Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier: TOD3URUYLxoSEO81ZBckvo2uBEuQWQ9CX6y3LCkOUnI=
Subject key identifier: EC:0B:B3:3F:2F:34:30:BB:D6:2D:9C:C6:FD:B8:4F:16:2D:5B:11:F3
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial: 019FAB630B7806D329DA2947538065AB83FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number: 0FA7
Signing time: Wed 29 Jul 2026 01:00:22 +0000
Manifest this update: Wed 29 Jul 2026 01:00:22 +0000
Manifest next update: Thu 30 Jul 2026 01:00:22 +0000
Files and hashes: 1: NMgthEWSDkhf_cRJefWOwwwKa-w.roa (hash: VQXO+94YOu0/0F/wMTO4bq00aYkrqkoxk+yxuAK1KCo=)
2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: rUZ9K5nPrSrmjVXtIvr8tqHN5DUnFTfj7i3e3b8945w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:0b:78:06:d3:29:da:29:47:53:80:65:ab:83:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Validity
Not Before: Jul 29 01:00:22 2026 GMT
Not After : Jul 30 01:00:22 2026 GMT
Subject: CN=ec0bb33f2f3430bbd62d9cc6fdb84f162d5b11f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d1:5a:e6:5e:1b:a1:85:ce:90:57:79:6b:bf:
51:3c:98:ff:78:a5:58:78:f3:65:98:31:a7:11:86:
5b:da:68:1b:bd:42:a3:04:0b:08:28:45:b3:d6:d8:
52:17:51:85:fe:11:e3:f3:3f:dc:ed:fe:5a:76:a2:
4e:80:36:67:55:c0:a9:f5:a8:51:5a:6f:e8:78:0b:
fd:09:3b:ec:d6:17:b5:4e:98:76:b0:70:7a:91:00:
15:52:89:84:6d:34:5b:b9:e1:77:f4:fd:6e:3f:9e:
2f:96:47:2a:6e:66:6c:29:74:25:65:44:75:e6:df:
10:6d:38:ae:7f:bd:47:3d:c0:8d:8f:d1:a0:79:73:
14:47:d8:06:4f:8f:bb:e3:df:ed:31:5d:35:f5:fd:
f5:9a:48:58:17:3e:23:d3:cb:11:52:81:af:f1:dd:
26:02:c3:73:f4:c0:01:53:e6:cc:43:48:10:bf:08:
90:68:2c:26:08:3b:1a:75:08:60:8f:a5:b4:5e:f7:
c9:3a:5d:c7:ad:19:a9:1b:10:8f:cf:53:00:b6:52:
65:a4:98:f8:24:75:30:1e:ce:bc:88:5f:0f:08:50:
64:c3:db:c5:e0:b8:fa:3a:af:de:5b:c9:45:bd:bf:
a5:ce:15:83:a1:17:4b:73:d4:1e:41:95:5b:01:92:
0b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0B:B3:3F:2F:34:30:BB:D6:2D:9C:C6:FD:B8:4F:16:2D:5B:11:F3
X509v3 Authority Key Identifier:
keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:96:6d:b8:da:2b:1a:9b:be:0f:76:03:e5:97:60:50:32:ff:
f9:e4:eb:62:4f:60:0a:17:3d:ab:f8:72:b9:c7:bd:d2:4e:fa:
2e:63:9f:ed:85:51:de:8e:b6:dc:b3:39:01:84:f4:f8:ca:69:
62:ef:d1:cf:58:54:23:2d:2f:f2:39:8d:1b:30:fa:39:1b:4e:
6b:b1:66:d3:6a:99:58:16:9d:5f:cb:9d:bf:96:6a:21:08:64:
25:8f:10:63:b7:37:8f:d7:bd:62:45:b0:96:81:67:a5:22:ac:
cd:fb:ce:e6:4e:f3:ed:a4:9e:51:c8:67:40:54:22:d6:28:05:
16:27:d0:47:91:bc:14:83:0e:cb:ab:56:cc:bd:f4:52:b1:ff:
f1:b5:d8:39:96:f1:66:c0:f2:93:64:d4:de:f7:2a:a8:23:4b:
83:d3:65:53:3d:8e:c5:2b:b9:c3:e8:d8:04:d2:18:a8:28:d2:
50:b9:8a:46:ae:70:ec:c7:fc:d7:f0:39:88:9e:09:6a:34:bc:
a4:1e:56:6b:27:b9:3c:6a:2c:34:de:4b:32:19:4f:4a:0a:e6:
66:a1:34:88:1e:dc:af:8e:61:65:70:49:08:11:68:a7:f1:62:
e9:ef:06:90:a9:ae:11:a1:c1:6b:43:a7:f2:68:fe:d2:d7:0c:
8f:b9:8f:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rYwt4BtMp2ilHU4Blq4P+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOGIxNWMyMzdmMzRjNWM1YzUzNDRiNDA3OWViYjNhNTg5
ZDAxNDgwHhcNMjYwNzI5MDEwMDIyWhcNMjYwNzMwMDEwMDIyWjAzMTEwLwYDVQQD
EyhlYzBiYjMzZjJmMzQzMGJiZDYyZDljYzZmZGI4NGYxNjJkNWIxMWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNFa5l4boYXOkFd5a79RPJj/eKVY
ePNlmDGnEYZb2mgbvUKjBAsIKEWz1thSF1GF/hHj8z/c7f5adqJOgDZnVcCp9ahR
Wm/oeAv9CTvs1he1Tph2sHB6kQAVUomEbTRbueF39P1uP54vlkcqbmZsKXQlZUR1
5t8QbTiuf71HPcCNj9GgeXMUR9gGT4+749/tMV019f31mkhYFz4j08sRUoGv8d0m
AsNz9MABU+bMQ0gQvwiQaCwmCDsadQhgj6W0XvfJOl3HrRmpGxCPz1MAtlJlpJj4
JHUwHs68iF8PCFBkw9vF4Lj6Oq/eW8lFvb+lzhWDoRdLc9QeQZVbAZILGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwLsz8vNDC71i2cxv24TxYtWxHzMB8GA1UdIwQY
MBaAFL6LFcI380xcXFNEtAeeuzpYnQFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQt
MzFkZTE3NjlmZDhhLzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQtMzFkZTE3NjlmZDhh
LzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJZtuNor
Gpu+D3YD5ZdgUDL/+eTrYk9gChc9q/hyuce90k76LmOf7YVR3o623LM5AYT0+Mpp
Yu/Rz1hUIy0v8jmNGzD6ORtOa7Fm02qZWBadX8udv5ZqIQhkJY8QY7c3j9e9YkWw
loFnpSKszfvO5k7z7aSeUchnQFQi1igFFifQR5G8FIMOy6tWzL30UrH/8bXYOZbx
ZsDyk2TU3vcqqCNLg9NlUz2OxSu5w+jYBNIYqCjSULmKRq5w7Mf81/A5iJ4JajS8
pB5Waye5PGosNN5LMhlPSgrmZqE0iB7cr45hZXBJCBFop/Fi6e8GkKmuEaHBa0On
8mj+0tcMj7mP9A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:43:41 2026 by rpki-client