Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: qIdf4PHf/VTbqAIrp/j81GSblnew3TMu8FCyd82Ik4Q=
Subject key identifier: 74:0E:F5:03:B5:E0:C8:22:FA:B2:C6:B9:F6:03:B6:70:7F:DE:88:CA
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 01A0DF4F2F365D1A57750A0E423730FD41D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 0AF0
Signing time: Sat 26 Sep 2026 20:01:43 +0000
Manifest this update: Sat 26 Sep 2026 20:01:43 +0000
Manifest next update: Sun 27 Sep 2026 20:01:43 +0000
Files and hashes: 1: 2vPfx8Li_NUBxFIa1sHLuZQFAz4.roa (hash: 0dmBzMyhuyOWC20lzdsr5tWctKrKudD/LXfTno/MKsQ=)
2: lCay49jNA6hN-ql5UdLPpmY0qyA.roa (hash: wJB8n42rVcnEySyiUs5rmdGl27xFBWQxOkbBGoicUQM=)
3: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: mT2m7ROvKegvafwbWHOOyRKuluvVYTCFeGakkYwF3kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4f:2f:36:5d:1a:57:75:0a:0e:42:37:30:fd:41:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Sep 26 20:01:43 2026 GMT
Not After : Sep 27 20:01:43 2026 GMT
Subject: CN=740ef503b5e0c822fab2c6b9f603b6707fde88ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:19:46:11:36:07:53:5b:78:73:a6:2b:ae:
b2:a7:a8:79:ea:a8:1a:ea:29:5b:af:d6:11:e1:7d:
28:88:ff:62:b7:4c:19:cb:bb:d4:75:01:08:67:fe:
27:d3:9c:a6:32:aa:c9:ce:97:cb:5f:c6:93:e4:c4:
5f:92:10:ee:04:04:0b:1f:aa:50:78:66:77:95:b8:
0c:56:a9:c3:c0:ae:d1:c7:a5:60:38:7e:6a:a5:82:
3e:bf:c8:55:3b:9f:a8:77:5f:ea:99:f9:cb:2d:a8:
a2:cf:bd:55:03:ff:63:e9:3c:cd:39:69:38:5a:6d:
4a:53:22:f3:9e:65:17:bf:ea:73:6d:b5:af:1e:5d:
49:a4:6a:d4:40:9f:21:fa:21:53:b4:8f:41:6b:fb:
d2:09:8e:aa:39:46:30:03:c7:49:2c:6f:71:8d:c0:
fd:cb:2d:5c:b9:67:fd:2b:f5:3f:64:c3:4a:7a:4d:
59:f9:33:df:30:95:0e:ea:7c:9f:9f:c7:e6:45:28:
de:7f:99:3f:60:f5:7a:9c:03:eb:07:f9:40:5b:12:
81:a3:a9:da:9d:2a:b9:11:ad:fd:97:f6:bd:eb:ee:
8d:3d:8d:7c:cd:1b:37:34:c9:21:b4:a3:09:4e:08:
b5:e3:b0:15:81:3d:a2:47:a2:61:fd:ee:6a:59:6d:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0E:F5:03:B5:E0:C8:22:FA:B2:C6:B9:F6:03:B6:70:7F:DE:88:CA
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:85:6e:12:93:5b:de:0f:72:5f:03:7e:62:c9:2c:6f:1d:52:
c0:63:06:19:cc:28:02:3d:8c:2d:b0:5e:25:ef:57:c4:a3:c4:
d6:be:73:86:c1:51:55:e2:7b:d8:a0:df:59:c3:f7:24:0e:a7:
12:6f:d1:cf:b5:ba:2a:6e:8d:eb:8b:e3:95:79:3b:2c:6d:af:
40:df:26:64:df:26:b0:c4:0d:68:75:f0:86:01:12:0e:f5:fa:
ec:0e:05:df:7d:9e:e5:39:d4:3e:8c:e6:e1:20:51:d1:e4:a0:
46:b4:46:c9:c7:41:29:08:d3:95:e2:38:98:18:0e:e5:19:bc:
ed:78:87:60:a1:7f:8e:74:34:63:cf:3c:a1:1d:6f:ae:54:e0:
50:56:75:2a:96:e8:c0:dc:f2:f6:c7:43:dd:54:5b:ef:20:28:
92:eb:9f:d2:a0:db:be:e6:8d:56:34:0b:05:28:fb:7f:a2:4b:
5e:81:c2:bd:bd:46:d6:8f:33:ab:83:99:57:93:6b:46:9d:97:
77:ae:af:95:2f:6c:63:2a:a1:75:88:7a:04:5d:bd:14:7c:89:
bc:cd:51:10:9a:c9:2d:e8:40:89:93:94:f5:ea:70:33:30:5f:
c8:33:5d:8d:1d:4e:42:e1:27:ca:ec:12:79:4d:1f:f0:21:0f:
eb:c4:56:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfTy82XRpXdQoOQjcw/UHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTI3ODY0Y2Q0MzA0ODU1MGVkMTY5OWM1ODRiNWMxNGQ4
MGUwOTgwHhcNMjYwOTI2MjAwMTQzWhcNMjYwOTI3MjAwMTQzWjAzMTEwLwYDVQQD
Eyg3NDBlZjUwM2I1ZTBjODIyZmFiMmM2YjlmNjAzYjY3MDdmZGU4OGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoYZRhE2B1NbeHOmK66yp6h56qga
6ilbr9YR4X0oiP9it0wZy7vUdQEIZ/4n05ymMqrJzpfLX8aT5MRfkhDuBAQLH6pQ
eGZ3lbgMVqnDwK7Rx6VgOH5qpYI+v8hVO5+od1/qmfnLLaiiz71VA/9j6TzNOWk4
Wm1KUyLznmUXv+pzbbWvHl1JpGrUQJ8h+iFTtI9Ba/vSCY6qOUYwA8dJLG9xjcD9
yy1cuWf9K/U/ZMNKek1Z+TPfMJUO6nyfn8fmRSjef5k/YPV6nAPrB/lAWxKBo6na
nSq5Ea39l/a96+6NPY18zRs3NMkhtKMJTgi147AVgT2iR6Jh/e5qWW07cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQO9QO14Mgi+rLGufYDtnB/3ojKMB8GA1UdIwQY
MBaAFLwSeGTNQwSFUO0WmcWEtcFNgOCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJKNFpNMURCSVZRN1JhWnhZUzF3VTJBNEpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC84YTNiYjUtOWQ5NS00OTUzLTkzODgt
MDMxZjQwN2IzMjYzLzEvdkJKNFpNMURCSVZRN1JhWnhZUzF3VTJBNEpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC84YTNiYjUtOWQ5NS00OTUzLTkzODgtMDMxZjQwN2IzMjYz
LzEvdkJKNFpNMURCSVZRN1JhWnhZUzF3VTJBNEpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoVuEpNb
3g9yXwN+Ysksbx1SwGMGGcwoAj2MLbBeJe9XxKPE1r5zhsFRVeJ72KDfWcP3JA6n
Em/Rz7W6Km6N64vjlXk7LG2vQN8mZN8msMQNaHXwhgESDvX67A4F332e5TnUPozm
4SBR0eSgRrRGycdBKQjTleI4mBgO5Rm87XiHYKF/jnQ0Y888oR1vrlTgUFZ1Kpbo
wNzy9sdD3VRb7yAokuuf0qDbvuaNVjQLBSj7f6JLXoHCvb1G1o8zq4OZV5NrRp2X
d66vlS9sYyqhdYh6BF29FHyJvM1REJrJLehAiZOU9epwMzBfyDNdjR1OQuEnyuwS
eU0f8CEP68RWzQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:16:57 2026 by rpki-client