Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
File: vWqnNi02eSy8-oNgm111zJZfP68.mft (raw, json)
Hash identifier: efDJgaL5mdKE+EQ7jnd9yfGoGZ93EzTfNYMCKUuIIRw=
Subject key identifier: 2F:14:F7:68:93:D4:21:8F:6C:2C:35:D0:C6:B1:FF:A5:EA:BA:6D:5E
Authority key identifier: BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
Certificate issuer: /CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Certificate serial: 019CABD97DF572F82F21DF3352F17B2DC782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:23 +0000
Manifest this update: Mon 02 Mar 2026 00:01:23 +0000
Manifest next update: Tue 03 Mar 2026 00:01:23 +0000
Files and hashes: 1: MJsBtMXDsOv4TTZ2efs5vOnxahY.roa (hash: jJGmnHuAyaWahhHhka2WAv2IAmrJwIOdndtEnTBheHs=)
2: vWqnNi02eSy8-oNgm111zJZfP68.crl (hash: GC4SBJ4JfWSwy7eiShfwiix1l9hYnJWvBw9ZDtsxods=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7d:f5:72:f8:2f:21:df:33:52:f1:7b:2d:c7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Validity
Not Before: Mar 2 00:01:23 2026 GMT
Not After : Mar 3 00:01:23 2026 GMT
Subject: CN=2f14f76893d4218f6c2c35d0c6b1ffa5eaba6d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f6:8e:bc:d8:5e:de:18:5a:2f:63:09:58:8b:
2b:7f:76:58:f9:cf:66:96:bd:05:48:37:3a:55:df:
f5:b6:b7:08:d7:57:86:18:65:da:ed:1f:4b:f8:81:
0d:16:d3:7a:e3:55:fc:81:8e:57:14:1c:96:88:3a:
1e:f3:1c:11:0d:a3:a7:02:ef:16:19:47:da:9c:f9:
b4:1d:df:7d:07:dd:ce:a1:bc:a0:f7:1a:43:2d:29:
c2:d5:05:0c:69:dd:38:23:90:c0:f5:fc:bf:e2:6c:
ea:44:83:41:91:4b:ea:e8:d7:c9:d9:ff:5c:a0:7b:
f0:75:dd:66:c1:cb:39:1a:67:84:92:0b:32:04:fc:
30:12:9e:5b:75:6a:72:6d:02:af:a3:b3:84:12:1d:
92:66:56:7c:f4:f1:fd:5d:4f:c6:38:c0:40:03:87:
b0:27:09:45:74:3f:26:a5:0d:41:06:3f:c5:50:82:
a3:7b:5d:9b:ed:8e:36:f9:06:50:6d:87:4e:53:94:
7e:d9:25:7a:c5:90:13:d7:d8:97:9d:d6:2f:05:6c:
fb:3f:23:6b:96:3d:e7:a9:5f:00:1c:b3:16:e7:1a:
6f:9e:9c:71:f5:c2:02:25:fc:2f:78:b8:14:b0:11:
ce:0c:57:23:94:d0:5a:22:c3:22:0b:b0:1c:29:ae:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:14:F7:68:93:D4:21:8F:6C:2C:35:D0:C6:B1:FF:A5:EA:BA:6D:5E
X509v3 Authority Key Identifier:
keyid:BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7b:87:23:44:f2:ae:c1:ac:15:31:f2:04:8a:3b:87:9c:b1:
7e:80:88:0c:7c:9d:f2:dc:be:2a:85:91:7c:b4:d3:d0:74:66:
07:29:a5:b5:63:af:3a:91:4f:7a:32:21:00:4a:ca:1b:41:4b:
a2:8b:09:05:94:4c:01:30:59:a4:ba:02:7f:33:8c:44:6b:e4:
fe:04:07:27:e7:53:b8:fa:45:c8:38:6d:41:4f:3e:5b:ad:4f:
35:9d:2f:e2:35:46:b2:ca:5c:f2:fb:aa:73:fa:5f:72:7a:bd:
7c:a0:ee:4d:21:a5:ad:11:ae:c0:4c:71:d5:2a:c3:a3:c4:42:
85:30:c5:68:7e:cb:29:ef:92:6b:eb:d2:4a:47:3d:31:f3:b8:
22:17:c7:e1:f5:8b:11:2e:40:0e:9e:e4:48:48:a7:13:b5:ff:
a7:ae:b5:5e:87:ae:3a:76:6d:6c:f4:47:75:bb:be:21:f2:c9:
cf:a2:88:ab:06:c9:b2:d8:9f:85:30:e3:61:c5:73:b8:79:6d:
c9:8e:0d:32:a5:60:c0:a4:34:92:44:08:1f:41:33:8d:14:cb:
9e:e5:06:cf:db:93:49:2c:37:90:a3:a5:64:c2:ec:96:ed:87:
ae:04:b0:c4:d2:fb:e2:53:10:02:b5:55:df:7f:7d:1e:5d:0b:
e8:8c:5c:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2X31cvgvId8zUvF7LceCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNmFhNzM2MmQzNjc5MmNiY2ZhODM2MDliNWQ3NWNjOTY1
ZjNmYWYwHhcNMjYwMzAyMDAwMTIzWhcNMjYwMzAzMDAwMTIzWjAzMTEwLwYDVQQD
EygyZjE0Zjc2ODkzZDQyMThmNmMyYzM1ZDBjNmIxZmZhNWVhYmE2ZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfaOvNhe3hhaL2MJWIsrf3ZY+c9m
lr0FSDc6Vd/1trcI11eGGGXa7R9L+IENFtN641X8gY5XFByWiDoe8xwRDaOnAu8W
GUfanPm0Hd99B93Oobyg9xpDLSnC1QUMad04I5DA9fy/4mzqRINBkUvq6NfJ2f9c
oHvwdd1mwcs5GmeEkgsyBPwwEp5bdWpybQKvo7OEEh2SZlZ89PH9XU/GOMBAA4ew
JwlFdD8mpQ1BBj/FUIKje12b7Y42+QZQbYdOU5R+2SV6xZAT19iXndYvBWz7PyNr
lj3nqV8AHLMW5xpvnpxx9cICJfwveLgUsBHODFcjlNBaIsMiC7AcKa47iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8U92iT1CGPbCw10Max/6Xqum1eMB8GA1UdIwQY
MBaAFL1qpzYtNnksvPqDYJtddcyWXz+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldxbk5pMDJlU3k4LW9OZ20xMTF6SlpmUDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mOWE4ZWMtZjU4Mi00NzVjLThjYzkt
ZDVjODYzNWJlYzg4LzEvdldxbk5pMDJlU3k4LW9OZ20xMTF6SlpmUDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mOWE4ZWMtZjU4Mi00NzVjLThjYzktZDVjODYzNWJlYzg4
LzEvdldxbk5pMDJlU3k4LW9OZ20xMTF6SlpmUDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHuHI0Ty
rsGsFTHyBIo7h5yxfoCIDHyd8ty+KoWRfLTT0HRmBymltWOvOpFPejIhAErKG0FL
oosJBZRMATBZpLoCfzOMRGvk/gQHJ+dTuPpFyDhtQU8+W61PNZ0v4jVGsspc8vuq
c/pfcnq9fKDuTSGlrRGuwExx1SrDo8RChTDFaH7LKe+Sa+vSSkc9MfO4IhfH4fWL
ES5ADp7kSEinE7X/p661XoeuOnZtbPRHdbu+IfLJz6KIqwbJstifhTDjYcVzuHlt
yY4NMqVgwKQ0kkQIH0EzjRTLnuUGz9uTSSw3kKOlZMLslu2HrgSwxNL74lMQArVV
3399Hl0L6IxcFA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:47:40 2026 by rpki-client