Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
File: vP76Crl0AEjYO0idnKTgKOD1z-8.mft (raw, json)
Hash identifier: G+f28Lu2cJAEFu2dq16NXlPsQW1TvIYk7w2RAZUmlWg=
Subject key identifier: 91:F2:65:6F:FF:4B:79:FB:37:B8:74:10:07:26:33:7E:6A:CA:9D:0C
Authority key identifier: BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
Certificate issuer: /CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Certificate serial: 019D25BA01C9E17BDAC8F20272B4AFAD9FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
Manifest number: 13E3
Signing time: Wed 25 Mar 2026 16:00:40 +0000
Manifest this update: Wed 25 Mar 2026 16:00:40 +0000
Manifest next update: Thu 26 Mar 2026 16:00:40 +0000
Files and hashes: 1: AuEY_lhsQ1reVE3aekx3vo2MXuw.roa (hash: 8nzWp+KuBZnVHqZNnr3zfpd8+GWRxSiubDowltaN1ZQ=)
2: vP76Crl0AEjYO0idnKTgKOD1z-8.crl (hash: j2RYw21qDwzZgZGThHHNgpUWkw2wfG+j0ztrSB24o5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:01:c9:e1:7b:da:c8:f2:02:72:b4:af:ad:9f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Validity
Not Before: Mar 25 16:00:40 2026 GMT
Not After : Mar 26 16:00:40 2026 GMT
Subject: CN=91f2656fff4b79fb37b874100726337e6aca9d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:96:2e:79:11:9a:bb:d7:6b:88:ed:d2:8d:
14:86:b1:15:1e:6d:ee:36:e8:85:00:8f:6c:08:47:
f5:30:ad:c5:41:c7:fb:a5:0b:6c:34:a0:84:a3:a0:
3b:08:6c:90:cc:09:51:e4:8d:ed:ea:16:5f:da:dd:
86:20:0b:d3:10:3f:bf:f4:8a:b8:c7:9e:cb:8b:12:
ae:bf:1f:91:ae:9c:72:cf:0d:30:c7:a5:24:39:60:
63:6a:93:32:fd:1e:9e:8f:02:2f:e4:e1:98:eb:18:
54:d8:d4:e9:2f:31:19:f8:62:d7:94:2e:e6:83:ee:
92:d8:71:12:91:9a:84:19:36:97:8f:27:fc:e4:96:
01:5b:bb:74:38:ac:18:bd:45:67:a4:73:49:0a:3c:
c4:d7:63:c4:66:21:3c:d9:8e:57:b8:0b:7d:27:9c:
38:0a:54:d0:b3:56:d6:0b:74:b6:57:9b:f4:b9:7d:
c4:b6:57:95:59:13:14:ee:a9:1e:3a:92:a8:ac:23:
bc:d3:3e:f5:4a:37:eb:b5:68:88:71:59:c4:2a:6a:
19:e0:a2:99:e0:ba:55:04:49:f1:d9:95:70:62:ab:
33:cb:e5:61:00:63:17:a4:20:02:76:7f:e5:61:60:
a6:bf:02:21:93:a6:fc:b3:86:2b:9a:fc:93:99:c8:
fe:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F2:65:6F:FF:4B:79:FB:37:B8:74:10:07:26:33:7E:6A:CA:9D:0C
X509v3 Authority Key Identifier:
keyid:BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d9:a3:a1:40:8f:5e:f6:94:af:c2:d1:78:ae:21:45:88:e1:
f4:8c:f2:d5:e4:ce:ad:a5:cb:09:68:7b:8f:43:81:8f:20:21:
51:89:39:cb:05:6f:0e:b3:41:f4:91:cb:69:f5:96:7e:10:36:
46:e6:1c:ff:26:fe:c2:0c:62:64:1b:32:f1:71:4b:e0:6b:ff:
43:bb:3c:69:54:52:6b:f1:5c:eb:0e:0d:2c:2c:65:d0:6e:2b:
59:e1:a4:35:6a:c5:18:67:74:d3:c2:51:de:f3:34:6f:c9:97:
e9:53:15:f0:d9:e8:cc:4d:be:f7:87:49:ab:e0:82:f0:bc:1d:
d5:46:c2:c1:a9:2a:45:f4:16:63:50:4b:7f:92:8e:7b:88:0c:
bb:22:66:df:59:57:0b:5b:ee:18:b5:0c:69:50:45:02:8b:ea:
fa:ef:1f:c2:da:1f:68:d1:46:0f:db:4d:c1:c6:80:70:64:35:
a1:70:8b:2b:79:17:3d:45:2b:43:84:64:82:73:0d:8b:d8:06:
79:b8:bb:2c:3b:f5:94:5c:1c:c7:0e:f7:d2:20:8d:ed:18:29:
74:c1:94:76:15:77:40:fb:1d:17:ff:a5:db:83:15:61:4a:86:
1f:d5:12:32:b0:2d:86:5c:4b:2e:8f:3c:81:7a:d4:fb:91:12:
3f:cf:be:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lugHJ4XvayPICcrSvrZ+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmVmYTBhYjk3NDAwNDhkODNiNDg5ZDljYTRlMDI4ZTBm
NWNmZWYwHhcNMjYwMzI1MTYwMDQwWhcNMjYwMzI2MTYwMDQwWjAzMTEwLwYDVQQD
Eyg5MWYyNjU2ZmZmNGI3OWZiMzdiODc0MTAwNzI2MzM3ZTZhY2E5ZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8GWLnkRmrvXa4jt0o0UhrEVHm3u
NuiFAI9sCEf1MK3FQcf7pQtsNKCEo6A7CGyQzAlR5I3t6hZf2t2GIAvTED+/9Iq4
x57LixKuvx+Rrpxyzw0wx6UkOWBjapMy/R6ejwIv5OGY6xhU2NTpLzEZ+GLXlC7m
g+6S2HESkZqEGTaXjyf85JYBW7t0OKwYvUVnpHNJCjzE12PEZiE82Y5XuAt9J5w4
ClTQs1bWC3S2V5v0uX3EtleVWRMU7qkeOpKorCO80z71SjfrtWiIcVnEKmoZ4KKZ
4LpVBEnx2ZVwYqszy+VhAGMXpCACdn/lYWCmvwIhk6b8s4YrmvyTmcj+uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHyZW//S3n7N7h0EAcmM35qyp0MMB8GA1UdIwQY
MBaAFLz++gq5dABI2DtInZyk4Cjg9c/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlA3NkNybDBBRWpZTzBpZG5LVGdLT0Qxei04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mYjhlZGItZTMwNC00NzE0LTk1MmUt
YzY2YmVhMWYxYWEyLzEvdlA3NkNybDBBRWpZTzBpZG5LVGdLT0Qxei04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mYjhlZGItZTMwNC00NzE0LTk1MmUtYzY2YmVhMWYxYWEy
LzEvdlA3NkNybDBBRWpZTzBpZG5LVGdLT0Qxei04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANmjoUCP
XvaUr8LReK4hRYjh9Izy1eTOraXLCWh7j0OBjyAhUYk5ywVvDrNB9JHLafWWfhA2
RuYc/yb+wgxiZBsy8XFL4Gv/Q7s8aVRSa/Fc6w4NLCxl0G4rWeGkNWrFGGd008JR
3vM0b8mX6VMV8NnozE2+94dJq+CC8Lwd1UbCwakqRfQWY1BLf5KOe4gMuyJm31lX
C1vuGLUMaVBFAovq+u8fwtofaNFGD9tNwcaAcGQ1oXCLK3kXPUUrQ4RkgnMNi9gG
ebi7LDv1lFwcxw730iCN7RgpdMGUdhV3QPsdF/+l24MVYUqGH9USMrAthlxLLo88
gXrU+5ESP8++xw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:11 2026 by rpki-client