Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
File: vnApzozJt4fZQyPgyg0U3R4AQ-w.mft (raw, json)
Hash identifier: emu1M6Ufs0IAErzXVlS6+6qvMLnQgVeu/O9OzNXkOww=
Subject key identifier: C9:38:B6:F3:DA:C5:6E:B7:79:6A:BA:7F:2D:28:E6:EB:87:96:CB:85
Authority key identifier: BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
Certificate issuer: /CN=be7029ce8cc9b787d94323e0ca0d14dd1e0043ec
Certificate serial: 01A1076EC0DBFD68896A28E19AA63E0B0045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
Manifest number: 0151
Signing time: Sun 04 Oct 2026 15:01:01 +0000
Manifest this update: Sun 04 Oct 2026 15:01:01 +0000
Manifest next update: Mon 05 Oct 2026 15:01:01 +0000
Files and hashes: 1: PREiP0WtH9ua_lz3N4aim-V6AL8.roa (hash: 1d1XtFoMmk8IeE22KgiEf8/gZMUj3LiFZydzZU53viM=)
2: Rse8KVJ-qnRoFq6yUvasvPGC72s.roa (hash: 5L9ESppL3oc4AteITAQXY4+3w1JEM9PNJuyAgfgBzq4=)
3: vnApzozJt4fZQyPgyg0U3R4AQ-w.crl (hash: Eb+rYDP191grbw6atA9QgR1bDuGqmL4OBXMRr+KcFRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:6e:c0:db:fd:68:89:6a:28:e1:9a:a6:3e:0b:00:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be7029ce8cc9b787d94323e0ca0d14dd1e0043ec
Validity
Not Before: Oct 4 15:01:01 2026 GMT
Not After : Oct 5 15:01:01 2026 GMT
Subject: CN=c938b6f3dac56eb7796aba7f2d28e6eb8796cb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d8:09:23:4d:10:38:45:01:34:05:bd:fa:a9:
d4:2d:f4:af:d0:38:14:b2:c6:8b:f1:37:b8:34:80:
35:19:f2:07:dd:07:15:49:d1:b3:be:d3:5e:cf:47:
e7:24:d8:c3:2f:63:d3:97:bb:e8:26:c3:63:c8:5a:
63:b2:9b:25:1b:38:bc:06:43:6d:6c:ef:28:68:60:
b8:fc:48:bd:22:cb:7a:c2:42:15:e0:3f:d9:1f:a7:
23:cb:fe:2d:13:2d:b5:b0:b6:a6:71:86:bb:58:a0:
5e:21:d0:5d:3e:76:aa:02:2e:c6:99:9c:10:fa:07:
23:55:f2:d0:07:a9:f9:3a:44:27:48:3f:a0:b5:54:
22:3f:48:c4:88:84:fc:42:5e:95:9c:2e:3c:c5:cb:
b4:5e:26:43:ec:c6:64:89:b6:4d:6f:2e:99:65:9d:
73:e9:7a:51:57:fb:c9:b5:fb:d6:cb:f1:67:66:b3:
42:a4:89:d9:a3:92:a0:ca:e2:a1:ae:80:31:28:ab:
d6:9f:66:1e:bc:d1:60:51:92:a5:21:0c:f4:78:55:
0c:a1:c9:1c:3b:f8:5d:21:32:ff:d3:76:1c:6d:1c:
4e:5d:b8:dc:89:34:10:e0:28:61:ef:e3:24:c1:be:
54:08:0a:53:94:08:18:2d:68:70:82:da:8b:c3:ba:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:38:B6:F3:DA:C5:6E:B7:79:6A:BA:7F:2D:28:E6:EB:87:96:CB:85
X509v3 Authority Key Identifier:
keyid:BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b1:e7:9f:77:1e:1f:4b:59:70:46:f2:8a:3f:2b:41:82:ca:
7c:92:75:d9:d3:0e:01:49:03:fe:b2:5d:0e:47:88:9e:24:4e:
89:fe:12:9f:92:18:d2:b6:bd:75:1d:e5:3a:c9:13:bc:44:04:
51:64:32:b4:b5:1b:cf:2c:01:ca:dd:c3:24:8a:85:26:d8:fd:
2c:7b:8d:69:b1:34:f0:d9:a0:26:ea:1d:57:a1:a0:c6:ed:df:
8b:a6:a4:6c:39:bc:c9:b4:85:30:b1:ff:24:39:52:0f:a6:08:
bf:a6:4f:04:22:9a:7a:f5:89:02:ce:44:b8:3c:ef:7c:ac:98:
95:1d:70:5b:30:d1:35:63:b3:8d:e1:f8:32:2e:bf:d2:a6:15:
b1:cb:fb:3b:7c:b2:1b:ae:0b:7b:13:26:b2:2e:ab:95:93:f3:
32:c1:df:fe:d0:be:24:0f:8f:43:c3:ac:87:9b:82:43:d3:80:
18:85:31:2f:fe:79:a8:da:b7:03:6b:d3:d8:6d:b5:c9:19:8e:
a8:23:a0:9f:a0:3d:47:10:ff:c4:17:a8:27:d1:02:94:c5:32:
49:b9:db:26:e2:fb:fd:c7:74:3c:4a:4e:32:8e:9a:c2:2e:af:
29:de:7d:0b:b3:f1:1e:cc:5c:15:c6:82:51:58:da:f7:61:07:
42:17:b7:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEHbsDb/WiJaijhmqY+CwBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNzAyOWNlOGNjOWI3ODdkOTQzMjNlMGNhMGQxNGRkMWUw
MDQzZWMwHhcNMjYxMDA0MTUwMTAxWhcNMjYxMDA1MTUwMTAxWjAzMTEwLwYDVQQD
EyhjOTM4YjZmM2RhYzU2ZWI3Nzk2YWJhN2YyZDI4ZTZlYjg3OTZjYjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29gJI00QOEUBNAW9+qnULfSv0DgU
ssaL8Te4NIA1GfIH3QcVSdGzvtNez0fnJNjDL2PTl7voJsNjyFpjspslGzi8BkNt
bO8oaGC4/Ei9Ist6wkIV4D/ZH6cjy/4tEy21sLamcYa7WKBeIdBdPnaqAi7GmZwQ
+gcjVfLQB6n5OkQnSD+gtVQiP0jEiIT8Ql6VnC48xcu0XiZD7MZkibZNby6ZZZ1z
6XpRV/vJtfvWy/FnZrNCpInZo5KgyuKhroAxKKvWn2YevNFgUZKlIQz0eFUMockc
O/hdITL/03YcbRxOXbjciTQQ4Chh7+Mkwb5UCApTlAgYLWhwgtqLw7ozhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMk4tvPaxW63eWq6fy0o5uuHlsuFMB8GA1UdIwQY
MBaAFL5wKc6MybeH2UMj4MoNFN0eAEPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm5BcHpvekp0NGZaUXlQZ3lnMFUzUjRBUS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNGE0MzItMzY2MS00YmY4LWEyNjUt
NWZmODRlODE2NTliLzEvdm5BcHpvekp0NGZaUXlQZ3lnMFUzUjRBUS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hNGE0MzItMzY2MS00YmY4LWEyNjUtNWZmODRlODE2NTli
LzEvdm5BcHpvekp0NGZaUXlQZ3lnMFUzUjRBUS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLHnn3ce
H0tZcEbyij8rQYLKfJJ12dMOAUkD/rJdDkeIniROif4Sn5IY0ra9dR3lOskTvEQE
UWQytLUbzywByt3DJIqFJtj9LHuNabE08NmgJuodV6Ggxu3fi6akbDm8ybSFMLH/
JDlSD6YIv6ZPBCKaevWJAs5EuDzvfKyYlR1wWzDRNWOzjeH4Mi6/0qYVscv7O3yy
G64LexMmsi6rlZPzMsHf/tC+JA+PQ8Osh5uCQ9OAGIUxL/55qNq3A2vT2G21yRmO
qCOgn6A9RxD/xBeoJ9EClMUySbnbJuL7/cd0PEpOMo6awi6vKd59C7PxHsxcFcaC
UVja92EHQhe37Q==
-----END CERTIFICATE-----
Generated at Sun Oct 4 18:31:07 2026 by rpki-client