Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
File: vB0gk2YmtVdDxllFEt5C75-OkF8.mft (raw, json)
Hash identifier: +7yAaax02aDurzIcSYYJZ6jTfE866iY96rd1Khr398g=
Subject key identifier: 09:6C:21:97:00:AB:21:B6:15:BF:B6:4E:AA:18:4E:B0:E5:CF:1C:A3
Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
Certificate issuer: /CN=bc1d20936626b55743c6594512de42ef9f8e905f
Certificate serial: 01A0DA287385714826C45F32322F607B3183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 20:01:19 +0000
Manifest this update: Fri 25 Sep 2026 20:01:19 +0000
Manifest next update: Sat 26 Sep 2026 20:01:19 +0000
Files and hashes: 1: UQtxD39HgTwCJsw7WuZPliVb6kM.roa (hash: IcgnZ/5C7YQ9lKupVnJEvIWHWfxL8KqAvTe7EONdw78=)
2: vB0gk2YmtVdDxllFEt5C75-OkF8.crl (hash: 0XjvZyioIie0ms7Y1as25pLCXP+DdoLKxlj56Bcfq0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:73:85:71:48:26:c4:5f:32:32:2f:60:7b:31:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f
Validity
Not Before: Sep 25 20:01:19 2026 GMT
Not After : Sep 26 20:01:19 2026 GMT
Subject: CN=096c219700ab21b615bfb64eaa184eb0e5cf1ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:1e:b4:3a:06:53:d0:97:cc:b6:be:0b:c9:
18:d5:0c:51:53:f5:68:37:4d:76:4d:2b:89:47:6a:
68:2f:e9:06:e3:33:c5:cc:34:ab:65:df:e8:ed:97:
64:df:79:6f:b9:1b:4d:d6:f6:fd:ce:d5:e0:32:37:
a4:69:f9:67:ba:fe:38:48:ba:58:67:e4:3c:10:ee:
d5:1e:4c:67:4f:c6:28:21:4e:ea:85:a7:e1:5d:17:
e4:43:8d:20:24:d7:c9:6d:c5:d1:43:e8:5c:93:77:
ac:e5:1f:65:dd:15:4f:21:56:8d:c1:98:36:60:09:
a6:c3:11:9a:3d:49:ae:3a:34:10:da:49:a4:67:ec:
f2:2d:52:b3:fa:5e:55:d0:52:c9:cc:67:ff:cf:11:
d4:4e:c8:75:72:40:25:a4:7f:5c:25:14:32:a5:55:
36:73:f4:2d:2e:3d:8f:62:be:28:cf:9d:46:89:c4:
e8:bc:47:17:ec:c8:78:ea:14:52:f1:68:f3:51:19:
ff:94:9c:e7:24:94:2a:d4:38:89:9c:99:66:d2:9a:
62:31:a8:17:7c:3e:a3:6a:60:0d:83:ba:d8:74:b9:
b8:68:f8:62:f9:d3:a6:b6:0c:bf:17:f3:82:34:13:
7d:e8:7d:5d:25:65:d5:50:4b:fe:22:de:61:26:c6:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6C:21:97:00:AB:21:B6:15:BF:B6:4E:AA:18:4E:B0:E5:CF:1C:A3
X509v3 Authority Key Identifier:
keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1d:45:f8:0d:1b:05:ab:5a:7d:19:1e:92:4d:c8:bb:f2:4a:
06:05:4f:e8:63:13:42:9b:2c:3b:d7:5a:c0:8e:c0:30:a5:22:
92:9f:46:29:2c:d8:30:75:e5:89:f0:88:e4:2c:6b:98:23:9f:
16:06:a4:5f:87:40:c0:4d:d5:ce:1f:bf:06:16:81:8e:30:2e:
5f:ce:6f:30:d2:35:52:59:5c:c8:ee:31:08:39:32:6f:ac:84:
8b:59:7d:c7:27:f8:8c:8a:cf:95:43:af:6d:c6:50:b1:38:63:
f5:2b:bf:9b:21:17:ab:24:ca:79:2b:49:e8:7e:92:05:e2:a3:
a7:c4:d2:10:f8:ed:5b:86:56:f7:6d:d4:da:78:fc:3c:25:fe:
c9:0f:b1:f4:5a:ca:da:a6:27:f3:02:90:3e:97:78:70:4c:68:
9c:ce:06:7b:09:38:82:cc:01:17:02:52:62:f4:6e:53:cd:1c:
fe:ad:16:cc:5a:f9:a6:b1:d4:02:1e:f8:99:43:84:a2:27:88:
ba:0a:6a:25:67:de:aa:b7:fc:3b:61:6d:da:af:5c:84:bc:54:
69:6e:b5:f0:75:7e:e0:dd:a9:e7:e7:c4:a8:73:d7:9a:63:06:
8b:79:73:5a:4d:12:e6:6d:9d:83:13:8a:b3:44:1f:12:c8:fc:
80:37:e6:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKHOFcUgmxF8yMi9gezGDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMWQyMDkzNjYyNmI1NTc0M2M2NTk0NTEyZGU0MmVmOWY4
ZTkwNWYwHhcNMjYwOTI1MjAwMTE5WhcNMjYwOTI2MjAwMTE5WjAzMTEwLwYDVQQD
EygwOTZjMjE5NzAwYWIyMWI2MTViZmI2NGVhYTE4NGViMGU1Y2YxY2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQMetDoGU9CXzLa+C8kY1QxRU/Vo
N012TSuJR2poL+kG4zPFzDSrZd/o7Zdk33lvuRtN1vb9ztXgMjekaflnuv44SLpY
Z+Q8EO7VHkxnT8YoIU7qhafhXRfkQ40gJNfJbcXRQ+hck3es5R9l3RVPIVaNwZg2
YAmmwxGaPUmuOjQQ2kmkZ+zyLVKz+l5V0FLJzGf/zxHUTsh1ckAlpH9cJRQypVU2
c/QtLj2PYr4oz51GicTovEcX7Mh46hRS8WjzURn/lJznJJQq1DiJnJlm0ppiMagX
fD6jamANg7rYdLm4aPhi+dOmtgy/F/OCNBN96H1dJWXVUEv+It5hJsaPiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlsIZcAqyG2Fb+2TqoYTrDlzxyjMB8GA1UdIwQY
MBaAFLwdIJNmJrVXQ8ZZRRLeQu+fjpBfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iZmRhMTItNzZiMy00M2IyLTg4ZTgt
MWYxZGM1MmJiYjk4LzEvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iZmRhMTItNzZiMy00M2IyLTg4ZTgtMWYxZGM1MmJiYjk4
LzEvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADB1F+A0b
BatafRkekk3Iu/JKBgVP6GMTQpssO9dawI7AMKUikp9GKSzYMHXlifCI5CxrmCOf
FgakX4dAwE3Vzh+/BhaBjjAuX85vMNI1UllcyO4xCDkyb6yEi1l9xyf4jIrPlUOv
bcZQsThj9Su/myEXqyTKeStJ6H6SBeKjp8TSEPjtW4ZW923U2nj8PCX+yQ+x9FrK
2qYn8wKQPpd4cExonM4Gewk4gswBFwJSYvRuU80c/q0WzFr5prHUAh74mUOEoieI
ugpqJWfeqrf8O2Ft2q9chLxUaW618HV+4N2p5+fEqHPXmmMGi3lzWk0S5m2dgxOK
s0QfEsj8gDfm7Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:59:49 2026 by rpki-client