:70:19:a8:6d:ce:fa:b8:26:46:8d:d5:7e:a8:d5:e5:65:
65:ee:b4:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKDbtVsUBXxeShCCKCukwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOWM4MGNiZTVkNTc5NzIzNDVmNWZhNWViYTM1Yzg2ODg5
ZTU1Y2EwHhcNMjYwMzI1MTgwMTAyWhcNMjYwMzI2MTgwMTAyWjAzMTEwLwYDVQQD
Eyg5ZTkxYjYzYjQ3M2E1NGVhMDc3OGZiZTI3YmQ4NDU5NWU1NTBkM2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nNo00HsY7EWDAH5oboSpHVU/8Cj
usK234cEUMZt7UYCdjV1hdiUHD8CLVYhh9Bz+aRHfsh5Q+U9/z44B0QkHJu66OeN
eRD52RFHqTtEaqPKcJLDv4KYDqhRnB9rQ57E6QknrzxiL/XNmq9jhYQTzEwuyilR
c/g71MusBq8T8Lk18vX7K5yIIkVUkfTGez3mXsF16bh44rs58nC7vgn8IGjJIS8U
dd3ag83Ln91ONEQUWfb6nr6VCXwhJsLExb0ivyXUCPDbrsLeyjP97iHsNhX/bA2P
gD6jiY0c6RALcgITPkRnz5l2QmqdAOjENqKQJjRjBfF8xa0b5fJwqmd6gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6RtjtHOlTqB3j74nvYRZXlUNOwMB8GA1UdIwQY
MBaAFL2cgMvl1XlyNF9fpeujXIaInlXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iZGNiYzQtNjNiNy00YWU1LTg2ODQt
NjBlN2U0NTM5OWU2LzEvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9iZGNiYzQtNjNiNy00YWU1LTg2ODQtNjBlN2U0NTM5OWU2
LzEvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIyzKydf
+UWfNY/wwRvJRTahL9tqKnnaCfIKdbdwrqbYN7Q+DksvmnEB6ZkV32KNpI1kmg9b
VxnQHfDNHdxdz76S+ebZe/XFjTv8EkDAcQCR8wHiJAi0Q1MKYiylYhsUz7tooiXj
W2mUpl4vmEH4AfYw/AsucUYVVhaxmjd1unsIjK4+0A1L++4pniIlriCFgVzUtePZ
DwDQBw4vWSoklSNBOwLMeJzbe/QflB24Y1JNaUQmhx7Zn4zTt2aLEToCd/7EovdI
vDI8kf/NTxIFf1QeeatDZmplPutTzJXkiOZffPfxRsjh73licOxwGahtzvq4JkaN
1X6o1eVlZe60BA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:16 2026 by rpki-client