Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: R+3QtcCXcIvF6b+OAyS572JjJNkrGLVMrB0XYBNZAZs=
Subject key identifier: DF:FD:2D:19:6B:F9:21:8F:23:F7:21:9E:2A:A9:DC:F1:52:CE:86:F5
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 019D29293E5EFAB2A858B2E088DE7DBEC5D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 0903
Signing time: Thu 26 Mar 2026 08:01:01 +0000
Manifest this update: Thu 26 Mar 2026 08:01:01 +0000
Manifest next update: Fri 27 Mar 2026 08:01:01 +0000
Files and hashes: 1: 2vPfx8Li_NUBxFIa1sHLuZQFAz4.roa (hash: 0dmBzMyhuyOWC20lzdsr5tWctKrKudD/LXfTno/MKsQ=)
2: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: TF64EQHIeZ6EhBIHNapzph6PNZNO9CXgp1otl64BtWo=)
3: xd89191APrZOUVHG3uZycN3SZ0g.roa (hash: IG6q5I2/G1oD/WZjTUVQ36euEC71avJGwrJIV9eTw8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:3e:5e:fa:b2:a8:58:b2:e0:88:de:7d:be:c5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Mar 26 08:01:01 2026 GMT
Not After : Mar 27 08:01:01 2026 GMT
Subject: CN=dffd2d196bf9218f23f7219e2aa9dcf152ce86f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:69:cd:47:e5:ca:76:b1:2c:f3:bb:98:b3:aa:
7b:1e:fc:05:19:92:7f:eb:52:3c:77:36:8d:9e:72:
61:72:48:cb:c8:9b:3b:9f:46:f2:c0:9d:02:11:43:
5c:aa:69:c4:cf:61:0b:94:0f:c6:42:69:98:64:a6:
36:98:4b:6c:5b:f9:11:55:02:1d:d7:6f:bd:a3:4a:
24:83:85:64:e2:be:8e:4c:12:39:91:f2:f2:c5:f6:
ed:a0:b1:9f:16:96:5b:a9:09:80:17:e5:a7:42:1a:
a6:d3:7d:b3:1c:e0:b5:0c:bf:4b:67:0a:96:3e:fa:
07:56:09:b9:d4:86:3d:4d:e5:3d:da:61:2c:64:74:
04:c0:27:f5:f9:b7:d2:3a:6d:6b:3d:ac:c3:ae:36:
15:7e:46:7a:dd:8f:3d:4f:d1:9d:ba:a4:3f:85:a9:
dd:06:43:7f:08:9a:ed:33:74:50:90:23:cd:69:cf:
7d:72:de:27:6d:3c:6c:61:92:86:b2:0d:fb:c0:0b:
cf:be:ac:3f:ea:74:c3:22:6c:85:bf:fd:2b:06:b7:
4a:f6:7d:0a:0b:af:6c:f5:a4:b7:83:48:4f:7f:70:
c4:87:bf:b9:0f:2a:54:45:de:36:7c:f9:a8:49:ce:
62:a5:60:71:66:0f:6c:9c:48:da:8d:d3:32:c0:f9:
3b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FD:2D:19:6B:F9:21:8F:23:F7:21:9E:2A:A9:DC:F1:52:CE:86:F5
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2d:98:d2:be:88:89:03:44:71:55:61:61:5c:67:08:d5:5b:
72:c1:04:67:0c:91:b2:ef:f5:47:f3:49:8b:d6:4e:4e:b2:d9:
50:61:65:0a:e3:e7:fa:80:36:b5:62:a4:c8:2a:f0:f3:9f:57:
fc:6e:3f:db:ac:16:11:53:e4:76:cd:90:86:bd:71:7e:70:5c:
66:f7:ba:dc:8f:8c:8d:b1:70:05:21:51:11:0d:89:51:e5:f8:
b5:31:3b:91:88:8e:53:6e:5a:80:2e:1f:3f:7f:0b:f3:37:9b:
f0:8a:c8:3f:9c:2e:5c:9d:fe:87:a0:bf:2f:c8:66:9d:61:cc:
be:45:94:22:0e:fd:1a:46:7a:2a:fa:73:90:dd:f9:c5:eb:88:
f2:62:26:3b:69:c1:2c:b3:33:89:df:10:b5:cf:54:40:4c:42:
30:0e:6e:fc:bc:eb:69:a8:bf:9c:f9:27:af:f4:d0:61:df:af:
af:47:d6:ee:99:75:44:a3:0b:04:3b:0b:30:d6:ff:62:64:3d:
ff:6f:a3:0c:ce:df:c1:f8:51:30:6b:79:82:18:59:b0:ca:81:
31:84:31:7a:c2:5d:5d:50:02:d7:d4:9e:51:f1:72:5f:21:e3:
0d:7f:0d:0f:5d:21:3e:32:24:b8:84:b9:af:ee:20:e8:a8:9b:
2d:23:e4:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKT5e+rKoWLLgiN59vsXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTI3ODY0Y2Q0MzA0ODU1MGVkMTY5OWM1ODRiNWMxNGQ4
MGUwOTgwHhcNMjYwMzI2MDgwMTAxWhcNMjYwMzI3MDgwMTAxWjAzMTEwLwYDVQQD
EyhkZmZkMmQxOTZiZjkyMThmMjNmNzIxOWUyYWE5ZGNmMTUyY2U4NmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82nNR+XKdrEs87uYs6p7HvwFGZJ/
61I8dzaNnnJhckjLyJs7n0bywJ0CEUNcqmnEz2ELlA/GQmmYZKY2mEtsW/kRVQId
12+9o0okg4Vk4r6OTBI5kfLyxfbtoLGfFpZbqQmAF+WnQhqm032zHOC1DL9LZwqW
PvoHVgm51IY9TeU92mEsZHQEwCf1+bfSOm1rPazDrjYVfkZ63Y89T9GduqQ/hand
BkN/CJrtM3RQkCPNac99ct4nbTxsYZKGsg37wAvPvqw/6nTDImyFv/0rBrdK9n0K
C69s9aS3g0hPf3DEh7+5DypURd42fPmoSc5ipWBxZg9snEjajdMywPk7gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/9LRlr+SGPI/chniqp3PFSzob1MB8GA1UdIwQY
MBaAFLwSeGTNQwSFUO0WmcWEtcFNgOCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJKNFpNMURCSVZRN1JhWnhZUzF3VTJBNEpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC84YTNiYjUtOWQ5NS00OTUzLTkzODgt
MDMxZjQwN2IzMjYzLzEvdkJKNFpNMURCSVZRN1JhWnhZUzF3VTJBNEpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC84YTNiYjUtOWQ5NS00OTUzLTkzODgtMDMxZjQwN2IzMjYz
LzEvdkJKNFpNMURCSVZRN1JhWnhZUzF3VTJBNEpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAri2Y0r6I
iQNEcVVhYVxnCNVbcsEEZwyRsu/1R/NJi9ZOTrLZUGFlCuPn+oA2tWKkyCrw859X
/G4/26wWEVPkds2Qhr1xfnBcZve63I+MjbFwBSFREQ2JUeX4tTE7kYiOU25agC4f
P38L8zeb8IrIP5wuXJ3+h6C/L8hmnWHMvkWUIg79GkZ6KvpzkN35xeuI8mImO2nB
LLMzid8Qtc9UQExCMA5u/Lzraai/nPknr/TQYd+vr0fW7pl1RKMLBDsLMNb/YmQ9
/2+jDM7fwfhRMGt5ghhZsMqBMYQxesJdXVAC19SeUfFyXyHjDX8ND10hPjIkuIS5
r+4g6KibLSPk5Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:02:44 2026 by rpki-client