Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
File: vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft (raw, json)
Hash identifier: Oh1lQbiq37nCoqGjZXIKie0HcX7iOBiR3eXsGzyA+Lc=
Subject key identifier: 52:93:8F:57:D9:07:5D:7B:2F:BF:93:12:3D:7C:BB:42:62:2C:2E:65
Authority key identifier: BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
Certificate issuer: /CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Certificate serial: 01A0BDD4D079E8608182B50142FDA0FABF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
Manifest number: 09EB
Signing time: Sun 20 Sep 2026 08:00:35 +0000
Manifest this update: Sun 20 Sep 2026 08:00:35 +0000
Manifest next update: Mon 21 Sep 2026 08:00:35 +0000
Files and hashes: 1: _fu8HVCzSvRt0NkeK2yjKWusuWE.roa (hash: vu5AFCJ2gOF+w3Dk+FLPIQg6RZau2UZ0AeeFgZPuej4=)
2: imlyuPj5F5_zGekGu7dPokpqSlA.asa (hash: XoiU9tHBQPgXDyIZK+nHfznEzCBRBvjsJG2xLG4W4n0=)
3: vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl (hash: f3/bWr3zCDmDrNuqCe+SGJbpp3yPx5/7ivbnNnPELr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:d0:79:e8:60:81:82:b5:01:42:fd:a0:fa:bf:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Validity
Not Before: Sep 20 08:00:35 2026 GMT
Not After : Sep 21 08:00:35 2026 GMT
Subject: CN=52938f57d9075d7b2fbf93123d7cbb42622c2e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:7a:cf:57:ec:39:d8:ee:3d:0c:4d:fd:14:
08:29:c5:2b:9e:fb:74:f3:79:23:e1:18:c6:50:0a:
2d:79:f8:fa:6e:36:29:8a:e4:19:e7:f0:ec:19:2c:
42:c5:f3:cb:09:ed:1b:6e:c5:eb:2a:54:d2:b4:f2:
65:0a:0e:2b:e3:9a:5d:af:8c:d6:c9:84:4d:1b:c7:
61:5b:96:b0:a7:1b:90:d2:8e:aa:2c:01:93:52:19:
1b:e8:21:c3:b2:a8:10:c5:4f:e1:b3:d5:87:ec:7f:
a6:c8:ad:d4:2a:82:36:c2:cd:10:86:f6:3c:51:01:
d2:fd:0d:3e:a3:1d:75:16:94:ad:d1:ed:52:cb:ca:
97:c3:1e:9b:d0:f3:35:6a:dd:ac:a6:1f:d4:0d:cd:
b5:3c:5f:e6:c1:4d:74:62:7c:c8:3d:d1:61:58:ef:
75:1b:a5:1a:90:cd:e7:b1:28:c5:96:4e:ec:c5:12:
b2:ea:1f:5d:3d:56:16:b5:6f:5e:90:29:9c:de:12:
29:d9:6b:2c:2d:fd:87:cf:96:0a:fe:45:fc:a3:b8:
eb:a3:72:cd:2b:b8:7a:49:81:f3:1d:01:ac:26:99:
13:f9:e9:13:f1:8d:17:61:4a:d7:de:a0:e2:d3:3f:
7f:a2:b9:67:53:31:9c:76:05:25:d4:16:65:56:af:
14:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:93:8F:57:D9:07:5D:7B:2F:BF:93:12:3D:7C:BB:42:62:2C:2E:65
X509v3 Authority Key Identifier:
keyid:BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d9:c3:89:04:9c:bc:5c:78:a2:7d:38:35:90:2f:fe:b7:ad:
f9:6f:37:22:bc:66:3e:fa:8a:46:45:71:85:4b:de:61:65:be:
22:d3:8c:8b:43:e6:cb:f6:47:f6:41:3c:da:f5:0c:f9:74:70:
ec:f2:f7:13:c8:2d:97:83:68:b1:5f:7e:0d:e5:2a:fb:72:06:
ce:04:cd:3f:e4:00:71:e5:60:1f:82:c9:1e:5b:54:9f:24:4a:
73:46:10:78:67:d3:9e:43:aa:7b:f6:ec:a8:25:4b:27:6d:26:
ec:75:7a:da:8a:91:32:36:14:13:b2:fd:e0:86:62:fc:34:b8:
00:89:86:34:e3:87:a2:c0:2e:d7:ed:be:4e:69:74:7b:39:b0:
5c:1a:9f:46:bf:47:96:19:bc:aa:16:35:30:70:03:f9:4b:93:
b3:33:bd:4a:b9:ae:78:35:31:76:48:40:cc:0a:f4:05:99:7d:
38:af:e2:9b:f7:d3:9c:30:b6:96:74:66:a5:60:17:0d:b5:32:
6f:21:f3:2c:c6:cc:6d:ed:b3:a9:6d:b1:b3:c1:6e:83:5a:e2:
84:9f:3a:55:98:ca:86:41:79:78:ae:f2:91:91:2f:1b:cf:4f:
15:ef:cd:d3:96:64:63:8c:27:2e:f5:5a:cc:cf:b2:92:5c:24:
6c:35:e2:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC91NB56GCBgrUBQv2g+r9ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjQ5NzA0N2YyMGQ2ZjcwOGQ3ZGI0MjU1N2I2OThmYmZi
M2Q4ZmIwHhcNMjYwOTIwMDgwMDM1WhcNMjYwOTIxMDgwMDM1WjAzMTEwLwYDVQQD
Eyg1MjkzOGY1N2Q5MDc1ZDdiMmZiZjkzMTIzZDdjYmI0MjYyMmMyZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDh6z1fsOdjuPQxN/RQIKcUrnvt0
83kj4RjGUAotefj6bjYpiuQZ5/DsGSxCxfPLCe0bbsXrKlTStPJlCg4r45pdr4zW
yYRNG8dhW5awpxuQ0o6qLAGTUhkb6CHDsqgQxU/hs9WH7H+myK3UKoI2ws0QhvY8
UQHS/Q0+ox11FpSt0e1Sy8qXwx6b0PM1at2sph/UDc21PF/mwU10YnzIPdFhWO91
G6UakM3nsSjFlk7sxRKy6h9dPVYWtW9ekCmc3hIp2WssLf2Hz5YK/kX8o7jro3LN
K7h6SYHzHQGsJpkT+ekT8Y0XYUrX3qDi0z9/orlnUzGcdgUl1BZlVq8U/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKTj1fZB117L7+TEj18u0JiLC5lMB8GA1UdIwQY
MBaAFL1klwR/INb3CNfbQlV7aY+/s9j7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldTWEJIOGcxdmNJMTl0Q1ZYdHBqNy16MlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC81ODMzZjMtMjQyMS00MWIwLWJlMmUt
ODJhMTA3YzRhN2UyLzEvdldTWEJIOGcxdmNJMTl0Q1ZYdHBqNy16MlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC81ODMzZjMtMjQyMS00MWIwLWJlMmUtODJhMTA3YzRhN2Uy
LzEvdldTWEJIOGcxdmNJMTl0Q1ZYdHBqNy16MlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAatnDiQSc
vFx4on04NZAv/ret+W83IrxmPvqKRkVxhUveYWW+ItOMi0Pmy/ZH9kE82vUM+XRw
7PL3E8gtl4NosV9+DeUq+3IGzgTNP+QAceVgH4LJHltUnyRKc0YQeGfTnkOqe/bs
qCVLJ20m7HV62oqRMjYUE7L94IZi/DS4AImGNOOHosAu1+2+Tml0ezmwXBqfRr9H
lhm8qhY1MHAD+UuTszO9SrmueDUxdkhAzAr0BZl9OK/im/fTnDC2lnRmpWAXDbUy
byHzLMbMbe2zqW2xs8Fug1rihJ86VZjKhkF5eK7ykZEvG89PFe/N05ZkY4wnLvVa
zM+yklwkbDXifQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:26:01 2026 by rpki-client