Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File: vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier: ywD0KlejAmtBiCMis2NtQ1ksSWNELt02Vjz3wmk7om4=
Subject key identifier: D7:5C:99:F9:FD:86:72:B9:D7:B5:BC:91:CC:AB:AC:51:1C:F4:3A:90
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer: /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial: 01A0D6B97D41008DA16A461E2941AD8E8E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number: 1A73
Signing time: Fri 25 Sep 2026 04:01:15 +0000
Manifest this update: Fri 25 Sep 2026 04:01:15 +0000
Manifest next update: Sat 26 Sep 2026 04:01:15 +0000
Files and hashes: 1: ZGekjXEzpu_RZ-7_vyg6Eo2ZkNk.roa (hash: g9zJSRkWxGZifxxDK0NFw2MI+0xI5nvgLjURj1IFEFw=)
2: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: mzaz2vhr1dfMWexU5DtqBoRmSV3E6vmQf3BE+9yxCiE=)
3: xj3KIjGGQeE9p2z5xDtR4kdM838.roa (hash: KadOdd0YIetDxyuEeROWrqZ3UbDrY1vHEUtLjmlaM0E=)
4: z6bCwLojIPVuxbTXw72sR-aZPSQ.roa (hash: jarPN7oKXyiEaRbhLltezQTSG2nKsHFs4sdkmV5yFgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:7d:41:00:8d:a1:6a:46:1e:29:41:ad:8e:8e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Validity
Not Before: Sep 25 04:01:15 2026 GMT
Not After : Sep 26 04:01:15 2026 GMT
Subject: CN=d75c99f9fd8672b9d7b5bc91ccabac511cf43a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2d:95:86:72:75:3c:b7:96:aa:e1:48:82:ad:
a4:e0:d0:ea:2a:27:b2:c1:c0:9e:7b:23:db:02:a5:
9c:6b:9d:92:44:f9:53:c8:d0:a3:67:5c:a2:af:90:
ce:d3:f8:85:98:86:94:14:e1:f5:ee:00:84:35:f2:
1e:cd:d5:a8:ab:ae:80:f3:7f:75:e0:a8:6c:14:51:
e1:6c:68:95:12:2b:c5:69:ec:10:68:5c:6f:27:c0:
87:49:67:2c:90:35:ec:d6:a6:7a:20:0b:df:44:c4:
9b:10:2b:14:42:5b:01:63:8a:5d:66:78:6a:b0:3b:
22:2e:c3:64:9d:c4:29:8f:30:96:25:80:47:f0:12:
32:a1:6f:04:de:cd:22:24:96:ce:82:95:be:59:e2:
7f:96:32:e4:9d:e6:88:26:b1:b2:c2:35:55:8c:1b:
b8:1a:44:1e:de:a2:da:35:e2:6f:d7:23:81:56:fc:
d1:c2:e8:58:26:5f:50:12:13:6a:3a:1a:e5:1f:b7:
34:dd:1b:01:60:4b:76:fa:df:f2:5d:7b:03:68:ec:
c0:b9:26:04:69:45:4c:ff:24:d2:bf:1a:6d:7a:cb:
56:ac:39:f1:c0:ab:4b:ae:79:f1:d1:34:bb:2e:86:
bb:28:c1:99:31:67:8a:e4:c6:5f:e8:6a:aa:c2:3e:
6b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5C:99:F9:FD:86:72:B9:D7:B5:BC:91:CC:AB:AC:51:1C:F4:3A:90
X509v3 Authority Key Identifier:
keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:52:41:f5:3f:e7:42:e5:0b:ba:2b:36:58:27:1f:0d:61:66:
12:14:9e:f0:6f:e9:91:4e:6c:df:65:73:2e:b2:49:9f:6a:7b:
bf:f3:4f:6a:8d:4f:81:eb:0e:b8:c8:d2:08:24:d3:be:dc:c1:
c8:89:97:03:ac:7a:f0:ce:e7:9b:6c:b3:db:d6:34:67:aa:c7:
c2:46:cc:57:9a:65:bc:85:68:ed:2c:0f:41:77:af:ab:9b:97:
87:57:88:e3:6c:1a:72:a9:ce:64:b0:d3:79:45:26:f6:1a:ae:
8f:b8:d3:91:b3:1f:8b:65:b2:72:98:39:6f:09:fe:61:c5:e2:
1e:c4:2d:ef:3f:c8:4c:b0:cd:16:d9:4b:f2:4c:da:c2:06:db:
7c:7f:15:1c:fc:dd:8b:13:dd:43:53:c0:fc:60:8a:1b:72:1e:
7c:6c:e8:b2:8a:6c:57:f1:b3:8d:83:a3:c9:43:19:96:b3:f5:
b7:f9:5e:b3:8b:b5:83:31:76:92:d4:f9:8f:e4:82:e6:97:90:
81:9e:cc:bd:d7:08:3b:64:75:26:14:4a:9b:fb:ea:41:2b:4f:
80:af:b5:8d:6f:9c:00:5d:68:bf:6b:3f:4d:e0:26:5b:b3:c6:
c6:6c:aa:c1:a2:35:04:e6:0a:76:bc:87:42:d9:9b:c0:24:96:
17:1d:9f:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWuX1BAI2hakYeKUGtjo4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNTZkYjc5NmRlZjBkYmRiNGM3OGYyNDQ1YWJlY2MxNTcw
YTZmZDkwHhcNMjYwOTI1MDQwMTE1WhcNMjYwOTI2MDQwMTE1WjAzMTEwLwYDVQQD
EyhkNzVjOTlmOWZkODY3MmI5ZDdiNWJjOTFjY2FiYWM1MTFjZjQzYTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6i2VhnJ1PLeWquFIgq2k4NDqKiey
wcCeeyPbAqWca52SRPlTyNCjZ1yir5DO0/iFmIaUFOH17gCENfIezdWoq66A8391
4KhsFFHhbGiVEivFaewQaFxvJ8CHSWcskDXs1qZ6IAvfRMSbECsUQlsBY4pdZnhq
sDsiLsNkncQpjzCWJYBH8BIyoW8E3s0iJJbOgpW+WeJ/ljLkneaIJrGywjVVjBu4
GkQe3qLaNeJv1yOBVvzRwuhYJl9QEhNqOhrlH7c03RsBYEt2+t/yXXsDaOzAuSYE
aUVM/yTSvxptestWrDnxwKtLrnnx0TS7Loa7KMGZMWeK5MZf6Gqqwj5rEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdcmfn9hnK517W8kcyrrFEc9DqQMB8GA1UdIwQY
MBaAFLxW23lt7w29tMePJEWr7MFXCm/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84YjliZDktM2Y2Mi00ZTMwLTgwODUt
MWVjNzIxZmEyYTMwLzEvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC84YjliZDktM2Y2Mi00ZTMwLTgwODUtMWVjNzIxZmEyYTMw
LzEvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVJB9T/n
QuULuis2WCcfDWFmEhSe8G/pkU5s32VzLrJJn2p7v/NPao1PgesOuMjSCCTTvtzB
yImXA6x68M7nm2yz29Y0Z6rHwkbMV5plvIVo7SwPQXevq5uXh1eI42wacqnOZLDT
eUUm9hquj7jTkbMfi2Wycpg5bwn+YcXiHsQt7z/ITLDNFtlL8kzawgbbfH8VHPzd
ixPdQ1PA/GCKG3IefGzosopsV/GzjYOjyUMZlrP1t/les4u1gzF2ktT5j+SC5peQ
gZ7MvdcIO2R1JhRKm/vqQStPgK+1jW+cAF1ov2s/TeAmW7PGxmyqwaI1BOYKdryH
QtmbwCSWFx2flA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:45:55 2026 by rpki-client