Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
File: vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json)
Hash identifier: bnKaIGkH8JvRD2zcZvXCN0iudZlaifzrumsr6cTDcmE=
Subject key identifier: 91:92:36:F2:FD:E4:58:BD:E3:74:89:0A:EA:25:E8:8D:74:2F:76:4D
Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
Certificate issuer: /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Certificate serial: 019D28BB41FC2977A66522BBED542CDFEF60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 06:00:53 +0000
Manifest this update: Thu 26 Mar 2026 06:00:53 +0000
Manifest next update: Fri 27 Mar 2026 06:00:53 +0000
Files and hashes: 1: 2gOMElZpuYjYWwfxZPDkr57xubA.roa (hash: VyukPCJwz31E+u5Ce9cCzwq/Lsn1oqGSgyO+hsnU0ek=)
2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: gqHoIfBg8VbLaHVGkIFerzVSReDfu7m+EcH92cL0YV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:41:fc:29:77:a6:65:22:bb:ed:54:2c:df:ef:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Validity
Not Before: Mar 26 06:00:53 2026 GMT
Not After : Mar 27 06:00:53 2026 GMT
Subject: CN=919236f2fde458bde374890aea25e88d742f764d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4c:57:73:2e:2a:67:dd:bc:60:65:99:fd:8f:
15:f6:3a:70:1f:75:b8:2b:76:14:2e:12:38:da:d7:
72:a0:a7:a2:9d:27:1a:99:ad:f1:a2:69:2c:1b:27:
7c:74:14:c4:56:f6:ea:e9:74:5a:ef:be:d7:bf:20:
9d:59:33:d7:fe:24:0c:98:93:8d:27:6b:01:69:c8:
78:b2:b9:e2:8d:6a:5e:a4:41:5b:75:88:55:86:cb:
e7:ec:9b:ee:56:d9:6d:1f:9c:c8:03:77:e0:6b:7a:
e7:bb:61:3b:0f:15:57:35:97:28:33:62:73:d9:37:
ad:b1:17:55:5d:c8:4b:e5:03:68:c8:03:8b:0c:87:
24:55:ff:a3:3b:72:ce:93:75:cd:d1:1b:e9:68:04:
72:f5:e1:f8:65:cd:10:d8:11:88:52:a7:ef:be:7b:
3d:9f:2a:da:08:40:0e:12:2a:e0:59:a0:c0:84:c2:
f5:cb:77:cb:fa:0d:f2:5b:59:85:91:7a:46:2b:0a:
a0:3f:e9:f9:35:6b:5e:d9:43:8d:83:7a:2b:d3:d6:
1e:36:b3:6a:02:38:b6:21:87:7d:c5:51:5e:0e:50:
87:71:b3:a8:fb:db:67:15:5c:37:75:19:89:8c:00:
45:2a:e3:95:01:0b:69:70:70:b2:64:89:72:a1:21:
76:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:92:36:F2:FD:E4:58:BD:E3:74:89:0A:EA:25:E8:8D:74:2F:76:4D
X509v3 Authority Key Identifier:
keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6e:be:31:4b:d9:33:d8:84:1f:e8:48:12:89:48:26:c6:d7:
dc:32:98:de:74:11:34:c0:4a:fb:87:29:d2:db:cc:fd:bb:c7:
0c:71:d0:f5:36:b4:6e:4e:a1:7a:01:4e:d8:4b:9a:9c:7a:75:
28:f9:01:3e:8b:41:8d:7a:7d:24:81:78:fa:b2:98:09:a1:a9:
cb:0a:45:53:b3:b1:cc:2d:da:47:ae:4d:5a:62:fb:a7:6c:85:
7d:14:d6:52:ba:7e:34:27:08:17:d8:c1:e9:65:b6:9d:4c:e8:
0d:b5:8a:cb:47:8f:b9:8f:60:3e:71:ee:85:2f:5e:51:79:4a:
0b:14:af:d9:9d:5b:82:a9:13:1f:a3:c4:bf:1d:78:cd:48:eb:
7b:20:f3:e5:34:eb:36:48:c7:6e:31:d1:f4:bb:6c:6e:95:5c:
ba:4e:9e:15:59:33:70:f3:8a:c4:19:d3:cc:00:39:31:18:9e:
fc:cc:8d:87:17:5c:fa:8b:42:9e:7f:38:95:77:ec:8b:32:17:
35:e4:64:87:aa:77:5f:94:d7:83:d8:98:d6:42:8f:27:bd:be:
4f:19:cd:3b:83:8d:34:78:45:f6:c7:42:97:c0:59:17:89:10:
89:9a:78:e1:f2:21:fe:b7:de:20:51:6d:f6:09:c5:a6:50:62:
d4:16:b7:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou0H8KXemZSK77VQs3+9gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZGI2YTRlZDM5M2Q4YTNiNzUwN2Y5NmEzOGJlZTBjNGM4
YjQ3N2YwHhcNMjYwMzI2MDYwMDUzWhcNMjYwMzI3MDYwMDUzWjAzMTEwLwYDVQQD
Eyg5MTkyMzZmMmZkZTQ1OGJkZTM3NDg5MGFlYTI1ZTg4ZDc0MmY3NjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10xXcy4qZ928YGWZ/Y8V9jpwH3W4
K3YULhI42tdyoKeinScama3xomksGyd8dBTEVvbq6XRa777XvyCdWTPX/iQMmJON
J2sBach4srnijWpepEFbdYhVhsvn7JvuVtltH5zIA3fga3rnu2E7DxVXNZcoM2Jz
2TetsRdVXchL5QNoyAOLDIckVf+jO3LOk3XN0RvpaARy9eH4Zc0Q2BGIUqfvvns9
nyraCEAOEirgWaDAhML1y3fL+g3yW1mFkXpGKwqgP+n5NWte2UONg3or09YeNrNq
Aji2IYd9xVFeDlCHcbOo+9tnFVw3dRmJjABFKuOVAQtpcHCyZIlyoSF2CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGSNvL95Fi943SJCuol6I10L3ZNMB8GA1UdIwQY
MBaAFL7bak7Tk9ijt1B/lqOL7gxMi0d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kNDYzNWYtMjE5NS00ZDk0LThkMTYt
NDcwYTkzYjNkM2U3LzEvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9kNDYzNWYtMjE5NS00ZDk0LThkMTYtNDcwYTkzYjNkM2U3
LzEvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnW6+MUvZ
M9iEH+hIEolIJsbX3DKY3nQRNMBK+4cp0tvM/bvHDHHQ9Ta0bk6hegFO2EuanHp1
KPkBPotBjXp9JIF4+rKYCaGpywpFU7OxzC3aR65NWmL7p2yFfRTWUrp+NCcIF9jB
6WW2nUzoDbWKy0ePuY9gPnHuhS9eUXlKCxSv2Z1bgqkTH6PEvx14zUjreyDz5TTr
NkjHbjHR9LtsbpVcuk6eFVkzcPOKxBnTzAA5MRie/MyNhxdc+otCnn84lXfsizIX
NeRkh6p3X5TXg9iY1kKPJ72+TxnNO4ONNHhF9sdCl8BZF4kQiZp44fIh/rfeIFFt
9gnFplBi1Ba3Rw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:47 2026 by rpki-client