Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
File: vGW0uk14adXLj5V08PT-7nDrxsU.mft (raw, json)
Hash identifier: 8rF5dLkdvFaeYrCKczCVQzqE6n7Mp4716XJiuPWyIdA=
Subject key identifier: 3B:DD:CE:A6:4F:2D:91:FA:B2:88:17:0A:87:3E:17:CC:9B:0B:89:43
Authority key identifier: BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
Certificate issuer: /CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Certificate serial: 01A183072B20526816C41E428E3500DBE3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
Manifest number: 1ACA
Signing time: Wed 28 Oct 2026 15:00:47 +0000
Manifest this update: Wed 28 Oct 2026 15:00:47 +0000
Manifest next update: Thu 29 Oct 2026 15:00:47 +0000
Files and hashes: 1: QOx2LcItYAde8Bu7yyYezAd_b5U.roa (hash: recLbl2iES5/0aXRvjtkzbHI5bXaE/LjpnXC8P4lC98=)
2: QcKzyCOMPTjAzdtEHWSZIQPXWTY.roa (hash: q6REhdk2/z8f63MlyAEiLr/0oQ0zIK2tSS3WmI/QIxA=)
3: vGW0uk14adXLj5V08PT-7nDrxsU.crl (hash: mOdBwu4q71AZwjOYLsD7STgB/YF9KA93Ev1hl98sv6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:2b:20:52:68:16:c4:1e:42:8e:35:00:db:e3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Validity
Not Before: Oct 28 15:00:47 2026 GMT
Not After : Oct 29 15:00:47 2026 GMT
Subject: CN=3bddcea64f2d91fab288170a873e17cc9b0b8943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:14:cc:ac:ae:d9:cd:d6:a4:79:72:63:58:
d1:5c:8f:bf:fa:b2:9d:99:7b:3b:80:cb:40:30:8c:
2b:52:ad:23:64:51:d3:f3:ed:31:3f:25:c4:e8:41:
8c:91:f5:6a:2b:b7:40:4c:a0:8f:65:e6:4e:f0:16:
ab:94:86:5f:34:b7:75:df:08:17:41:bc:85:37:d7:
cd:5f:13:f2:e2:7f:7b:05:c2:39:32:96:83:31:d4:
98:c7:72:e0:b6:cd:e3:29:c7:d0:70:c7:9c:d2:8f:
c4:5d:c7:3c:5e:a2:30:d2:c2:22:d7:99:01:56:6b:
30:67:7c:2b:e0:3a:2e:0e:b4:15:0e:de:fd:81:18:
bd:8f:4b:ea:56:85:9e:ec:5b:e2:69:20:e0:9e:da:
14:ae:86:79:ad:7d:16:40:b5:e2:9e:1f:95:c4:e9:
29:ff:06:39:c7:a3:d5:32:d8:57:ae:5b:64:c2:2c:
28:14:85:a0:dc:5c:64:66:f7:05:be:93:12:be:49:
1c:f7:db:14:79:2f:7b:22:7a:5d:9f:5f:c4:3a:2a:
ce:c1:0c:4e:fb:e0:0d:fc:ba:0e:22:6b:93:72:45:
82:bb:c6:89:86:6c:12:7d:4e:0a:4c:38:8c:e1:5e:
f1:82:dd:61:ec:ed:e5:40:72:76:42:94:b6:e3:f8:
fc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DD:CE:A6:4F:2D:91:FA:B2:88:17:0A:87:3E:17:CC:9B:0B:89:43
X509v3 Authority Key Identifier:
keyid:BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:57:a0:0d:a4:0f:0f:45:4c:dd:f3:27:b5:42:a2:7c:a0:62:
d5:9e:02:3e:5e:55:a1:d2:76:c4:75:54:bd:86:2c:fd:5e:41:
bf:86:10:a4:1a:83:c9:cc:9d:d6:a3:f9:5e:a0:e0:2f:01:1c:
64:fe:98:cd:e2:b3:9a:45:a8:a5:60:d3:d1:b2:d0:ab:f2:e0:
22:d8:7e:31:45:67:35:e3:f3:bf:c0:96:e5:0c:1a:29:83:1b:
f9:71:f0:fc:02:7d:34:ff:0d:38:90:4d:3d:67:79:14:d7:49:
a7:ab:18:48:4e:b1:78:31:bb:e5:64:e5:04:b1:55:ad:fe:f3:
b0:30:1b:92:04:5f:ed:de:98:e8:79:b1:83:d4:11:34:88:28:
7c:a1:4e:94:36:78:72:59:c6:44:ff:84:be:be:70:70:ce:e8:
03:ab:d9:a4:47:f2:6f:98:6b:87:5b:72:0c:2a:81:5f:01:21:
75:01:1f:87:81:b0:c7:b5:ae:51:ac:67:4c:a9:a1:4f:b9:9d:
36:14:61:56:bb:d2:4d:37:ad:7a:07:14:56:ce:e1:9c:27:b5:
9c:b2:32:35:e2:13:da:81:d0:06:c2:bc:75:98:76:db:e3:d9:
7e:77:f4:b6:35:f4:97:5f:a8:3e:80:76:76:98:af:22:bc:bb:
85:dc:5e:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGDBysgUmgWxB5CjjUA2+P1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNjViNGJhNGQ3ODY5ZDVjYjhmOTU3NGYwZjRmZWVlNzBl
YmM2YzUwHhcNMjYxMDI4MTUwMDQ3WhcNMjYxMDI5MTUwMDQ3WjAzMTEwLwYDVQQD
EygzYmRkY2VhNjRmMmQ5MWZhYjI4ODE3MGE4NzNlMTdjYzliMGI4OTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5wUzKyu2c3WpHlyY1jRXI+/+rKd
mXs7gMtAMIwrUq0jZFHT8+0xPyXE6EGMkfVqK7dATKCPZeZO8BarlIZfNLd13wgX
QbyFN9fNXxPy4n97BcI5MpaDMdSYx3Lgts3jKcfQcMec0o/EXcc8XqIw0sIi15kB
VmswZ3wr4DouDrQVDt79gRi9j0vqVoWe7FviaSDgntoUroZ5rX0WQLXinh+VxOkp
/wY5x6PVMthXrltkwiwoFIWg3FxkZvcFvpMSvkkc99sUeS97Inpdn1/EOirOwQxO
++AN/LoOImuTckWCu8aJhmwSfU4KTDiM4V7xgt1h7O3lQHJ2QpS24/j8VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvdzqZPLZH6sogXCoc+F8ybC4lDMB8GA1UdIwQY
MBaAFLxltLpNeGnVy4+VdPD0/u5w68bFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkdXMHVrMTRhZFhMajVWMDhQVC03bkRyeHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NDIxMDEtNzgwYi00N2FjLTg1N2Qt
ZjllN2NiMDNjNTI3LzEvdkdXMHVrMTRhZFhMajVWMDhQVC03bkRyeHNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NDIxMDEtNzgwYi00N2FjLTg1N2QtZjllN2NiMDNjNTI3
LzEvdkdXMHVrMTRhZFhMajVWMDhQVC03bkRyeHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFegDaQP
D0VM3fMntUKifKBi1Z4CPl5VodJ2xHVUvYYs/V5Bv4YQpBqDycyd1qP5XqDgLwEc
ZP6YzeKzmkWopWDT0bLQq/LgIth+MUVnNePzv8CW5QwaKYMb+XHw/AJ9NP8NOJBN
PWd5FNdJp6sYSE6xeDG75WTlBLFVrf7zsDAbkgRf7d6Y6Hmxg9QRNIgofKFOlDZ4
clnGRP+Evr5wcM7oA6vZpEfyb5hrh1tyDCqBXwEhdQEfh4Gwx7WuUaxnTKmhT7md
NhRhVrvSTTetegcUVs7hnCe1nLIyNeIT2oHQBsK8dZh22+PZfnf0tjX0l1+oPoB2
dpivIry7hdxeCg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 20:28:08 2026 by rpki-client