Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: K47UnwK156PMn3BbX06qRKM/dl/NDHVmnhW7uoidjjM=
Subject key identifier: AD:D0:08:B0:E9:A3:C7:C4:F7:22:4A:4D:74:16:86:A5:F2:37:6E:8B
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 01A0C8216708BA49DC14C97D61610F247A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 0723
Signing time: Tue 22 Sep 2026 08:00:27 +0000
Manifest this update: Tue 22 Sep 2026 08:00:27 +0000
Manifest next update: Wed 23 Sep 2026 08:00:27 +0000
Files and hashes: 1: B34oPqlHImuH-HLoSxcYGHAVzXE.roa (hash: plTjEu9raIH59d+0TjlxC3YT2Qr6OxqXsZp3Znz5WRQ=)
2: FkDSObsiidn9XZeIw1lExVCwjQM.asa (hash: VzsOYBqqpd4u4HzkRfGMKmSD2wmsL9WFz3sLAKUaZT4=)
3: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: txOEXtUcbbdxJBDCXMNO90rxbsPls8eS/ADGAVzseIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:67:08:ba:49:dc:14:c9:7d:61:61:0f:24:7a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Sep 22 08:00:27 2026 GMT
Not After : Sep 23 08:00:27 2026 GMT
Subject: CN=add008b0e9a3c7c4f7224a4d741686a5f2376e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:8b:c9:cc:a9:3b:4a:2c:53:4f:a7:cf:a9:
2b:c5:a0:75:e4:06:17:d1:5e:84:c4:db:0c:8b:1b:
5b:7e:e2:6f:a8:20:42:b0:b9:3a:38:3a:bf:29:03:
8b:32:5b:0e:09:23:34:4f:f2:f1:bf:5e:0a:63:2e:
a4:ff:bd:9c:fb:91:b2:49:f9:de:f6:2f:cd:1c:de:
fe:1b:1f:b9:91:e3:cd:e8:e7:b9:4a:01:9a:55:66:
42:45:3f:0a:36:dd:4c:66:a4:5a:63:20:3c:26:31:
08:00:4f:2f:f9:24:8a:d1:47:98:5f:0b:64:8d:f4:
07:9b:d2:c5:bc:41:32:be:2b:c3:d3:52:ae:6a:d4:
ea:1c:0c:da:a8:43:15:c0:22:82:b2:96:58:bc:48:
5d:ee:89:98:67:6f:c2:23:65:bc:08:59:20:15:9c:
63:e9:13:09:85:1c:29:97:c0:41:97:24:ea:83:7a:
07:40:df:81:fe:02:56:0e:74:db:6d:4c:c2:d4:3d:
34:f3:fd:fa:db:cd:da:37:a7:d6:f8:8c:62:3a:a7:
be:80:1c:78:b1:0c:04:0b:f9:4c:4b:05:4a:11:e3:
f2:dc:c8:25:b7:0a:f8:5c:6e:60:94:8f:fd:1a:e5:
41:51:47:a0:c9:e8:0d:cf:aa:96:eb:98:c5:9e:25:
53:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D0:08:B0:E9:A3:C7:C4:F7:22:4A:4D:74:16:86:A5:F2:37:6E:8B
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d3:a3:e3:9f:46:2d:e2:7a:3b:f7:ca:82:3c:4d:6a:8c:75:
7e:91:07:ba:e6:89:8f:48:0d:dd:a2:69:ed:f6:33:29:ca:a9:
8d:13:92:10:e7:df:a0:6d:2e:7c:26:09:cd:7f:10:80:68:98:
fe:2a:8f:7f:dd:00:93:16:af:4b:12:15:db:cb:f0:c6:4c:ee:
a9:9a:62:4f:51:7f:97:0c:62:39:b2:bd:24:bc:24:95:3c:f2:
ea:b2:2c:2e:ab:cd:db:e6:a7:69:6d:3e:55:c9:33:0c:eb:f6:
5a:37:13:2f:3a:d6:88:2b:73:f0:d3:0b:0e:64:62:e0:9d:36:
0e:43:d2:b9:e7:31:37:6a:ea:90:90:4c:a5:d3:d2:21:fe:b2:
1b:bc:8c:d2:3d:8a:0f:e6:81:79:c8:16:8e:29:7f:ad:61:73:
68:00:2b:c3:06:6c:c2:83:2d:b9:52:bf:a2:05:17:08:9f:4c:
ef:33:d5:37:67:5d:7b:1b:81:dc:be:73:61:e8:c3:46:5f:e3:
81:11:0d:67:dd:39:ce:51:25:7f:ce:c1:a7:09:4c:3b:dd:25:
f2:b7:87:ef:8a:6a:6f:94:b0:b9:c8:00:6f:a0:ba:38:26:8a:
98:02:d2:86:6c:b4:21:7a:c0:e6:2e:97:b4:67:57:7e:27:26:
10:b7:2c:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIIWcIukncFMl9YWEPJHosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMjYxM2UwZjI2ZDM5MDdmMDk2MzQwYmUwNTBjMjAxZDM1
OGQ2ZDUwHhcNMjYwOTIyMDgwMDI3WhcNMjYwOTIzMDgwMDI3WjAzMTEwLwYDVQQD
EyhhZGQwMDhiMGU5YTNjN2M0ZjcyMjRhNGQ3NDE2ODZhNWYyMzc2ZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpqLycypO0osU0+nz6krxaB15AYX
0V6ExNsMixtbfuJvqCBCsLk6ODq/KQOLMlsOCSM0T/Lxv14KYy6k/72c+5GySfne
9i/NHN7+Gx+5kePN6Oe5SgGaVWZCRT8KNt1MZqRaYyA8JjEIAE8v+SSK0UeYXwtk
jfQHm9LFvEEyvivD01KuatTqHAzaqEMVwCKCspZYvEhd7omYZ2/CI2W8CFkgFZxj
6RMJhRwpl8BBlyTqg3oHQN+B/gJWDnTbbUzC1D008/36283aN6fW+IxiOqe+gBx4
sQwEC/lMSwVKEePy3Mgltwr4XG5glI/9GuVBUUegyegNz6qW65jFniVTDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3QCLDpo8fE9yJKTXQWhqXyN26LMB8GA1UdIwQY
MBaAFLwmE+DybTkH8JY0C+BQwgHTWNbVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zNmNkNDAtOTA4MS00MGU2LTk3Yzct
MTYyMGNmZGM3MTE3LzEvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zNmNkNDAtOTA4MS00MGU2LTk3YzctMTYyMGNmZGM3MTE3
LzEvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnNOj459G
LeJ6O/fKgjxNaox1fpEHuuaJj0gN3aJp7fYzKcqpjROSEOffoG0ufCYJzX8QgGiY
/iqPf90AkxavSxIV28vwxkzuqZpiT1F/lwxiObK9JLwklTzy6rIsLqvN2+anaW0+
VckzDOv2WjcTLzrWiCtz8NMLDmRi4J02DkPSuecxN2rqkJBMpdPSIf6yG7yM0j2K
D+aBecgWjil/rWFzaAArwwZswoMtuVK/ogUXCJ9M7zPVN2ddexuB3L5zYejDRl/j
gRENZ905zlElf87BpwlMO90l8reH74pqb5SwucgAb6C6OCaKmALShmy0IXrA5i6X
tGdXficmELcsEQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:07:40 2026 by rpki-client