Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json)
Hash identifier: VIWi3e3b7/+NnYrq2VaFIuPYaNwnSpkc4HBjaf95RCM=
Subject key identifier: 18:21:EF:17:B1:DA:7F:50:FF:1E:0F:44:04:80:69:E7:91:DB:8D:F8
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 019D2E4F67C2F260165AC14D463CC605D2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
Manifest number: 188F
Signing time: Fri 27 Mar 2026 08:00:48 +0000
Manifest this update: Fri 27 Mar 2026 08:00:48 +0000
Manifest next update: Sat 28 Mar 2026 08:00:48 +0000
Files and hashes: 1: V8PCFPrTValkKCiDtwNotmUAoXc.roa (hash: 3Er2ggdCtrhD3DqnQo2BCMQ9XdtanYYog/Rbw/HvLzg=)
2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: hn3qCETfvnPbETEniiYQDFJeg1kMcsndsRYj0sME8tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:4f:67:c2:f2:60:16:5a:c1:4d:46:3c:c6:05:d2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Mar 27 08:00:48 2026 GMT
Not After : Mar 28 08:00:48 2026 GMT
Subject: CN=1821ef17b1da7f50ff1e0f44048069e791db8df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:38:eb:4a:39:22:33:32:25:9f:a6:91:01:
e0:9d:f6:c2:ad:d2:f6:2c:e3:3f:d7:cd:2e:06:92:
a0:76:52:0c:07:ac:c5:d9:7a:1a:9a:d2:0d:c4:d4:
db:1a:6a:ad:e6:9c:cb:02:2b:4c:51:09:15:e6:fc:
f1:3b:c9:45:5c:55:56:33:79:61:ee:b6:d1:ed:f5:
ad:52:66:8b:ee:02:54:45:d7:d5:4f:0d:cb:b1:98:
f0:98:93:40:d2:95:65:a1:a8:f3:9e:7d:55:0b:41:
40:70:ea:d8:82:d1:bf:63:25:c3:12:4c:33:47:de:
ed:d9:da:76:4e:b9:56:a1:f1:68:fa:f4:4e:34:77:
68:87:27:00:51:1a:db:75:bb:b0:5f:8b:a9:71:73:
bf:1b:98:8d:f2:ac:83:5d:f5:05:70:82:4c:f8:b9:
d4:00:fa:c0:63:52:28:99:84:f1:e4:b6:f8:34:15:
e7:e8:b8:c9:7a:2c:68:8d:9c:04:22:7d:64:9b:04:
b9:09:3a:f5:f3:bf:46:93:fa:e7:ec:69:04:c9:1f:
e2:c4:5d:fa:36:77:e3:6b:9e:80:9f:80:37:0a:a6:
41:69:5b:fb:d4:e2:d0:f0:02:40:36:70:67:9c:39:
ce:36:96:d8:27:1c:da:a4:f2:fc:1f:4b:1c:0f:b9:
9f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:21:EF:17:B1:DA:7F:50:FF:1E:0F:44:04:80:69:E7:91:DB:8D:F8
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:57:65:ed:2c:28:2a:8e:57:b7:8e:d9:3c:98:f0:43:07:44:
08:d5:38:a3:09:27:2e:81:33:c3:d4:3e:7a:4f:53:cb:45:e3:
e9:0e:d4:14:e9:4e:6b:20:30:e2:3d:1a:26:e3:02:1c:7d:77:
ed:2c:0a:83:df:5f:ed:80:90:f0:0b:ea:95:7d:d3:25:07:ef:
dd:66:ab:6f:4d:97:b0:9a:d4:93:0b:00:9d:b3:c6:68:78:5d:
f4:0f:2c:e7:64:b0:0e:33:80:59:f0:c7:3e:c9:54:36:61:86:
79:82:5c:f4:1a:87:83:6d:96:5e:e3:9d:07:9f:e4:e0:ac:2d:
75:10:62:02:75:cb:ab:47:ca:9a:8f:7b:45:bc:f3:01:cc:ff:
90:7d:45:17:06:6e:d9:0c:99:a3:76:3b:53:43:32:ac:e6:ff:
78:f4:d2:01:25:ca:b7:8c:59:e6:59:dc:e3:26:8f:a7:1a:e1:
52:bf:09:e5:4a:24:5f:6b:52:e4:43:0c:37:95:ac:0b:dc:2f:
e6:59:43:0d:3c:20:bf:3c:71:97:09:7b:51:37:df:c3:f2:4d:
a1:7c:fa:e3:60:2b:ff:fb:36:ad:04:7a:ab:1d:bb:d4:1d:92:
30:c2:20:97:5a:9b:f8:84:3e:15:6b:32:32:c2:25:58:9f:f4:
36:6a:52:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0uT2fC8mAWWsFNRjzGBdL/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMjBkNDFhZDM1NzBlZDg4OGMzYjlhMzk1ODQzZDI4YzRi
ZGU3MGUwHhcNMjYwMzI3MDgwMDQ4WhcNMjYwMzI4MDgwMDQ4WjAzMTEwLwYDVQQD
EygxODIxZWYxN2IxZGE3ZjUwZmYxZTBmNDQwNDgwNjllNzkxZGI4ZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr4460o5IjMyJZ+mkQHgnfbCrdL2
LOM/180uBpKgdlIMB6zF2XoamtINxNTbGmqt5pzLAitMUQkV5vzxO8lFXFVWM3lh
7rbR7fWtUmaL7gJURdfVTw3LsZjwmJNA0pVloajznn1VC0FAcOrYgtG/YyXDEkwz
R97t2dp2TrlWofFo+vRONHdohycAURrbdbuwX4upcXO/G5iN8qyDXfUFcIJM+LnU
APrAY1IomYTx5Lb4NBXn6LjJeixojZwEIn1kmwS5CTr1879Gk/rn7GkEyR/ixF36
Nnfja56An4A3CqZBaVv71OLQ8AJANnBnnDnONpbYJxzapPL8H0scD7mfPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgh7xex2n9Q/x4PRASAaeeR2434MB8GA1UdIwQY
MBaAFLwg1BrTVw7YiMO5o5WEPSjEvecOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83OWZmNWQtNmRmZS00NDFiLWEyMWQt
MTM1YzQwMjE3Yjg2LzEvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi83OWZmNWQtNmRmZS00NDFiLWEyMWQtMTM1YzQwMjE3Yjg2
LzEvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2ldl7Swo
Ko5Xt47ZPJjwQwdECNU4owknLoEzw9Q+ek9Ty0Xj6Q7UFOlOayAw4j0aJuMCHH13
7SwKg99f7YCQ8AvqlX3TJQfv3Warb02XsJrUkwsAnbPGaHhd9A8s52SwDjOAWfDH
PslUNmGGeYJc9BqHg22WXuOdB5/k4KwtdRBiAnXLq0fKmo97RbzzAcz/kH1FFwZu
2QyZo3Y7U0MyrOb/ePTSASXKt4xZ5lnc4yaPpxrhUr8J5UokX2tS5EMMN5WsC9wv
5llDDTwgvzxxlwl7UTffw/JNoXz642Ar//s2rQR6qx271B2SMMIgl1qb+IQ+FWsy
MsIlWJ/0NmpS3Q==
-----END CERTIFICATE-----
Generated at Fri Mar 27 11:15:00 2026 by rpki-client