Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft
File: vOLbTWWaY-QstUTFf5mjNvfZjtA.mft (raw, json)
Hash identifier: KqeKFzw665s1mbHa4YbPd3GfQbw/9aS+u/soI5QE8+4=
Subject key identifier: 04:C7:1E:27:09:83:DF:F2:12:94:C7:AC:B3:7E:AC:12:5D:5F:A2:97
Authority key identifier: BC:E2:DB:4D:65:9A:63:E4:2C:B5:44:C5:7F:99:A3:36:F7:D9:8E:D0
Certificate issuer: /CN=bce2db4d659a63e42cb544c57f99a336f7d98ed0
Certificate serial: 019D2772614E9257B8DEE15A3CDB866EB778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOLbTWWaY-QstUTFf5mjNvfZjtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft
Manifest number: 03CA
Signing time: Thu 26 Mar 2026 00:01:40 +0000
Manifest this update: Thu 26 Mar 2026 00:01:40 +0000
Manifest next update: Fri 27 Mar 2026 00:01:40 +0000
Files and hashes: 1: t7QPfbM-YZ_9joduRFWOnsNDWuo.roa (hash: 9tCgD+egQCTnLC/7CRp4aMoJJc5yBODacvlEtSrWz0E=)
2: vOLbTWWaY-QstUTFf5mjNvfZjtA.crl (hash: k+RnoC+aWBJd+JS3UpjlBJXPebJnR4tSH/toOF26R50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOLbTWWaY-QstUTFf5mjNvfZjtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:61:4e:92:57:b8:de:e1:5a:3c:db:86:6e:b7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bce2db4d659a63e42cb544c57f99a336f7d98ed0
Validity
Not Before: Mar 26 00:01:40 2026 GMT
Not After : Mar 27 00:01:40 2026 GMT
Subject: CN=04c71e270983dff21294c7acb37eac125d5fa297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:d1:da:f4:0e:c8:c5:f6:51:88:87:e6:07:
0b:0b:bf:e6:df:7e:e4:a4:b5:f7:d9:5d:d9:18:13:
b8:a1:42:95:8e:d4:f7:ec:51:4b:cb:d3:e7:c5:82:
cc:b0:52:1f:d6:ef:23:7f:8a:c7:eb:d2:f3:61:26:
f4:af:37:bf:67:a9:51:85:9c:0a:05:72:ed:69:1a:
0d:61:c6:46:1b:04:01:7c:c9:1b:d9:8a:ee:3c:2a:
a5:2a:4c:53:ab:65:89:3b:68:01:cf:54:0e:48:92:
92:36:eb:c1:a4:b9:95:fb:bb:71:ce:58:65:0d:da:
5d:35:63:51:a5:19:c7:a0:6b:9a:d2:0b:e1:55:2b:
62:f2:bd:36:17:3c:9b:9a:10:c1:9c:03:24:b6:33:
8d:bd:0c:df:e4:57:46:8c:f2:46:3e:ef:aa:93:8f:
d6:85:45:e6:86:d3:61:ec:0e:16:6c:f0:59:86:26:
30:b1:e3:42:7c:5d:55:b4:52:b7:25:6d:b0:a4:ad:
40:14:c6:b4:84:99:60:d8:0d:51:a7:02:38:f4:b7:
ea:0c:7e:d1:8a:96:26:73:9c:d1:7e:b5:26:88:f2:
d9:46:2e:bc:bc:a8:be:bc:52:f5:f7:f5:b4:d3:79:
cf:34:0b:26:67:0a:a1:92:32:33:b1:fb:85:37:27:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C7:1E:27:09:83:DF:F2:12:94:C7:AC:B3:7E:AC:12:5D:5F:A2:97
X509v3 Authority Key Identifier:
keyid:BC:E2:DB:4D:65:9A:63:E4:2C:B5:44:C5:7F:99:A3:36:F7:D9:8E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOLbTWWaY-QstUTFf5mjNvfZjtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:be:4f:ab:cd:61:85:95:21:e3:22:d9:4e:e0:30:f0:44:45:
23:ce:2d:f1:72:2c:db:a5:97:3b:99:c6:16:ec:25:4a:4a:1e:
3f:35:8a:13:62:23:9f:2e:a5:c6:66:1a:e1:d8:f3:85:91:90:
48:5b:db:fa:36:8d:a7:e0:98:e1:f8:90:4e:04:9b:67:75:ca:
08:4a:b5:bc:3b:2b:5e:d3:07:68:1c:9f:15:b1:5c:96:c0:79:
6f:76:29:84:2a:dd:c4:0b:db:26:8a:79:03:03:dc:13:81:86:
14:bd:1c:07:3d:1d:e4:ab:92:b2:df:6a:7b:6b:7f:6e:51:bd:
e3:a9:db:e0:98:f5:1f:68:9c:62:e8:aa:f9:24:4b:ca:d4:41:
35:86:2d:6c:54:05:4a:a0:dc:ed:79:a9:d1:ab:6b:1a:e7:80:
3b:8d:ee:74:c2:af:a0:c2:87:a5:98:d8:ba:fa:1f:d4:6b:f2:
b7:dc:95:d2:be:80:ae:9a:a9:06:1d:aa:df:87:fa:fa:ec:68:
56:54:9e:83:bb:10:2f:13:f4:08:36:81:19:f8:8c:00:54:20:
c4:36:c7:70:6c:a0:d4:79:79:ee:c3:30:9c:de:dc:22:92:4c:
0d:be:fc:92:ea:39:13:a1:1a:b0:03:cf:47:5f:90:b1:83:4c:
ed:91:dd:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncmFOkle43uFaPNuGbrd4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZTJkYjRkNjU5YTYzZTQyY2I1NDRjNTdmOTlhMzM2Zjdk
OThlZDAwHhcNMjYwMzI2MDAwMTQwWhcNMjYwMzI3MDAwMTQwWjAzMTEwLwYDVQQD
EygwNGM3MWUyNzA5ODNkZmYyMTI5NGM3YWNiMzdlYWMxMjVkNWZhMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/vR2vQOyMX2UYiH5gcLC7/m337k
pLX32V3ZGBO4oUKVjtT37FFLy9PnxYLMsFIf1u8jf4rH69LzYSb0rze/Z6lRhZwK
BXLtaRoNYcZGGwQBfMkb2YruPCqlKkxTq2WJO2gBz1QOSJKSNuvBpLmV+7txzlhl
DdpdNWNRpRnHoGua0gvhVSti8r02FzybmhDBnAMktjONvQzf5FdGjPJGPu+qk4/W
hUXmhtNh7A4WbPBZhiYwseNCfF1VtFK3JW2wpK1AFMa0hJlg2A1RpwI49LfqDH7R
ipYmc5zRfrUmiPLZRi68vKi+vFL19/W003nPNAsmZwqhkjIzsfuFNyf7MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATHHicJg9/yEpTHrLN+rBJdX6KXMB8GA1UdIwQY
MBaAFLzi201lmmPkLLVExX+Zozb32Y7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk9MYlRXV2FZLVFzdFVURmY1bWpOdmZaanRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iNDE4NjYtMDU3OC00NTU3LTk3OGEt
NzZjMjkyMGVjMzMzLzEvdk9MYlRXV2FZLVFzdFVURmY1bWpOdmZaanRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9iNDE4NjYtMDU3OC00NTU3LTk3OGEtNzZjMjkyMGVjMzMz
LzEvdk9MYlRXV2FZLVFzdFVURmY1bWpOdmZaanRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI75Pq81h
hZUh4yLZTuAw8ERFI84t8XIs26WXO5nGFuwlSkoePzWKE2Ijny6lxmYa4djzhZGQ
SFvb+jaNp+CY4fiQTgSbZ3XKCEq1vDsrXtMHaByfFbFclsB5b3YphCrdxAvbJop5
AwPcE4GGFL0cBz0d5KuSst9qe2t/blG946nb4Jj1H2icYuiq+SRLytRBNYYtbFQF
SqDc7Xmp0atrGueAO43udMKvoMKHpZjYuvof1Gvyt9yV0r6ArpqpBh2q34f6+uxo
VlSeg7sQLxP0CDaBGfiMAFQgxDbHcGyg1Hl57sMwnN7cIpJMDb78kuo5E6EasAPP
R1+QsYNM7ZHdkw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:35 2026 by rpki-client