Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json)
Hash identifier: mxR1BmTRu0sI4YqJBembVBV/NleCffGpkNpqq4hLPPQ=
Subject key identifier: D0:36:9E:93:F3:2B:50:95:93:2F:85:50:44:50:9A:AA:F5:C3:DC:F5
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 01A0C745FA74FA7C467740F6CCD904BB0D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 04:00:47 +0000
Manifest this update: Tue 22 Sep 2026 04:00:47 +0000
Manifest next update: Wed 23 Sep 2026 04:00:47 +0000
Files and hashes: 1: BnK2KHVLfXFYZprocbcqi0uWmvQ.roa (hash: E9L3OqObWs7fRhTRDrPVJdHDCL6JkfqY/gTeWnuyhvY=)
2: _4nu0JdctABQfG6P-XC3LzNhZBE.roa (hash: nSLbmSJTCheEJNMNCsMJ1fslUe1Nu1RBlbJFPSZy178=)
3: r5h7ruFvhJsuD7J8OUk1-vn3q88.roa (hash: I4bKCAT+IE6ObCvpX9HNYNvEnnDXSrifQq4q4NebNTw=)
4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: Zo/tGt1Tnv67y/Yt4fjp8xaJihfUbBKfigQbXxMVnfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:45:fa:74:fa:7c:46:77:40:f6:cc:d9:04:bb:0d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: Sep 22 04:00:47 2026 GMT
Not After : Sep 23 04:00:47 2026 GMT
Subject: CN=d0369e93f32b5095932f855044509aaaf5c3dcf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:06:d0:82:b1:ab:96:d2:f1:30:a2:b7:75:ff:
b1:d0:d0:ad:5d:83:5f:2c:bd:09:f0:bf:95:2d:14:
9e:ca:b1:00:40:78:2b:38:db:b0:9e:30:04:4d:88:
c5:d7:04:ee:94:81:f3:0b:32:3b:f2:e0:1a:3b:aa:
6c:51:aa:2f:c7:fb:c2:49:1c:cf:2b:d5:84:83:30:
4b:87:39:d4:7a:32:d1:43:24:97:db:92:9e:48:2b:
10:cf:6a:4b:83:d0:c4:f3:f5:f9:5b:aa:c1:f2:21:
6b:29:3f:06:5a:9d:3f:bc:26:f4:dc:4a:7d:45:03:
16:a1:fc:d8:1e:88:3b:12:93:82:13:a6:91:46:ef:
ea:d6:20:51:0a:e6:16:7b:52:0f:25:39:10:22:b4:
29:35:9b:2f:a5:1f:b2:a5:83:a5:93:96:c3:39:25:
46:37:ba:2c:ea:22:e6:30:40:ca:1f:f8:ed:f8:4f:
ec:f3:47:96:9c:8b:24:2b:fd:3d:40:68:74:38:59:
9d:e9:0f:af:f0:b1:69:1c:58:6f:39:3b:5e:50:9a:
d0:08:a1:ac:bb:8f:ec:43:2e:f8:6a:ba:82:fe:bd:
3d:0a:14:38:29:8c:bf:1f:17:7d:71:4d:36:53:dd:
45:4b:d2:80:50:87:e5:26:ad:30:7f:c0:05:66:43:
47:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:36:9E:93:F3:2B:50:95:93:2F:85:50:44:50:9A:AA:F5:C3:DC:F5
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:51:ad:61:7e:31:a5:c8:a2:e0:96:e8:cb:47:77:de:36:48:
7b:6c:38:30:ea:46:d0:4f:0c:a6:75:fd:1e:65:c8:f6:6e:a9:
c0:59:87:bc:e8:d5:ca:76:89:ad:f4:ec:ec:7a:fd:70:b6:72:
8b:14:16:2d:1c:b9:ab:1f:40:cd:d7:32:de:db:8c:c9:5d:9a:
c5:7a:7c:c4:6f:86:eb:c3:e6:67:16:a4:d9:d7:6d:d2:99:08:
66:9e:96:ad:2a:77:6b:64:0c:ac:67:1f:72:82:b8:2b:8f:94:
33:8f:a4:4f:99:27:dd:26:10:83:db:2e:2a:23:19:0c:b8:3d:
3e:72:3f:00:8c:04:60:56:4f:7d:61:69:8d:82:94:29:49:6e:
3e:9f:40:ab:9d:09:19:cc:45:11:cb:b2:6a:d0:d7:33:ca:0d:
9f:1c:79:5d:2c:c7:89:a9:f8:5b:38:7a:27:18:d7:00:67:67:
d8:af:89:fd:0c:fd:fe:4e:32:08:18:8d:7f:7d:b8:c2:94:01:
4c:50:69:44:ba:90:d0:c6:e1:4b:91:e0:5a:86:ea:9c:e7:8c:
60:9e:8a:37:5d:22:37:36:96:1e:e4:0d:c7:38:f3:e1:f0:1a:
e2:6d:fb:a5:3b:7b:87:ef:d2:83:ae:d3:5e:b3:a7:2c:71:91:
09:31:d9:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHRfp0+nxGd0D2zNkEuw0HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZjdhMGEwNDhiNjhlY2NmYTRkNDllYWI0ZjE2ZGM3OTJj
MGQzMTgwHhcNMjYwOTIyMDQwMDQ3WhcNMjYwOTIzMDQwMDQ3WjAzMTEwLwYDVQQD
EyhkMDM2OWU5M2YzMmI1MDk1OTMyZjg1NTA0NDUwOWFhYWY1YzNkY2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAbQgrGrltLxMKK3df+x0NCtXYNf
LL0J8L+VLRSeyrEAQHgrONuwnjAETYjF1wTulIHzCzI78uAaO6psUaovx/vCSRzP
K9WEgzBLhznUejLRQySX25KeSCsQz2pLg9DE8/X5W6rB8iFrKT8GWp0/vCb03Ep9
RQMWofzYHog7EpOCE6aRRu/q1iBRCuYWe1IPJTkQIrQpNZsvpR+ypYOlk5bDOSVG
N7os6iLmMEDKH/jt+E/s80eWnIskK/09QGh0OFmd6Q+v8LFpHFhvOTteUJrQCKGs
u4/sQy74arqC/r09ChQ4KYy/Hxd9cU02U91FS9KAUIflJq0wf8AFZkNHFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNA2npPzK1CVky+FUERQmqr1w9z1MB8GA1UdIwQY
MBaAFL33oKBIto7M+k1J6rTxbceSwNMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgt
MzUxNjE5MWE5ZDY4LzEvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgtMzUxNjE5MWE5ZDY4
LzEvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFGtYX4x
pcii4Jboy0d33jZIe2w4MOpG0E8MpnX9HmXI9m6pwFmHvOjVynaJrfTs7Hr9cLZy
ixQWLRy5qx9Azdcy3tuMyV2axXp8xG+G68PmZxak2ddt0pkIZp6WrSp3a2QMrGcf
coK4K4+UM4+kT5kn3SYQg9suKiMZDLg9PnI/AIwEYFZPfWFpjYKUKUluPp9Aq50J
GcxFEcuyatDXM8oNnxx5XSzHian4Wzh6JxjXAGdn2K+J/Qz9/k4yCBiNf324wpQB
TFBpRLqQ0MbhS5HgWobqnOeMYJ6KN10iNzaWHuQNxzjz4fAa4m37pTt7h+/Sg67T
XrOnLHGRCTHZaQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:25:48 2026 by rpki-client