Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
File: vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft (raw, json)
Hash identifier: bBYbfR1LfXAQnxM3RCITHNKfFnU1DC+J3FBoa4RRXBc=
Subject key identifier: 63:62:C1:71:58:40:45:F9:27:F5:A4:50:F6:C3:DC:A3:CD:22:8C:48
Authority key identifier: BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
Certificate issuer: /CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Certificate serial: 019CAC473714921C409F10F1C8E8BE8A787C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
Manifest number: 021D
Signing time: Mon 02 Mar 2026 02:01:14 +0000
Manifest this update: Mon 02 Mar 2026 02:01:14 +0000
Manifest next update: Tue 03 Mar 2026 02:01:14 +0000
Files and hashes: 1: vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl (hash: huSBPqtMfsb4myxwRIVCqEltQzSjl3ERRo+iWA7gXT4=)
2: xnX10RwznEnmTe1E1E5B2rhOTnA.roa (hash: feg+CLsY1TCQ8UES6e5qZUfIKp0hLMvvn81xyTCKGRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:37:14:92:1c:40:9f:10:f1:c8:e8:be:8a:78:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Validity
Not Before: Mar 2 02:01:14 2026 GMT
Not After : Mar 3 02:01:14 2026 GMT
Subject: CN=6362c171584045f927f5a450f6c3dca3cd228c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:52:78:5f:34:ad:c3:19:30:00:80:87:6f:df:
16:57:ce:4e:d2:15:37:29:1d:f1:89:06:e0:87:8b:
27:ef:77:f9:b3:fe:0f:23:3f:5e:30:a6:f2:39:24:
b7:38:98:c3:04:b1:2f:50:d1:ea:22:a2:b9:57:90:
f5:ab:88:c3:94:8b:86:a9:e7:16:b6:00:b4:73:e1:
b8:24:f5:27:bc:dc:49:a6:dc:fc:f9:bf:ed:c6:d6:
79:d9:0b:72:85:c9:e2:60:eb:a6:ba:0b:70:33:18:
37:e0:2f:69:7b:57:13:b3:fa:81:f3:5e:f6:e5:ae:
d9:1d:7c:d0:d5:51:02:18:98:7e:bd:fe:8d:90:7e:
29:65:59:b4:fb:42:f3:95:14:97:5e:01:0c:72:59:
b8:f3:97:de:cc:a5:7a:0f:11:8b:b2:05:e7:a8:13:
e7:9c:6a:95:22:e2:4c:fe:e5:a0:9e:ea:56:cd:9c:
44:0e:ae:14:95:43:fc:6a:9f:0c:59:15:9f:10:f7:
f8:10:39:25:d8:d0:d9:6a:31:b5:99:bf:31:29:1c:
e9:fe:cb:d0:4f:1f:f5:d9:ed:45:9b:74:20:92:10:
c4:25:af:98:06:88:50:f6:a6:4d:74:be:f6:e3:d4:
ad:a8:ca:fa:65:b7:85:ff:83:a0:11:c4:0d:3a:fa:
a8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:62:C1:71:58:40:45:F9:27:F5:A4:50:F6:C3:DC:A3:CD:22:8C:48
X509v3 Authority Key Identifier:
keyid:BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c8:bc:57:20:a3:f5:f4:7e:11:02:26:5a:47:fd:d8:3a:d5:
0b:d0:f0:97:fd:f8:6b:93:75:5b:27:f0:19:46:c8:18:9e:32:
1b:48:8f:84:69:21:57:06:c9:68:5c:80:e3:05:9d:4c:4f:8c:
a0:61:ad:d6:8e:08:0e:d8:d6:b3:8b:18:7e:8b:df:d0:37:bb:
94:75:6e:6d:65:1b:3a:d4:ea:24:2e:73:67:c2:df:89:93:14:
8f:7a:42:b2:ef:33:b4:1e:18:f7:ca:88:cb:39:0f:9d:48:39:
94:48:40:a6:86:46:2e:55:b6:0f:24:1d:77:13:b2:ed:64:fc:
0c:d9:24:77:0d:e7:0d:ab:96:30:b3:ae:82:2e:f3:93:54:cb:
22:31:da:f2:53:79:d0:03:67:03:d3:a8:e3:c5:7a:d5:96:30:
f5:94:11:72:e4:4c:14:a4:2d:c3:fd:cb:19:d1:0a:83:5d:82:
de:f0:17:a1:e8:17:02:da:a7:a3:75:09:b8:d5:7e:1a:83:07:
71:56:e5:9a:f7:8f:7b:d1:75:09:28:3a:d0:a4:26:2d:ef:56:
9c:f3:de:c0:a6:cf:8a:04:58:0a:01:7a:88:04:5b:a4:37:aa:
f0:b6:d6:0c:e4:48:ee:89:57:57:2c:35:18:9c:6e:3a:1a:79:
7e:5f:87:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRzcUkhxAnxDxyOi+inh8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNjg5MmU5OWM4NGExYzVkYzliMTJlMTE0ZDY3YWYxNmMy
NGE5ZDYwHhcNMjYwMzAyMDIwMTE0WhcNMjYwMzAzMDIwMTE0WjAzMTEwLwYDVQQD
Eyg2MzYyYzE3MTU4NDA0NWY5MjdmNWE0NTBmNmMzZGNhM2NkMjI4YzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lJ4XzStwxkwAICHb98WV85O0hU3
KR3xiQbgh4sn73f5s/4PIz9eMKbyOSS3OJjDBLEvUNHqIqK5V5D1q4jDlIuGqecW
tgC0c+G4JPUnvNxJptz8+b/txtZ52QtyhcniYOumugtwMxg34C9pe1cTs/qB8172
5a7ZHXzQ1VECGJh+vf6NkH4pZVm0+0LzlRSXXgEMclm485fezKV6DxGLsgXnqBPn
nGqVIuJM/uWgnupWzZxEDq4UlUP8ap8MWRWfEPf4EDkl2NDZajG1mb8xKRzp/svQ
Tx/12e1Fm3QgkhDEJa+YBohQ9qZNdL7249StqMr6ZbeF/4OgEcQNOvqoRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNiwXFYQEX5J/WkUPbD3KPNIoxIMB8GA1UdIwQY
MBaAFLxokumchKHF3JsS4RTWevFsJKnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkdpUzZaeUVvY1hjbXhMaEZOWjY4V3drcWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82MmQ5ZGQtNzJmMi00MmE3LTk5ODIt
YjY0ZTBmNmEwOWNhLzEvdkdpUzZaeUVvY1hjbXhMaEZOWjY4V3drcWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82MmQ5ZGQtNzJmMi00MmE3LTk5ODItYjY0ZTBmNmEwOWNh
LzEvdkdpUzZaeUVvY1hjbXhMaEZOWjY4V3drcWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMi8VyCj
9fR+EQImWkf92DrVC9Dwl/34a5N1WyfwGUbIGJ4yG0iPhGkhVwbJaFyA4wWdTE+M
oGGt1o4IDtjWs4sYfovf0De7lHVubWUbOtTqJC5zZ8LfiZMUj3pCsu8ztB4Y98qI
yzkPnUg5lEhApoZGLlW2DyQddxOy7WT8DNkkdw3nDauWMLOugi7zk1TLIjHa8lN5
0ANnA9Oo48V61ZYw9ZQRcuRMFKQtw/3LGdEKg12C3vAXoegXAtqno3UJuNV+GoMH
cVblmvePe9F1CSg60KQmLe9WnPPewKbPigRYCgF6iARbpDeq8LbWDORI7olXVyw1
GJxuOhp5fl+H+g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:23 2026 by rpki-client