Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
File: vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft (raw, json)
Hash identifier: Q4m+Agc6Sd4q9Piceha2xGJFZfqJOH6I9SbVVdYpMOA=
Subject key identifier: 1C:4F:A9:12:5B:9E:53:4C:CE:D7:F4:40:1E:CB:54:86:29:DF:2C:62
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 019D28BB4A8F8FE1567AFD89F25DC6BC3FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
Manifest number: 18E8
Signing time: Thu 26 Mar 2026 06:00:56 +0000
Manifest this update: Thu 26 Mar 2026 06:00:56 +0000
Manifest next update: Fri 27 Mar 2026 06:00:56 +0000
Files and hashes: 1: 8TA7t7HrUBV_MAyX5n-91LJHqkY.roa (hash: /S+gSBwTzcXM3LZzCzX/nuyybzqrF+WlaDQm17WzHkw=)
2: QDmIW26JPLiCQPg0QkWFjA_yXvQ.roa (hash: lNF+nwAKLXvKgpTrABWuuKjeHqZ2vPmIOlH0x80veow=)
3: qxoyNmMUKUfyFkVyuAGZAM4YuT8.roa (hash: 32HDKvNSzbAK7fB6zWT8id6Yo7qRMY5K04pfmrZY4Ms=)
4: vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl (hash: kcsKFlDPI8oNjddTbDvgtpVbTM0lkVUZlD3CLUCt8B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:4a:8f:8f:e1:56:7a:fd:89:f2:5d:c6:bc:3f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Mar 26 06:00:56 2026 GMT
Not After : Mar 27 06:00:56 2026 GMT
Subject: CN=1c4fa9125b9e534cced7f4401ecb548629df2c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:27:cc:0e:54:79:df:1c:bb:be:6e:e3:b4:
db:f3:b1:b0:12:a5:7e:70:17:51:73:5a:06:45:cc:
8c:33:b1:78:a8:08:94:b9:31:5c:af:c9:38:e5:10:
0b:a8:ec:80:2b:4f:17:bf:9e:a0:ff:6c:ad:76:a6:
85:1c:d6:33:3b:e7:17:78:27:4d:6c:96:5e:37:a4:
5b:c4:38:cb:0c:87:05:ca:b6:c4:94:04:44:74:f1:
32:7c:68:6f:1b:cb:ba:11:bd:4a:08:85:2e:a4:2b:
74:e7:32:63:92:b5:53:9d:19:3b:4a:b4:36:06:9f:
32:68:20:39:f9:9a:12:4c:1d:f2:fd:85:6a:67:9e:
d3:f1:de:48:8a:f2:fd:8d:0f:ed:04:3b:34:d8:00:
97:9e:21:52:2d:0c:b0:4c:29:95:2e:8e:7b:50:95:
db:2c:95:b9:58:66:c0:40:c6:3f:e8:16:3f:5d:61:
7a:c2:94:71:73:2a:76:c5:70:45:ea:2c:5c:a8:4f:
69:7b:b0:75:e3:1a:21:d0:2a:7e:4a:a9:1d:98:ed:
ec:58:63:9d:49:56:dd:30:31:18:af:63:c0:17:8f:
80:72:4c:53:da:8d:2e:50:f0:45:69:96:02:ae:85:
9e:a7:fc:53:df:65:00:e9:e0:65:b1:bf:49:ff:66:
dd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4F:A9:12:5B:9E:53:4C:CE:D7:F4:40:1E:CB:54:86:29:DF:2C:62
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:db:f4:7a:11:70:3e:c8:0f:ac:75:a5:69:43:17:a3:8f:c2:
a5:dd:f4:0f:d8:93:a4:21:76:02:08:bc:33:e2:a7:64:35:40:
29:5e:8a:06:e7:86:7a:99:e1:62:cf:10:ec:0a:c6:dd:1b:d4:
a8:af:e0:7e:83:91:16:0c:f7:52:67:08:b2:9e:29:2a:30:18:
2d:0c:99:e5:af:2b:4e:07:34:8a:71:f0:1f:b4:87:c3:2e:67:
98:95:8a:32:2d:77:97:ca:b5:23:84:72:e3:1a:c5:91:64:d0:
4d:52:d0:c3:5d:b6:ad:32:e3:da:5c:ff:a9:6e:6d:53:d7:1b:
40:e8:e9:c2:9d:c3:1a:bf:14:da:4d:2c:3a:22:55:46:2d:df:
02:89:eb:85:b0:32:13:09:f2:fe:e8:3f:c3:a8:3b:e2:aa:ba:
5a:b3:33:18:df:eb:02:ee:8b:ff:b3:72:31:51:63:71:b1:3a:
96:ea:95:dc:a4:70:82:7f:86:17:12:73:42:05:8e:4c:4a:6a:
46:5d:65:21:a8:e7:2f:d3:52:b2:8a:22:82:a7:4e:40:f3:3b:
da:d2:0d:f5:de:b5:1c:16:7c:6c:e6:47:bc:96:8d:f2:49:f5:
ec:5c:ee:fe:3f:86:78:e3:24:79:c3:6e:86:b4:75:e3:b3:e9:
b2:4c:be:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou0qPj+FWev2J8l3GvD/1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDI0NDIxNGQ3NjQ2OGQzZmI3MmFiYWQxODkyZWYyM2Rl
ZGU5NzgwHhcNMjYwMzI2MDYwMDU2WhcNMjYwMzI3MDYwMDU2WjAzMTEwLwYDVQQD
EygxYzRmYTkxMjViOWU1MzRjY2VkN2Y0NDAxZWNiNTQ4NjI5ZGYyYzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHsnzA5Ued8cu75u47Tb87GwEqV+
cBdRc1oGRcyMM7F4qAiUuTFcr8k45RALqOyAK08Xv56g/2ytdqaFHNYzO+cXeCdN
bJZeN6RbxDjLDIcFyrbElAREdPEyfGhvG8u6Eb1KCIUupCt05zJjkrVTnRk7SrQ2
Bp8yaCA5+ZoSTB3y/YVqZ57T8d5IivL9jQ/tBDs02ACXniFSLQywTCmVLo57UJXb
LJW5WGbAQMY/6BY/XWF6wpRxcyp2xXBF6ixcqE9pe7B14xoh0Cp+SqkdmO3sWGOd
SVbdMDEYr2PAF4+AckxT2o0uUPBFaZYCroWep/xT32UA6eBlsb9J/2bddwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxPqRJbnlNMztf0QB7LVIYp3yxiMB8GA1UdIwQY
MBaAFL3SRCFNdkaNP7cqutGJLvI97el4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYt
NDZhNDNlZjAyMjFiLzEvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYtNDZhNDNlZjAyMjFi
LzEvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNv0ehFw
PsgPrHWlaUMXo4/Cpd30D9iTpCF2Agi8M+KnZDVAKV6KBueGepnhYs8Q7ArG3RvU
qK/gfoORFgz3UmcIsp4pKjAYLQyZ5a8rTgc0inHwH7SHwy5nmJWKMi13l8q1I4Ry
4xrFkWTQTVLQw122rTLj2lz/qW5tU9cbQOjpwp3DGr8U2k0sOiJVRi3fAonrhbAy
Ewny/ug/w6g74qq6WrMzGN/rAu6L/7NyMVFjcbE6luqV3KRwgn+GFxJzQgWOTEpq
Rl1lIajnL9NSsooigqdOQPM72tIN9d61HBZ8bOZHvJaN8kn17Fzu/j+GeOMkecNu
hrR147Ppsky+hA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:01:44 2026 by rpki-client