Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
File: vAB4on8QAyY8TFYbAlB2by9Sbn0.mft (raw, json)
Hash identifier: wBaWzsbjWHnOpP/vK3oWLhSDrOwUdJDQOmypmhnt4Vw=
Subject key identifier: B3:CB:0A:F9:77:CC:03:FC:0B:7A:B8:2F:F2:70:9D:D9:8B:E1:7E:53
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial: 019D981892FD403F9BBE8E2CBDE9CFB79476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
Manifest number: 0660
Signing time: Thu 16 Apr 2026 21:00:40 +0000
Manifest this update: Thu 16 Apr 2026 21:00:40 +0000
Manifest next update: Fri 17 Apr 2026 21:00:40 +0000
Files and hashes: 1: EJFSOtkmc_lWhhNXUUs4nruRB1Y.roa (hash: mFAyY+U8ccrimuAI66qBOmKYa7OrPg3wRggOsTclU6Q=)
2: vAB4on8QAyY8TFYbAlB2by9Sbn0.crl (hash: xRv9QSGUE3sdqPIVUZuJ6tFrWjiRl5HPWxPpyYesNdQ=)
3: zafpGp_sXGMh4yV6m5qLy7sLUpc.roa (hash: 2igpnziXWmq3SSWSag4FaHfVQQZsNnQ4/MO8icdVPHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:92:fd:40:3f:9b:be:8e:2c:bd:e9:cf:b7:94:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Validity
Not Before: Apr 16 21:00:40 2026 GMT
Not After : Apr 17 21:00:40 2026 GMT
Subject: CN=b3cb0af977cc03fc0b7ab82ff2709dd98be17e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:21:f2:7c:29:dd:56:e3:d9:08:73:92:6a:
e3:e3:28:b3:13:0e:3b:66:72:9d:81:73:0e:cc:49:
b0:0c:51:a1:fd:28:d5:d0:de:a6:e4:34:ee:ba:5a:
32:2d:a7:db:ec:be:2b:e9:0f:e3:f5:5d:ff:f8:89:
fa:27:0a:71:84:f5:c8:a2:c7:0d:b8:b1:77:53:8d:
d9:83:f8:34:fc:53:95:b5:c6:0b:1d:bd:e3:50:b6:
38:72:35:6f:cf:e5:00:e2:18:09:3e:e6:36:60:0e:
cc:e0:fa:57:c1:89:22:96:55:ad:13:5d:3a:26:e4:
52:ae:5c:7a:18:ae:90:80:1d:91:b4:cc:f8:b0:db:
7b:6a:9d:3d:37:3f:d7:04:6a:c7:c8:a2:95:e9:b6:
ac:56:77:75:ea:5d:fc:5f:eb:21:88:31:43:31:62:
f8:00:90:1c:85:c5:55:67:b4:6e:85:b0:f2:b9:17:
13:9e:9d:e6:c5:48:2c:69:bc:ae:fa:36:b8:26:82:
86:74:08:68:0f:45:3f:0c:c9:c8:77:0f:f6:54:50:
e4:ea:76:f5:dc:36:dd:e5:87:85:d8:66:b7:63:8e:
20:ae:8e:ff:89:b2:20:3f:74:71:0c:2b:34:b6:40:
e0:06:b1:3f:e4:7c:f7:4f:1c:35:63:86:7f:c5:ff:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CB:0A:F9:77:CC:03:FC:0B:7A:B8:2F:F2:70:9D:D9:8B:E1:7E:53
X509v3 Authority Key Identifier:
keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b4:f4:b1:c5:45:2a:e5:8a:c9:24:c3:00:72:68:ee:d6:42:
52:5b:a2:73:aa:70:c8:db:5d:d1:2f:c4:5a:da:03:13:74:13:
93:18:41:e1:1d:51:e4:3a:da:40:0f:4e:51:93:35:97:9a:c5:
5a:18:de:8e:b1:ad:05:c0:49:4f:80:81:44:54:1a:80:de:44:
98:e1:f6:35:c4:5a:d0:9b:55:0d:60:79:69:1e:00:08:ff:37:
60:98:fb:00:bb:ae:7f:db:07:ed:19:a5:d8:59:e1:f4:36:33:
45:53:5c:4b:49:b1:e0:b5:19:59:b4:a9:db:d1:f3:25:a5:43:
61:af:8b:0f:4d:7d:c3:62:32:ff:61:e3:d3:d8:da:c0:fb:1a:
3d:86:93:40:ac:f0:2f:1f:0f:b4:47:9a:7f:af:4e:eb:4f:15:
5d:f0:ee:ab:1b:38:4e:4f:c7:22:67:f9:5e:7d:cc:e3:81:be:
3d:12:6a:67:d1:17:92:3f:30:33:67:cf:bf:d2:6f:30:20:10:
37:d9:6d:e4:20:0f:23:17:29:d4:4d:60:72:72:ee:c6:cf:3c:
94:b4:da:88:1f:c1:a2:cc:5d:08:e0:ef:97:98:d6:47:1a:12:
c5:75:8f:9f:58:6a:34:08:d8:79:ea:50:e6:dc:66:b9:97:5e:
84:1c:98:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGJL9QD+bvo4svenPt5R2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMDA3OGEyN2YxMDAzMjYzYzRjNTYxYjAyNTA3NjZmMmY1
MjZlN2QwHhcNMjYwNDE2MjEwMDQwWhcNMjYwNDE3MjEwMDQwWjAzMTEwLwYDVQQD
EyhiM2NiMGFmOTc3Y2MwM2ZjMGI3YWI4MmZmMjcwOWRkOThiZTE3ZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiAh8nwp3Vbj2Qhzkmrj4yizEw47
ZnKdgXMOzEmwDFGh/SjV0N6m5DTuuloyLafb7L4r6Q/j9V3/+In6JwpxhPXIoscN
uLF3U43Zg/g0/FOVtcYLHb3jULY4cjVvz+UA4hgJPuY2YA7M4PpXwYkillWtE106
JuRSrlx6GK6QgB2RtMz4sNt7ap09Nz/XBGrHyKKV6basVnd16l38X+shiDFDMWL4
AJAchcVVZ7RuhbDyuRcTnp3mxUgsabyu+ja4JoKGdAhoD0U/DMnIdw/2VFDk6nb1
3Dbd5YeF2Ga3Y44gro7/ibIgP3RxDCs0tkDgBrE/5Hz3Txw1Y4Z/xf+IiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPLCvl3zAP8C3q4L/JwndmL4X5TMB8GA1UdIwQY
MBaAFLwAeKJ/EAMmPExWGwJQdm8vUm59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkFCNG9uOFFBeVk4VEZZYkFsQjJieTlTYm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jMTViYTctZDgyZi00ZGRhLTkwM2Mt
YzE0YWFjNDFhMWMyLzEvdkFCNG9uOFFBeVk4VEZZYkFsQjJieTlTYm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9jMTViYTctZDgyZi00ZGRhLTkwM2MtYzE0YWFjNDFhMWMy
LzEvdkFCNG9uOFFBeVk4VEZZYkFsQjJieTlTYm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULT0scVF
KuWKySTDAHJo7tZCUluic6pwyNtd0S/EWtoDE3QTkxhB4R1R5DraQA9OUZM1l5rF
WhjejrGtBcBJT4CBRFQagN5EmOH2NcRa0JtVDWB5aR4ACP83YJj7ALuuf9sH7Rml
2Fnh9DYzRVNcS0mx4LUZWbSp29HzJaVDYa+LD019w2Iy/2Hj09jawPsaPYaTQKzw
Lx8PtEeaf69O608VXfDuqxs4Tk/HImf5Xn3M44G+PRJqZ9EXkj8wM2fPv9JvMCAQ
N9lt5CAPIxcp1E1gcnLuxs88lLTaiB/BosxdCODvl5jWRxoSxXWPn1hqNAjYeepQ
5txmuZdehByY2Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:50:01 2026 by rpki-client