Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: g821GHjQxM1TgKJt4yC2vR+Auuglj9UXxzI+v7oLwx4=
Subject key identifier: D0:CE:7A:4B:88:51:C0:82:29:5E:F8:6F:F6:9B:0B:D1:96:20:D7:5F
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 01A11C3E7DFB6981728F642285B0D2CEAD56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 1A93
Signing time: Thu 08 Oct 2026 16:00:19 +0000
Manifest this update: Thu 08 Oct 2026 16:00:19 +0000
Manifest next update: Fri 09 Oct 2026 16:00:19 +0000
Files and hashes: 1: 1-cSechBeG_43VlV3W2mEZPKzYGE.roa (hash: 9e/rHvRg0gRAUAYkVXIF5QXnGheb2t+lp0PsH5x3v20=)
2: M8hdjmtzd8hrW3Y8l4qmpPKkDK0.roa (hash: J/z8EzYcLAwxjC5JuidTonZF1YMKXrRg2Bt2mDC3F7U=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: gB2ZLOzg5XDY1O8kXpIS3g9lCM77sVoqfKvbPr3D6GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:3e:7d:fb:69:81:72:8f:64:22:85:b0:d2:ce:ad:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Oct 8 16:00:19 2026 GMT
Not After : Oct 9 16:00:19 2026 GMT
Subject: CN=d0ce7a4b8851c082295ef86ff69b0bd19620d75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:d8:5d:4b:7a:9a:7c:6e:0e:1f:c3:ad:cc:
01:8e:48:a4:f2:fc:2f:d8:d2:7d:91:95:44:10:fd:
64:33:ea:e8:8b:c1:e8:9b:19:49:ff:03:17:1b:b6:
29:4c:3a:d6:c5:67:5d:de:2c:b8:59:aa:98:08:ec:
1e:30:16:ee:c6:5c:3d:79:8d:fd:8b:51:32:34:eb:
4b:ba:f4:18:bf:21:f1:ee:d0:42:fd:82:9a:7e:e5:
40:fc:19:e9:5c:90:4a:10:df:0e:1e:d4:7a:16:fd:
71:92:18:47:62:e0:20:b0:a4:33:32:b5:0c:6b:9e:
49:d1:82:62:65:b6:46:d4:b8:9d:9e:2c:59:12:5c:
48:05:ff:e2:ce:0c:70:7c:d2:8f:62:b7:d4:59:1a:
6c:6f:31:db:bb:22:9d:3d:06:be:04:a1:cf:ce:ad:
c8:d5:41:5d:78:19:96:8a:f1:9d:1b:8c:83:68:6f:
24:4e:7a:89:6b:13:e0:c8:20:81:64:b3:b1:ad:fd:
13:8e:57:b5:86:32:4f:7f:88:3a:6d:67:a4:8f:6a:
2a:87:b6:33:55:5e:b4:0a:6e:e7:b9:f1:d1:5e:cc:
33:eb:00:e9:f1:d3:39:0f:41:88:17:03:4a:44:fd:
dc:11:05:58:e0:a7:60:89:cb:9b:65:4c:e5:06:58:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CE:7A:4B:88:51:C0:82:29:5E:F8:6F:F6:9B:0B:D1:96:20:D7:5F
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d9:54:e9:c1:09:aa:ce:57:35:ee:1d:ba:bd:c4:2a:0d:45:
96:b9:af:28:97:8b:0e:3d:f8:bc:06:02:15:b0:54:86:6c:e7:
c4:ce:d8:23:1b:1f:9d:c6:ae:c7:7a:72:58:37:3b:af:d9:87:
36:b5:a3:6a:3a:5e:fc:c3:c7:46:9e:8f:29:fa:3e:b2:7f:4f:
8d:94:75:fb:4c:34:53:e0:9c:cd:12:40:29:50:75:14:9f:a5:
b5:97:04:99:17:a6:3e:3b:55:a1:25:f5:3f:97:d2:6f:36:be:
00:58:19:a0:e7:ef:f3:be:c0:ba:3d:51:a8:fa:b7:be:8b:91:
4b:b3:7b:15:97:97:e3:1e:ec:9c:13:37:00:6f:1d:6e:af:36:
5a:ff:a4:8d:9a:23:ee:b6:a0:f7:9d:f9:d1:25:56:db:1c:91:
a8:cc:74:69:43:55:5a:89:b8:a5:ac:39:84:58:73:88:69:6c:
ea:c9:fb:15:78:03:31:d5:bd:40:fd:a2:37:4f:43:5b:0b:7f:
94:e9:c8:d9:31:d2:73:81:1b:19:f2:e8:d4:73:da:34:fe:33:
a1:a8:a7:03:a3:94:5b:d9:40:99:e4:3b:30:19:5c:b8:fd:a0:
3f:6f:44:b1:4e:e5:8b:ac:34:e8:02:aa:a8:61:69:5a:37:23:
a4:dc:8e:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEcPn37aYFyj2QihbDSzq1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjgwNTk5MmU2NTMxZDNkYTMxZWUxYWY2YmNkNWMwNmQw
MmI2Y2EwHhcNMjYxMDA4MTYwMDE5WhcNMjYxMDA5MTYwMDE5WjAzMTEwLwYDVQQD
EyhkMGNlN2E0Yjg4NTFjMDgyMjk1ZWY4NmZmNjliMGJkMTk2MjBkNzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDzYXUt6mnxuDh/DrcwBjkik8vwv
2NJ9kZVEEP1kM+roi8HomxlJ/wMXG7YpTDrWxWdd3iy4WaqYCOweMBbuxlw9eY39
i1EyNOtLuvQYvyHx7tBC/YKafuVA/BnpXJBKEN8OHtR6Fv1xkhhHYuAgsKQzMrUM
a55J0YJiZbZG1LidnixZElxIBf/izgxwfNKPYrfUWRpsbzHbuyKdPQa+BKHPzq3I
1UFdeBmWivGdG4yDaG8kTnqJaxPgyCCBZLOxrf0Tjle1hjJPf4g6bWekj2oqh7Yz
VV60Cm7nufHRXswz6wDp8dM5D0GIFwNKRP3cEQVY4KdgicubZUzlBlgZiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDOekuIUcCCKV74b/abC9GWINdfMB8GA1UdIwQY
MBaAFL8oBZkuZTHT2jHuGva81cBtArbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83NTg0NjctNjgxOC00ZTg0LTg3YmEt
NWQ4Mzg2NjhiZWJlLzEvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi83NTg0NjctNjgxOC00ZTg0LTg3YmEtNWQ4Mzg2NjhiZWJl
LzEvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNlU6cEJ
qs5XNe4dur3EKg1FlrmvKJeLDj34vAYCFbBUhmznxM7YIxsfncaux3pyWDc7r9mH
NrWjajpe/MPHRp6PKfo+sn9PjZR1+0w0U+CczRJAKVB1FJ+ltZcEmRemPjtVoSX1
P5fSbza+AFgZoOfv877Auj1RqPq3vouRS7N7FZeX4x7snBM3AG8dbq82Wv+kjZoj
7rag95350SVW2xyRqMx0aUNVWom4paw5hFhziGls6sn7FXgDMdW9QP2iN09DWwt/
lOnI2THSc4EbGfLo1HPaNP4zoainA6OUW9lAmeQ7MBlcuP2gP29EsU7li6w06AKq
qGFpWjcjpNyOHQ==
-----END CERTIFICATE-----
Generated at Fri Oct 9 00:11:41 2026 by rpki-client