Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File: vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier: o+4+WaC4DGepW0WOT9piA2qJfRedtiMmY+f+7Svw8dU=
Subject key identifier: B7:B5:93:00:C6:DA:B4:1D:25:2E:32:FD:AA:DC:8C:AF:BC:90:59:12
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial: 019CAB6BB551E4A88DB4B59DEDF4C256C1CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:01:28 +0000
Manifest this update: Sun 01 Mar 2026 22:01:28 +0000
Manifest next update: Mon 02 Mar 2026 22:01:28 +0000
Files and hashes: 1: Q2LlNZpjm7QSfpQ8SxDMKPen6fs.roa (hash: +LvudqksRpkI5ThHyJo6o0SESZrwUB4lFuLcKBfvGGo=)
2: lb9dWd03BfnM72HsEUOqMfSXM5c.roa (hash: RJsPG6DuVrowjWLhY1jcZaBG3s9HD98PpDetQPQtNn0=)
3: n8D_NKCQjks2jeuzf-VmDEGhJy0.roa (hash: BxlSKmYiJSjve5WPsQ9b002bw4r8+dfXErMK1Yu3iW0=)
4: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: KdkJ5TlAIhfbXzJl+iCsUsNs+xqWCz8N+8RsTk7TbeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:b5:51:e4:a8:8d:b4:b5:9d:ed:f4:c2:56:c1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Validity
Not Before: Mar 1 22:01:28 2026 GMT
Not After : Mar 2 22:01:28 2026 GMT
Subject: CN=b7b59300c6dab41d252e32fdaadc8cafbc905912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:b0:7d:85:1f:30:74:95:88:c9:e1:b0:bb:
cd:79:d5:a4:62:4c:78:83:b2:d1:2e:fc:5a:1d:c2:
79:61:be:f6:ea:04:0e:fa:a9:55:a0:7e:f5:01:ad:
07:71:da:75:88:30:44:30:ee:58:28:09:1c:ec:e0:
3d:2c:2f:20:43:6a:d8:1f:01:26:f4:d0:9d:28:ea:
3e:2f:5d:e7:a4:d4:da:91:cf:d1:ba:0f:35:8b:bb:
e7:7e:f4:16:7b:bc:8c:43:c1:06:9e:6e:6d:b8:1d:
ae:eb:fb:93:8a:c7:56:69:0e:6e:bc:9c:e4:b3:48:
5c:60:b3:2f:3a:09:b8:96:f3:02:5c:40:4f:9c:ce:
65:b9:7d:9d:75:b2:09:05:fc:0f:a1:43:65:ab:22:
f5:4c:ea:d5:65:1c:67:48:83:e0:04:28:99:98:fe:
c8:24:98:29:a0:7b:25:8e:6c:b1:6d:25:a6:aa:55:
4c:0f:2b:4f:ad:fc:14:52:35:27:49:a3:17:45:8b:
83:0c:af:e3:8f:8a:c9:c7:22:f1:70:a9:ca:08:27:
dc:58:ce:21:f3:68:ea:9d:51:59:0e:f3:72:bd:27:
7d:d8:a0:db:c5:1e:36:39:e2:2e:02:51:7d:0e:26:
5d:54:68:0a:e3:83:77:92:c1:70:cd:4f:e2:48:ff:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B5:93:00:C6:DA:B4:1D:25:2E:32:FD:AA:DC:8C:AF:BC:90:59:12
X509v3 Authority Key Identifier:
keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ed:9c:22:bf:c2:5e:90:14:34:06:b3:3c:37:f5:2a:2c:08:
c9:2d:1e:4b:fe:5c:3c:6f:91:b0:c7:fd:2a:d5:20:a0:8f:0d:
d3:50:a0:95:18:34:b6:d0:6d:10:a2:3c:9f:ee:75:05:21:df:
56:e4:5a:e3:76:26:0b:e8:d1:18:e1:08:68:e9:35:ef:17:30:
9e:43:bd:35:94:df:7b:12:5e:b0:06:76:62:4b:81:f2:f9:bc:
19:77:e8:9c:47:64:c5:7f:f3:ca:6d:06:71:e7:55:f0:1a:72:
c5:ea:22:e9:f5:4c:56:f2:8a:01:b8:74:a5:0c:8b:da:4c:14:
ef:d1:d4:3b:be:00:6f:9c:d5:3d:b9:29:5d:19:89:cc:5a:3f:
52:09:26:03:ef:64:26:29:5c:d3:65:42:c8:3c:13:24:eb:ab:
46:76:1a:b5:45:44:50:0a:e9:42:e2:4f:98:50:87:3e:32:a1:
1d:e7:09:c5:b9:8e:68:d3:43:a6:07:6d:d3:64:af:5c:26:1a:
8a:11:ca:f9:35:96:90:ba:b8:6b:b2:f8:e1:72:4e:1e:0b:91:
aa:d7:ff:a3:a4:bc:f3:5d:2a:06:30:dd:4e:7a:60:f3:a3:64:
ac:53:29:5e:a4:15:e9:37:7e:9e:de:5c:33:15:f5:94:d0:e2:
63:70:1b:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra7VR5KiNtLWd7fTCVsHKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjM5Yzc3OTBmYzNkNTc3NjI2ZDViYmYxODYxZTU5Yzli
NDcwYWUwHhcNMjYwMzAxMjIwMTI4WhcNMjYwMzAyMjIwMTI4WjAzMTEwLwYDVQQD
EyhiN2I1OTMwMGM2ZGFiNDFkMjUyZTMyZmRhYWRjOGNhZmJjOTA1OTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw32wfYUfMHSViMnhsLvNedWkYkx4
g7LRLvxaHcJ5Yb726gQO+qlVoH71Aa0Hcdp1iDBEMO5YKAkc7OA9LC8gQ2rYHwEm
9NCdKOo+L13npNTakc/Rug81i7vnfvQWe7yMQ8EGnm5tuB2u6/uTisdWaQ5uvJzk
s0hcYLMvOgm4lvMCXEBPnM5luX2ddbIJBfwPoUNlqyL1TOrVZRxnSIPgBCiZmP7I
JJgpoHsljmyxbSWmqlVMDytPrfwUUjUnSaMXRYuDDK/jj4rJxyLxcKnKCCfcWM4h
82jqnVFZDvNyvSd92KDbxR42OeIuAlF9DiZdVGgK44N3ksFwzU/iSP9fNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLe1kwDG2rQdJS4y/arcjK+8kFkSMB8GA1UdIwQY
MBaAFL8jnHeQ/D1XdibVu/GGHlnJtHCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMGRlZWMtNzIzMy00MmYzLTg3Njct
YjU1MDNhMzJlZGZlLzEvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9iMGRlZWMtNzIzMy00MmYzLTg3NjctYjU1MDNhMzJlZGZl
LzEvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+2cIr/C
XpAUNAazPDf1KiwIyS0eS/5cPG+RsMf9KtUgoI8N01CglRg0ttBtEKI8n+51BSHf
VuRa43YmC+jRGOEIaOk17xcwnkO9NZTfexJesAZ2YkuB8vm8GXfonEdkxX/zym0G
cedV8Bpyxeoi6fVMVvKKAbh0pQyL2kwU79HUO74Ab5zVPbkpXRmJzFo/UgkmA+9k
Jilc02VCyDwTJOurRnYatUVEUArpQuJPmFCHPjKhHecJxbmOaNNDpgdt02SvXCYa
ihHK+TWWkLq4a7L44XJOHguRqtf/o6S8810qBjDdTnpg86NkrFMpXqQV6Td+nt5c
MxX1lNDiY3AbMA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:25 2026 by rpki-client