Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft
File: v-x0OQub_hRrfpPpLpiVBCCY5kM.mft (raw, json)
Hash identifier: BQ+H2/BXfIcWJyERc2hETqz6p511lJCppPZFjJLFwSI=
Subject key identifier: 27:0F:C2:FB:B7:90:1E:C0:4D:ED:28:8E:AE:12:63:53:99:D8:93:B2
Authority key identifier: BF:EC:74:39:0B:9B:FE:14:6B:7E:93:E9:2E:98:95:04:20:98:E6:43
Certificate issuer: /CN=bfec74390b9bfe146b7e93e92e9895042098e643
Certificate serial: 019D9A754457FFCB1FDEF7A58299651C52E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft
Manifest number: 33
Signing time: Fri 17 Apr 2026 08:01:09 +0000
Manifest this update: Fri 17 Apr 2026 08:01:09 +0000
Manifest next update: Sat 18 Apr 2026 08:01:09 +0000
Files and hashes: 1: 51iSXNXbLmvTLItGRvoRtGfr2K4.roa (hash: mxwbG4mvPMTjMzVFCzi4Qb5/YZ7wF3FzdOkJfABIOVo=)
2: v-x0OQub_hRrfpPpLpiVBCCY5kM.crl (hash: ri9DCkmAIv4bTcZPdelHwVvVlCTSAZ3bE4ccHJ3JDCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:44:57:ff:cb:1f:de:f7:a5:82:99:65:1c:52:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfec74390b9bfe146b7e93e92e9895042098e643
Validity
Not Before: Apr 17 08:01:09 2026 GMT
Not After : Apr 18 08:01:09 2026 GMT
Subject: CN=270fc2fbb7901ec04ded288eae12635399d893b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:fd:a6:7d:2b:7f:b8:0b:ef:a0:0d:6a:6f:
8b:46:fd:c7:7e:9e:b5:5f:63:ee:34:29:35:cb:d9:
5e:2d:9e:52:52:4b:8d:0c:db:42:83:36:f9:08:26:
17:e8:81:8b:71:9d:59:3e:53:05:dd:59:86:e2:fb:
4f:11:01:c6:3d:d6:19:df:36:33:bf:2c:f1:7c:18:
bc:a5:ee:fd:9c:a9:90:d3:57:8c:c5:2e:43:f7:a6:
74:4a:2d:6f:34:59:cd:b9:0a:8b:a2:d1:f7:0e:66:
b6:28:1b:af:01:53:51:e9:36:ce:a6:00:46:ee:42:
87:1e:9f:70:b3:dd:e8:b4:fb:36:be:a0:20:77:52:
d6:8e:ea:0e:09:9d:ba:7e:31:ff:09:37:c8:89:e0:
53:2d:eb:e8:c8:9f:43:58:21:70:ca:5f:b1:02:e9:
d0:1d:21:81:08:39:e6:4d:6a:d8:58:36:46:5d:ac:
ec:ef:2f:ad:4b:6f:13:2b:49:a0:ca:98:36:6f:9b:
fc:3f:25:c7:07:d2:9f:8a:24:79:41:c8:91:a7:03:
6a:3f:de:4f:14:52:10:41:a9:9a:d6:94:21:9c:56:
b8:0e:5d:dc:f8:7e:d4:06:2c:1b:ad:59:c1:45:75:
20:08:44:5e:a0:1e:cc:98:c2:7b:c0:d9:e5:a0:56:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0F:C2:FB:B7:90:1E:C0:4D:ED:28:8E:AE:12:63:53:99:D8:93:B2
X509v3 Authority Key Identifier:
keyid:BF:EC:74:39:0B:9B:FE:14:6B:7E:93:E9:2E:98:95:04:20:98:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a1:e5:36:ba:ce:f3:b8:cb:a3:6e:cd:b8:57:73:c7:03:b4:
4f:30:6f:71:1a:f7:ff:40:f8:68:96:05:ca:ff:26:88:45:07:
60:3b:03:87:3b:1e:da:23:09:ac:7d:4b:f7:e3:e8:44:a0:55:
cf:8c:fb:2e:ca:ab:7b:75:49:b6:52:8b:76:41:a3:39:65:12:
63:c4:ee:ef:6e:fd:df:ae:13:86:32:7f:35:92:77:3c:8f:f7:
f5:9b:f8:d0:9e:3c:2c:55:ab:2b:6a:dc:cc:5d:71:d7:92:b2:
92:30:b1:15:d9:e4:5c:83:3d:20:e0:1c:97:d4:f3:1a:2d:ad:
bd:c4:8e:cd:ce:9c:4b:2f:a5:59:38:23:33:c4:d6:b2:0a:98:
48:e1:84:b1:90:f6:ba:d6:a4:c8:1c:a4:26:eb:0b:a1:b3:44:
f3:5d:09:f0:aa:d7:bb:ab:04:65:6b:5d:cc:51:73:53:67:d7:
77:5a:02:3b:02:6b:f7:57:de:ab:42:3b:01:e7:f5:27:36:1e:
16:64:38:0c:d6:60:3e:57:40:c8:63:fd:de:1a:a6:01:99:d2:
3e:00:d8:9d:4a:1c:84:58:1f:44:cb:aa:8c:e3:4e:d2:a3:70:
41:54:b0:b6:8e:04:9c:43:e6:5b:95:28:47:59:41:f2:cb:c6:
da:c0:80:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adURX/8sf3velgpllHFLnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZWM3NDM5MGI5YmZlMTQ2YjdlOTNlOTJlOTg5NTA0MjA5
OGU2NDMwHhcNMjYwNDE3MDgwMTA5WhcNMjYwNDE4MDgwMTA5WjAzMTEwLwYDVQQD
EygyNzBmYzJmYmI3OTAxZWMwNGRlZDI4OGVhZTEyNjM1Mzk5ZDg5M2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAr9pn0rf7gL76ANam+LRv3Hfp61
X2PuNCk1y9leLZ5SUkuNDNtCgzb5CCYX6IGLcZ1ZPlMF3VmG4vtPEQHGPdYZ3zYz
vyzxfBi8pe79nKmQ01eMxS5D96Z0Si1vNFnNuQqLotH3Dma2KBuvAVNR6TbOpgBG
7kKHHp9ws93otPs2vqAgd1LWjuoOCZ26fjH/CTfIieBTLevoyJ9DWCFwyl+xAunQ
HSGBCDnmTWrYWDZGXazs7y+tS28TK0mgypg2b5v8PyXHB9KfiiR5QciRpwNqP95P
FFIQQama1pQhnFa4Dl3c+H7UBiwbrVnBRXUgCEReoB7MmMJ7wNnloFYQtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcPwvu3kB7ATe0ojq4SY1OZ2JOyMB8GA1UdIwQY
MBaAFL/sdDkLm/4Ua36T6S6YlQQgmOZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi14ME9RdWJfaFJyZnBQcExwaVZCQ0NZNWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84ZjA2NGUtMDliNC00NzJjLTlhYTQt
NTJjOWFmNjYwYjM3LzEvdi14ME9RdWJfaFJyZnBQcExwaVZCQ0NZNWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84ZjA2NGUtMDliNC00NzJjLTlhYTQtNTJjOWFmNjYwYjM3
LzEvdi14ME9RdWJfaFJyZnBQcExwaVZCQ0NZNWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKHlNrrO
87jLo27NuFdzxwO0TzBvcRr3/0D4aJYFyv8miEUHYDsDhzse2iMJrH1L9+PoRKBV
z4z7Lsqre3VJtlKLdkGjOWUSY8Tu7279364ThjJ/NZJ3PI/39Zv40J48LFWrK2rc
zF1x15KykjCxFdnkXIM9IOAcl9TzGi2tvcSOzc6cSy+lWTgjM8TWsgqYSOGEsZD2
utakyBykJusLobNE810J8KrXu6sEZWtdzFFzU2fXd1oCOwJr91feq0I7Aef1JzYe
FmQ4DNZgPldAyGP93hqmAZnSPgDYnUochFgfRMuqjONO0qNwQVSwto4EnEPmW5Uo
R1lB8svG2sCAVA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:27 2026 by rpki-client