Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json)
Hash identifier: yA9r05JBuviae0pkXgBQS2xZoV/x5Pr7wBSjaUxhkI8=
Subject key identifier: 1C:B2:E0:E2:8E:0F:A1:C5:21:25:77:5D:CE:BA:8E:A6:B1:31:0F:88
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 01A0E0CF178DA6F0BFB995438DE7CEDFCCDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
Manifest number: 1A76
Signing time: Sun 27 Sep 2026 03:01:03 +0000
Manifest this update: Sun 27 Sep 2026 03:01:03 +0000
Manifest next update: Mon 28 Sep 2026 03:01:03 +0000
Files and hashes: 1: VJGlReXG5W-ZR47PVyvqWZdf0xI.roa (hash: wBxca4kCkRMoBMcjG9PQpXCJfip6KTb7TlGSlembBvo=)
2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: sjYJirj8942b+yI+URRN1jcaNGqI0NhYU6MEbZoZRb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:17:8d:a6:f0:bf:b9:95:43:8d:e7:ce:df:cc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: Sep 27 03:01:03 2026 GMT
Not After : Sep 28 03:01:03 2026 GMT
Subject: CN=1cb2e0e28e0fa1c52125775dceba8ea6b1310f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:a2:4c:2a:f0:44:7b:04:72:cd:03:86:ea:
79:15:c6:dc:5b:d5:15:94:c9:c5:04:8c:a3:1f:d1:
ae:70:1f:75:60:93:92:87:90:6c:ae:5f:51:b4:f5:
45:78:0a:e3:ec:33:52:c5:69:30:93:18:5e:ec:ad:
48:93:06:eb:c9:eb:8c:71:93:cd:85:70:28:a6:67:
b6:6d:c0:91:be:35:99:dc:8e:4d:0a:16:53:75:55:
61:f5:56:0f:eb:76:45:8c:c9:c6:f7:a9:3c:42:23:
bb:56:e2:a1:4e:41:31:88:22:93:1e:af:26:a2:c7:
44:f4:db:64:a2:7a:f2:d5:38:79:ac:78:db:e2:e6:
7d:03:90:33:bc:f7:46:7c:4a:46:cb:ac:dc:d1:34:
d0:fd:df:1e:97:b5:23:f1:60:5d:96:9d:21:d8:52:
d4:fc:d6:e2:9f:84:f1:1f:23:44:2d:df:e1:24:07:
87:8a:84:a2:e7:7b:1e:6b:43:43:f5:dd:05:c4:d7:
00:f5:a4:24:42:85:33:2f:b2:9e:46:a5:52:12:f0:
50:a5:07:16:f4:66:50:37:a2:78:70:7a:86:ae:30:
e8:df:d9:a4:c8:2f:7a:13:cd:30:43:0b:85:c5:8c:
f3:20:35:ca:1d:03:22:56:90:9e:4b:b7:d9:1c:41:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B2:E0:E2:8E:0F:A1:C5:21:25:77:5D:CE:BA:8E:A6:B1:31:0F:88
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:cd:3b:1b:dc:cb:08:42:cf:0d:10:fe:7f:cf:5c:0b:79:c9:
cf:f7:aa:ef:27:91:3c:35:59:97:15:c0:7b:be:c3:12:1e:ba:
36:a2:c1:5a:72:f4:ba:00:59:3b:84:a6:6c:53:be:68:90:5d:
7d:bc:77:37:09:d6:25:f6:ee:d9:a8:8a:a8:b1:68:98:dc:b4:
4b:04:19:60:99:6c:d6:2d:ef:79:9b:db:8f:8f:60:ac:74:fc:
e0:8d:66:cb:2c:bf:30:ad:e3:d3:c0:20:d9:7f:9a:36:96:3a:
44:65:50:3e:6d:72:b6:d2:69:f0:e7:a3:fb:75:3b:85:9c:f0:
02:b6:4d:b3:87:08:dc:4d:5b:a4:40:9b:4f:f5:26:b0:dc:08:
31:80:4e:57:94:31:7c:a6:c8:ae:36:6d:d4:07:7c:db:73:1a:
ef:96:84:de:e9:7c:a9:a2:01:32:cb:80:7b:de:41:f7:08:8c:
e7:4c:00:ae:ac:e5:df:91:6e:63:cc:43:6f:b9:1f:8b:b7:53:
dd:1d:4a:a1:45:87:58:8c:40:fd:cb:93:21:3a:5e:d9:e6:f3:
e5:6e:b7:7c:b0:50:3f:8a:bc:80:07:d6:68:ab:7f:ab:5e:6f:
aa:04:e9:2d:86:a2:53:50:62:e9:76:95:93:e0:40:0b:13:f8:
2d:61:04:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgzxeNpvC/uZVDjefO38zbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMWQ1OTc0YjRlNTk5Y2E3MmRjYzRkYWMwNjZkNzcxNDIw
MmVmYzkwHhcNMjYwOTI3MDMwMTAzWhcNMjYwOTI4MDMwMTAzWjAzMTEwLwYDVQQD
EygxY2IyZTBlMjhlMGZhMWM1MjEyNTc3NWRjZWJhOGVhNmIxMzEwZjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqmiTCrwRHsEcs0Dhup5FcbcW9UV
lMnFBIyjH9GucB91YJOSh5Bsrl9RtPVFeArj7DNSxWkwkxhe7K1IkwbryeuMcZPN
hXAopme2bcCRvjWZ3I5NChZTdVVh9VYP63ZFjMnG96k8QiO7VuKhTkExiCKTHq8m
osdE9Ntkonry1Th5rHjb4uZ9A5AzvPdGfEpGy6zc0TTQ/d8el7Uj8WBdlp0h2FLU
/Nbin4TxHyNELd/hJAeHioSi53sea0ND9d0FxNcA9aQkQoUzL7KeRqVSEvBQpQcW
9GZQN6J4cHqGrjDo39mkyC96E80wQwuFxYzzIDXKHQMiVpCeS7fZHEFVbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByy4OKOD6HFISV3Xc66jqaxMQ+IMB8GA1UdIwQY
MBaAFL8dWXS05ZnKctzE2sBm13FCAu/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdngxWmRMVGxtY3B5M01UYXdHYlhjVUlDNzhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85NGEwNjItODUxMC00NGQ1LTllNGIt
YzMyYTlhMDg1YWUwLzEvdngxWmRMVGxtY3B5M01UYXdHYlhjVUlDNzhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85NGEwNjItODUxMC00NGQ1LTllNGItYzMyYTlhMDg1YWUw
LzEvdngxWmRMVGxtY3B5M01UYXdHYlhjVUlDNzhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPs07G9zL
CELPDRD+f89cC3nJz/eq7yeRPDVZlxXAe77DEh66NqLBWnL0ugBZO4SmbFO+aJBd
fbx3NwnWJfbu2aiKqLFomNy0SwQZYJls1i3veZvbj49grHT84I1myyy/MK3j08Ag
2X+aNpY6RGVQPm1yttJp8Oej+3U7hZzwArZNs4cI3E1bpECbT/UmsNwIMYBOV5Qx
fKbIrjZt1Ad823Ma75aE3ul8qaIBMsuAe95B9wiM50wArqzl35FuY8xDb7kfi7dT
3R1KoUWHWIxA/cuTITpe2ebz5W63fLBQP4q8gAfWaKt/q15vqgTpLYaiU1Bi6XaV
k+BACxP4LWEEUw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:10:25 2026 by rpki-client