Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
File: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft (raw, json)
Hash identifier: 23NPSGmZigCgvAz62+LpQAnUD+B04phJs6XwXeBilGQ=
Subject key identifier: 60:2E:C4:BE:5F:52:24:89:45:49:FE:77:3F:AE:EA:6C:CA:A9:05:77
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 019CAC46EE0B4396FBC11077BF1D3331A2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
Manifest number: 0E59
Signing time: Mon 02 Mar 2026 02:00:55 +0000
Manifest this update: Mon 02 Mar 2026 02:00:55 +0000
Manifest next update: Tue 03 Mar 2026 02:00:55 +0000
Files and hashes: 1: 12tltfCljlEYMIbTWGrshb-SAeM.roa (hash: gcDZCYE+ZRPEnVs814Hmugxl9mDk2tU0oopZwD2L8YE=)
2: UdOK24rX42pM0mffUIAyGxdh1jE.roa (hash: ge3c0pE7ZRxzrWSr8Lljan5nhFZFuIJr7TBmymDbjSA=)
3: YXyKSQA62yKkb7oIprfQWpNYq5k.roa (hash: 2S/w+1qpceETf27eC9DVFe1O3Yuo2aVT1QqWaFNm3nw=)
4: fR8Sj7qPvSsegrc5cvXE_3c58VA.roa (hash: valE9KfmP8wJDIQ+h1QKYZFv8JH48MGyAU5h4M83KlM=)
5: hLYAlv4Lh0bY3QSzIaEKpidUNhc.roa (hash: 86deeND43J6o/LVaKUcKau2VOr6OHvLSqsJsfXpJwdk=)
6: iPr-3aReS8Bu8jQGyImbje9HCkg.roa (hash: t3TDjx6zAVg15JUtNTbV0PPEzsmUJJtEmJ9z73yjKGk=)
7: leGB8m29RWjK_iumLxdAPO-LbVQ.roa (hash: re/2P2K5TSI3Dvi9H7hljx/2KFrMsGS/uaXIMLDOibU=)
8: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl (hash: cxmZrt8a7cPSSB6bXT2RvPh1rj+5YzdJD/eVLUAz2JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ee:0b:43:96:fb:c1:10:77:bf:1d:33:31:a2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Mar 2 02:00:55 2026 GMT
Not After : Mar 3 02:00:55 2026 GMT
Subject: CN=602ec4be5f5224894549fe773faeea6ccaa90577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:54:9f:c4:88:5b:63:1f:53:0c:9c:49:ca:
e2:11:09:d9:26:7a:98:9b:47:c8:91:ea:87:d0:5e:
0a:98:22:08:12:6b:ed:bb:02:f9:ea:7e:84:ee:f6:
61:be:5d:ff:64:47:11:a8:0e:ff:47:36:d7:2e:fe:
5e:d3:5a:ef:35:b3:eb:aa:39:7f:dd:0c:77:0e:ca:
99:d0:a2:dc:1f:74:a6:04:02:b0:1a:d6:c2:14:18:
41:73:cc:7a:64:aa:2a:a8:05:0a:18:a0:0b:53:1b:
2d:79:9b:14:ae:b2:33:7c:94:13:52:67:be:32:04:
44:31:ff:59:db:b9:9b:fd:38:0b:21:ed:12:c0:d5:
64:57:1d:c9:70:23:10:66:ab:80:f8:61:49:88:e7:
54:36:e4:da:90:15:00:2c:fb:a6:ec:8e:77:83:b0:
69:9c:cc:68:eb:d6:14:fc:f0:b0:45:80:3e:16:81:
a4:eb:6c:4a:c3:ec:2b:1c:a8:eb:14:b5:09:6e:45:
e4:11:c8:13:fb:83:3b:c0:09:96:bd:cd:fb:b8:a9:
df:88:bb:44:df:10:ab:16:1b:90:84:63:b9:22:28:
32:a8:11:c7:ac:81:a3:40:1d:0d:b0:95:ea:ea:6c:
8e:e6:9b:a7:3f:f7:ce:93:34:68:47:89:dc:09:62:
24:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2E:C4:BE:5F:52:24:89:45:49:FE:77:3F:AE:EA:6C:CA:A9:05:77
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:21:b2:df:af:8a:ac:c0:00:4a:55:74:47:3f:26:44:d6:00:
f2:81:4f:2f:71:34:dd:69:26:45:76:6a:28:4d:52:2f:64:e8:
47:0a:7d:5d:91:dc:5e:ee:68:51:56:a8:bf:6e:c0:85:31:b3:
63:f7:e7:73:cb:6a:db:09:41:f9:d1:82:8e:88:cc:66:33:9e:
d8:33:bd:e2:67:ca:3f:48:ad:f5:91:e4:9d:32:12:4d:51:dc:
e4:08:30:45:34:09:eb:d8:cd:0d:da:e5:7a:dc:63:e7:fc:77:
b6:5a:42:e5:d2:56:3e:dc:09:bb:c3:50:36:89:f3:18:c9:89:
7d:6d:51:29:b4:c5:01:47:06:c4:c0:a9:b9:b1:1a:87:9a:22:
69:b1:42:9f:b1:2b:2e:f9:86:95:3d:66:1b:1d:97:76:c3:23:
d8:97:a8:8b:fa:a3:32:e0:87:77:c5:59:37:fd:66:cf:f9:90:
84:0c:5c:8a:87:3c:5e:f6:be:99:ea:e3:7a:ea:57:e8:77:8d:
dc:ac:f5:33:11:a3:0d:0c:19:f2:44:2c:71:9d:f5:b4:f3:a1:
5f:04:d5:5c:c6:1b:38:3b:a1:89:4a:52:b6:5b:5c:ed:78:c4:
02:c2:03:b5:d3:78:36:ad:7a:04:00:8f:85:f6:91:df:a5:f8:
25:a8:fd:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRu4LQ5b7wRB3vx0zMaKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMTlkNDUzNWM3ZTYyYjkyMWU4NTllNjU1N2I4MjFmMjc4
ZTcxNmEwHhcNMjYwMzAyMDIwMDU1WhcNMjYwMzAzMDIwMDU1WjAzMTEwLwYDVQQD
Eyg2MDJlYzRiZTVmNTIyNDg5NDU0OWZlNzczZmFlZWE2Y2NhYTkwNTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdpUn8SIW2MfUwycScriEQnZJnqY
m0fIkeqH0F4KmCIIEmvtuwL56n6E7vZhvl3/ZEcRqA7/RzbXLv5e01rvNbPrqjl/
3Qx3DsqZ0KLcH3SmBAKwGtbCFBhBc8x6ZKoqqAUKGKALUxsteZsUrrIzfJQTUme+
MgREMf9Z27mb/TgLIe0SwNVkVx3JcCMQZquA+GFJiOdUNuTakBUALPum7I53g7Bp
nMxo69YU/PCwRYA+FoGk62xKw+wrHKjrFLUJbkXkEcgT+4M7wAmWvc37uKnfiLtE
3xCrFhuQhGO5IigyqBHHrIGjQB0NsJXq6myO5punP/fOkzRoR4ncCWIk1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAuxL5fUiSJRUn+dz+u6mzKqQV3MB8GA1UdIwQY
MBaAFL0Z1FNcfmK5IehZ5lV7gh8njnFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTct
YzEzMzFmNDlmYzA5LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTctYzEzMzFmNDlmYzA5
LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyGy36+K
rMAASlV0Rz8mRNYA8oFPL3E03WkmRXZqKE1SL2ToRwp9XZHcXu5oUVaov27AhTGz
Y/fnc8tq2wlB+dGCjojMZjOe2DO94mfKP0it9ZHknTISTVHc5AgwRTQJ69jNDdrl
etxj5/x3tlpC5dJWPtwJu8NQNonzGMmJfW1RKbTFAUcGxMCpubEah5oiabFCn7Er
LvmGlT1mGx2XdsMj2Jeoi/qjMuCHd8VZN/1mz/mQhAxcioc8Xva+merjeupX6HeN
3Kz1MxGjDQwZ8kQscZ31tPOhXwTVXMYbODuhiUpStltc7XjEAsIDtdN4Nq16BACP
hfaR36X4Jaj9hA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:09 2026 by rpki-client