Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier: 3WyT9QNT8U+Jpk/xILtPkU3Ep5l4RMZ4Eh6ALCyuZEw=
Subject key identifier: 05:BD:1E:BE:DB:F0:38:F5:6E:DF:A1:1D:FE:73:73:7C:73:D9:44:CB
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 019CADFE0034D8EB187B6B8E487F0C77CE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number: 17DC
Signing time: Mon 02 Mar 2026 10:00:30 +0000
Manifest this update: Mon 02 Mar 2026 10:00:30 +0000
Manifest next update: Tue 03 Mar 2026 10:00:30 +0000
Files and hashes: 1: 7w9615nIUak6j9qKBSemLYUs4lE.roa (hash: UXmWoVxNa8W/M8yy0s9ag8l2H1J69QCKdRwDtmWIJD0=)
2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: in+nzkwsBDtUCE0i8/PL0wWgHtj1dJPVRWTK9T1V1Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:00:34:d8:eb:18:7b:6b:8e:48:7f:0c:77:ce:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: Mar 2 10:00:30 2026 GMT
Not After : Mar 3 10:00:30 2026 GMT
Subject: CN=05bd1ebedbf038f56edfa11dfe73737c73d944cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:5c:3f:a9:78:c1:fc:a9:7c:e5:18:41:c4:
d5:f3:07:fd:87:19:4d:b5:d8:c4:e9:48:20:f4:7a:
6c:31:fa:0d:eb:8a:64:f6:8f:82:0a:7c:1c:1c:f4:
3f:61:bb:50:04:1f:c5:51:80:6b:f0:96:b2:9e:b7:
7e:53:94:5d:9b:3d:e9:13:dc:89:80:e8:8b:64:65:
c8:2c:f9:61:10:0b:c9:4a:51:d1:db:b1:98:af:a7:
1b:b1:15:fa:28:78:32:9c:1e:c9:75:ca:94:52:ad:
4e:db:9b:b4:d4:fd:ba:d4:ac:90:7e:c4:5d:15:d8:
0e:93:f8:57:14:c1:95:2f:fe:b0:ea:75:4e:7c:20:
3e:7f:41:64:4d:b5:fc:99:a5:e5:cb:a1:e9:54:71:
c1:41:91:aa:38:9a:fc:91:45:5a:24:a9:3a:9f:4d:
fb:b1:4b:36:bb:7f:11:c2:e5:a2:c1:7c:73:89:57:
bd:03:82:43:43:06:fe:fa:6d:e0:8a:56:a6:60:98:
10:85:33:94:5d:1c:25:17:32:aa:f1:aa:9e:05:66:
e0:b2:24:02:f2:b7:4a:a2:32:28:48:d6:17:b6:a5:
92:49:99:9c:30:cd:e9:4c:8f:b6:04:fd:20:43:86:
f6:76:6f:e3:f0:5a:ca:b1:7b:b0:9e:a0:64:2c:e0:
1b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BD:1E:BE:DB:F0:38:F5:6E:DF:A1:1D:FE:73:73:7C:73:D9:44:CB
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9d:29:f2:01:34:75:6b:42:76:b2:63:53:d5:7e:4b:b9:19:
68:96:a1:04:37:b9:a2:ad:e0:4b:86:7f:c7:f2:e2:2e:c4:53:
0d:eb:f6:70:02:d7:e6:29:df:d6:f6:ac:90:ef:d1:6f:13:09:
ac:f0:9d:bc:9a:26:5c:2f:79:96:d9:c5:e8:5e:83:7c:1d:12:
96:da:32:a8:fd:0f:3b:f0:57:e6:d8:e2:f9:44:90:8b:70:19:
ae:e0:28:31:c1:ec:a5:dd:74:fe:da:0a:a9:e4:46:9a:6f:71:
91:88:a2:eb:4a:e1:a7:c0:51:d7:de:a2:6f:47:c0:46:f1:78:
24:c3:f1:5a:aa:7f:e9:7f:3d:41:9d:52:d5:2d:43:9d:aa:06:
40:6f:0f:53:a4:d9:08:b9:d4:6c:17:ce:78:c8:b9:08:67:3f:
7a:86:2b:f0:85:fe:1b:af:b9:6b:4f:6a:30:f7:64:38:e7:bb:
96:21:99:6a:e9:e8:05:d0:3e:e7:f8:6f:96:90:e2:86:21:5f:
83:60:3f:73:14:69:28:6f:5e:56:fd:d1:51:7d:12:54:5e:28:
f2:98:52:3c:42:f2:5c:ba:6c:4c:08:d8:1a:b0:90:69:45:bf:
1e:46:d3:5d:da:c9:51:de:07:52:d6:c5:80:bd:69:30:a1:69:
00:28:df:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/gA02OsYe2uOSH8Md85aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmYzZDk2ZThhYTE0MWQyMmM0MjQyYWVmZjc4YWY3MWVm
OGIyNDQwHhcNMjYwMzAyMTAwMDMwWhcNMjYwMzAzMTAwMDMwWjAzMTEwLwYDVQQD
EygwNWJkMWViZWRiZjAzOGY1NmVkZmExMWRmZTczNzM3YzczZDk0NGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWdcP6l4wfypfOUYQcTV8wf9hxlN
tdjE6Ugg9HpsMfoN64pk9o+CCnwcHPQ/YbtQBB/FUYBr8Jaynrd+U5Rdmz3pE9yJ
gOiLZGXILPlhEAvJSlHR27GYr6cbsRX6KHgynB7JdcqUUq1O25u01P261KyQfsRd
FdgOk/hXFMGVL/6w6nVOfCA+f0FkTbX8maXly6HpVHHBQZGqOJr8kUVaJKk6n037
sUs2u38RwuWiwXxziVe9A4JDQwb++m3gilamYJgQhTOUXRwlFzKq8aqeBWbgsiQC
8rdKojIoSNYXtqWSSZmcMM3pTI+2BP0gQ4b2dm/j8FrKsXuwnqBkLOAbDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAW9Hr7b8Dj1bt+hHf5zc3xz2UTLMB8GA1UdIwQY
MBaAFL3/PZboqhQdIsQkKu/3ivce+LJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjct
M2M3OTg3YzQyYzE2LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjctM2M3OTg3YzQyYzE2
LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMp0p8gE0
dWtCdrJjU9V+S7kZaJahBDe5oq3gS4Z/x/LiLsRTDev2cALX5inf1vaskO/RbxMJ
rPCdvJomXC95ltnF6F6DfB0SltoyqP0PO/BX5tji+USQi3AZruAoMcHspd10/toK
qeRGmm9xkYii60rhp8BR196ib0fARvF4JMPxWqp/6X89QZ1S1S1DnaoGQG8PU6TZ
CLnUbBfOeMi5CGc/eoYr8IX+G6+5a09qMPdkOOe7liGZaunoBdA+5/hvlpDihiFf
g2A/cxRpKG9eVv3RUX0SVF4o8phSPELyXLpsTAjYGrCQaUW/HkbTXdrJUd4HUtbF
gL1pMKFpACjf5g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:38 2026 by rpki-client