Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File: vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier: IlBkgFgRaH/lK7xZyab2e6c0Rygr1RgoaEmSbEExd18=
Subject key identifier: D1:37:CE:EC:95:37:E1:7A:6F:FE:7E:D1:1C:1A:53:D8:F7:D9:17:60
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer: /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial: 019D99D04E032282E4F2C1DEF26213CFF5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number: 0F8A
Signing time: Fri 17 Apr 2026 05:00:58 +0000
Manifest this update: Fri 17 Apr 2026 05:00:58 +0000
Manifest next update: Sat 18 Apr 2026 05:00:58 +0000
Files and hashes: 1: FZljvcxVC3KvOuVQwDjBOz6vLKQ.roa (hash: kpnpQoylGbXqrj/XYTN9KcgWeq6V6Ko8315VlpltUrA=)
2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: 1QesqXaTv1Xk1tI0m7d/zT9ofiaHIfhH+P5Mp07cd7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:4e:03:22:82:e4:f2:c1:de:f2:62:13:cf:f5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Validity
Not Before: Apr 17 05:00:58 2026 GMT
Not After : Apr 18 05:00:58 2026 GMT
Subject: CN=d137ceec9537e17a6ffe7ed11c1a53d8f7d91760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e4:49:5b:4b:31:5f:8b:98:10:78:66:bb:c3:
0a:98:a5:52:27:cb:81:dd:3a:ad:ab:b2:51:bb:25:
ef:54:18:f6:c6:4c:5e:d7:7f:66:2b:6f:63:88:b5:
f3:55:fa:46:7c:89:19:e3:08:33:6b:ad:3b:62:7e:
1a:1f:0c:6e:53:99:e7:33:e0:a8:86:7e:a5:22:a8:
5f:2f:65:a6:9e:23:a2:4c:f7:f1:8b:eb:f8:b9:e5:
15:7a:7d:15:7d:ef:f9:92:1c:41:7c:1d:73:e5:5a:
41:0d:fa:fd:75:e7:eb:4e:3e:79:7f:24:bc:90:4e:
8f:bd:3f:b1:be:27:53:4a:8e:1b:cf:78:33:78:a9:
95:6c:96:11:c5:43:68:4d:89:23:ff:84:bc:9c:7d:
1f:31:48:61:70:34:27:43:a6:33:2c:92:2b:a2:e3:
72:ba:74:ef:95:57:f7:3f:ba:dd:98:5c:e5:b9:ec:
93:79:45:c4:d0:f8:e8:84:6f:d6:bd:75:88:c1:7d:
5c:6f:fe:8c:03:bf:f1:4f:c5:7c:10:69:58:63:2e:
5c:65:37:b6:37:f4:1b:9e:d0:9b:fe:13:5a:d1:c6:
c5:7c:ae:4f:ca:de:17:d3:59:3a:55:0b:b7:bf:45:
b2:e1:04:d3:47:24:be:2e:ce:c1:b7:3a:6d:c1:72:
b3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:37:CE:EC:95:37:E1:7A:6F:FE:7E:D1:1C:1A:53:D8:F7:D9:17:60
X509v3 Authority Key Identifier:
keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:95:65:ba:d6:9c:73:05:c9:b7:58:3d:10:48:49:e8:bc:91:
fd:af:14:e6:52:92:ba:32:12:30:2b:93:fb:ec:b1:84:48:bf:
6b:70:61:28:a1:6d:61:aa:05:07:e0:72:20:0d:1c:2d:59:6e:
78:a3:b5:9a:ac:09:ad:98:2e:d6:11:19:10:1f:64:78:14:7b:
ad:9c:c5:b4:90:72:59:9f:a3:dd:60:f5:6f:0b:c2:ff:f5:7b:
81:46:69:69:bd:a6:f1:24:45:47:b3:76:65:6a:73:23:0c:17:
b0:c6:49:e9:10:8a:fb:ec:9d:1f:08:f4:7b:f4:f5:81:3c:da:
3d:4c:50:cb:2f:0f:42:1b:c2:db:d7:00:a7:39:29:82:e5:ce:
9e:8e:ea:ab:51:fe:11:f5:40:bf:e2:70:3a:75:1b:67:fe:13:
39:ea:5a:3d:96:66:aa:e4:8c:27:44:ad:7d:04:ac:02:7d:9b:
b4:22:9b:82:12:43:90:ac:be:ec:f3:44:34:23:0e:29:be:00:
94:1e:34:d1:a5:4c:f8:b9:88:92:1d:1f:82:98:77:7a:b2:62:
f9:bd:c7:e0:92:d3:4d:27:b8:05:59:96:7d:9a:e8:33:03:16:
7a:88:3d:e5:e2:54:22:c8:e8:82:73:12:2f:b8:93:52:38:80:
7a:ea:3f:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0E4DIoLk8sHe8mITz/XKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOTAzNDAzYzIwYTZjZGIyMjM2NmNjN2FjZjQ4ZTlmOTli
ZTM0ZmYwHhcNMjYwNDE3MDUwMDU4WhcNMjYwNDE4MDUwMDU4WjAzMTEwLwYDVQQD
EyhkMTM3Y2VlYzk1MzdlMTdhNmZmZTdlZDExYzFhNTNkOGY3ZDkxNzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouRJW0sxX4uYEHhmu8MKmKVSJ8uB
3Tqtq7JRuyXvVBj2xkxe139mK29jiLXzVfpGfIkZ4wgza607Yn4aHwxuU5nnM+Co
hn6lIqhfL2WmniOiTPfxi+v4ueUVen0Vfe/5khxBfB1z5VpBDfr9defrTj55fyS8
kE6PvT+xvidTSo4bz3gzeKmVbJYRxUNoTYkj/4S8nH0fMUhhcDQnQ6YzLJIrouNy
unTvlVf3P7rdmFzlueyTeUXE0PjohG/WvXWIwX1cb/6MA7/xT8V8EGlYYy5cZTe2
N/QbntCb/hNa0cbFfK5Pyt4X01k6VQu3v0Wy4QTTRyS+Ls7BtzptwXKz5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNE3zuyVN+F6b/5+0RwaU9j32RdgMB8GA1UdIwQY
MBaAFLyQNAPCCmzbIjZsx6z0jp+ZvjT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkpBMEE4SUtiTnNpTm16SHJQU09uNW0tTlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9kNWU1Y2ItNWIyNy00N2Y2LThhY2It
MDM1MDc4NzIyNWM4LzEvdkpBMEE4SUtiTnNpTm16SHJQU09uNW0tTlA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9kNWU1Y2ItNWIyNy00N2Y2LThhY2ItMDM1MDc4NzIyNWM4
LzEvdkpBMEE4SUtiTnNpTm16SHJQU09uNW0tTlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZVlutac
cwXJt1g9EEhJ6LyR/a8U5lKSujISMCuT++yxhEi/a3BhKKFtYaoFB+ByIA0cLVlu
eKO1mqwJrZgu1hEZEB9keBR7rZzFtJByWZ+j3WD1bwvC//V7gUZpab2m8SRFR7N2
ZWpzIwwXsMZJ6RCK++ydHwj0e/T1gTzaPUxQyy8PQhvC29cApzkpguXOno7qq1H+
EfVAv+JwOnUbZ/4TOepaPZZmquSMJ0StfQSsAn2btCKbghJDkKy+7PNENCMOKb4A
lB400aVM+LmIkh0fgph3erJi+b3H4JLTTSe4BVmWfZroMwMWeog95eJUIsjognMS
L7iTUjiAeuo/TQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:38 2026 by rpki-client