Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier: BmVz0BJ1LGB25k4AGRs2zWru0osarPqBSIoYlittwZI=
Subject key identifier: 57:04:A4:44:8E:58:30:C4:66:7B:CC:F6:EC:F1:6C:D4:4B:A1:74:29
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial: 019CAAC6093F029980A45037AC1E46BA6B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number: 0E19
Signing time: Sun 01 Mar 2026 19:00:30 +0000
Manifest this update: Sun 01 Mar 2026 19:00:30 +0000
Manifest next update: Mon 02 Mar 2026 19:00:30 +0000
Files and hashes: 1: NMgthEWSDkhf_cRJefWOwwwKa-w.roa (hash: VQXO+94YOu0/0F/wMTO4bq00aYkrqkoxk+yxuAK1KCo=)
2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: UPpH3RR4Tu+D3cm8Mz2kDcolyZ8ZnBGl88HOoSNnlf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:09:3f:02:99:80:a4:50:37:ac:1e:46:ba:6b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Validity
Not Before: Mar 1 19:00:30 2026 GMT
Not After : Mar 2 19:00:30 2026 GMT
Subject: CN=5704a4448e5830c4667bccf6ecf16cd44ba17429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3a:de:cd:03:f8:48:f6:a9:73:58:c9:8a:5c:
6e:80:77:c1:5b:4b:45:05:73:f7:d3:5e:da:e3:8d:
84:87:66:a5:6b:7f:d5:ea:10:fa:66:84:68:b1:3d:
0e:8a:55:0e:b4:a3:4b:03:34:ab:9e:e2:98:eb:f2:
17:c8:c5:db:0e:b8:28:9e:c7:11:91:38:a3:ef:db:
2a:dd:7a:7d:5e:61:03:b9:bd:ed:a7:b3:67:00:4b:
41:12:fe:24:fe:4d:a7:2c:b6:f1:56:e1:fd:69:dd:
21:b4:8a:8e:f0:f0:af:ce:2a:60:85:a8:96:29:dd:
75:c5:3a:9f:90:94:ac:63:fd:f4:12:d9:fe:14:e7:
9b:17:e7:b8:01:37:c5:68:56:05:b9:78:b2:45:80:
56:9e:eb:a2:ff:e6:e3:71:34:e3:c4:55:b7:13:b6:
c7:34:4c:44:09:4f:19:98:99:2d:68:a8:1b:de:3a:
80:42:f0:26:08:bb:77:89:cb:14:30:50:44:f9:a9:
c2:56:96:cf:2c:00:0f:95:6a:6b:ca:43:da:88:db:
c8:bd:2c:2b:45:67:fa:70:80:cb:45:19:3f:cd:5b:
74:58:bd:68:15:f2:a7:e9:63:1f:52:10:2b:bf:a3:
59:ee:43:cf:1b:2e:a7:1e:2d:bc:08:1f:48:34:79:
0d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:04:A4:44:8E:58:30:C4:66:7B:CC:F6:EC:F1:6C:D4:4B:A1:74:29
X509v3 Authority Key Identifier:
keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f5:6a:ca:3b:d4:b8:58:94:09:58:10:73:32:85:6e:cb:0e:
16:27:f0:b9:6d:0b:e8:71:0a:28:31:a6:65:84:de:da:92:5e:
f2:5c:d4:bc:d5:7c:2e:b1:9e:f8:85:74:d4:e8:1c:e5:cf:ff:
04:8f:67:67:bb:90:ce:86:4a:ba:5f:d2:e8:b9:d7:89:3d:6c:
a5:f7:86:b7:6a:67:f8:8e:d7:d8:8c:56:ac:b0:5c:a2:2f:9a:
87:22:6f:b5:2f:d2:96:ce:5d:15:75:a9:24:3c:0d:90:ea:2a:
ad:d5:0e:94:dc:5f:a7:06:b8:a0:2d:b0:ea:04:d7:84:4b:c5:
52:ed:e8:42:26:72:44:4c:81:d5:a8:dc:83:e5:84:45:6f:cf:
b9:57:77:64:92:0d:26:66:f2:d6:89:db:72:f8:1d:c0:21:03:
99:4b:6b:67:60:b4:1a:ea:d3:5a:fa:e6:75:59:a0:0e:95:7c:
d9:ed:c9:54:c7:24:08:a0:9d:ef:ec:f9:ea:f5:42:69:bf:27:
88:54:70:e6:b3:e0:70:38:ef:47:e4:0e:96:19:bc:80:ac:90:
86:11:7e:23:3f:a4:d6:b7:59:7b:7e:3c:ae:25:d7:c1:8f:79:
64:12:6f:58:83:c9:8d:21:e0:f8:62:61:a2:63:c4:15:0a:51:
ae:e4:56:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxgk/ApmApFA3rB5GumteMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOGIxNWMyMzdmMzRjNWM1YzUzNDRiNDA3OWViYjNhNTg5
ZDAxNDgwHhcNMjYwMzAxMTkwMDMwWhcNMjYwMzAyMTkwMDMwWjAzMTEwLwYDVQQD
Eyg1NzA0YTQ0NDhlNTgzMGM0NjY3YmNjZjZlY2YxNmNkNDRiYTE3NDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzrezQP4SPapc1jJilxugHfBW0tF
BXP3017a442Eh2ala3/V6hD6ZoRosT0OilUOtKNLAzSrnuKY6/IXyMXbDrgonscR
kTij79sq3Xp9XmEDub3tp7NnAEtBEv4k/k2nLLbxVuH9ad0htIqO8PCvzipghaiW
Kd11xTqfkJSsY/30Etn+FOebF+e4ATfFaFYFuXiyRYBWnuui/+bjcTTjxFW3E7bH
NExECU8ZmJktaKgb3jqAQvAmCLt3icsUMFBE+anCVpbPLAAPlWprykPaiNvIvSwr
RWf6cIDLRRk/zVt0WL1oFfKn6WMfUhArv6NZ7kPPGy6nHi28CB9INHkNowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcEpESOWDDEZnvM9uzxbNRLoXQpMB8GA1UdIwQY
MBaAFL6LFcI380xcXFNEtAeeuzpYnQFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQt
MzFkZTE3NjlmZDhhLzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQtMzFkZTE3NjlmZDhh
LzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfVqyjvU
uFiUCVgQczKFbssOFifwuW0L6HEKKDGmZYTe2pJe8lzUvNV8LrGe+IV01Ogc5c//
BI9nZ7uQzoZKul/S6LnXiT1spfeGt2pn+I7X2IxWrLBcoi+ahyJvtS/Sls5dFXWp
JDwNkOoqrdUOlNxfpwa4oC2w6gTXhEvFUu3oQiZyREyB1ajcg+WERW/PuVd3ZJIN
Jmby1onbcvgdwCEDmUtrZ2C0GurTWvrmdVmgDpV82e3JVMckCKCd7+z56vVCab8n
iFRw5rPgcDjvR+QOlhm8gKyQhhF+Iz+k1rdZe348riXXwY95ZBJvWIPJjSHg+GJh
omPEFQpRruRWJg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:10:49 2026 by rpki-client