Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
File: vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft (raw, json)
Hash identifier: b/6qslfnKp16wFoVHDBxqjXxA0pdjY2Gp/asbfJ20Nw=
Subject key identifier: 39:3D:55:06:C6:0A:A6:20:6D:A9:E8:33:7C:60:4B:5A:97:96:F0:A9
Authority key identifier: BF:3A:6F:67:B6:22:44:3B:37:18:BA:58:0D:F1:6D:D5:BE:8A:12:BB
Certificate issuer: /CN=bf3a6f67b622443b3718ba580df16dd5be8a12bb
Certificate serial: 019FAA87E8E9ACC23D6D1C3057A4CA6ED921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vzpvZ7YiRDs3GLpYDfFt1b6KErs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:01 +0000
Manifest this update: Tue 28 Jul 2026 21:01:01 +0000
Manifest next update: Wed 29 Jul 2026 21:01:01 +0000
Files and hashes: 1: sMBS9OzucQLYRw4kO5MEHGEFHUU.roa (hash: tUsaSUdwGiplp3q5jaJRxYUheCxbRt91fnz6Ktk8t8A=)
2: vzpvZ7YiRDs3GLpYDfFt1b6KErs.crl (hash: 6yC6IVpJrBRFi4XMD75ECS08VVECuYwH2oqLaCKCk/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vzpvZ7YiRDs3GLpYDfFt1b6KErs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:e8:e9:ac:c2:3d:6d:1c:30:57:a4:ca:6e:d9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3a6f67b622443b3718ba580df16dd5be8a12bb
Validity
Not Before: Jul 28 21:01:01 2026 GMT
Not After : Jul 29 21:01:01 2026 GMT
Subject: CN=393d5506c60aa6206da9e8337c604b5a9796f0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ed:e5:29:95:d2:37:f6:83:72:dc:ca:98:29:
84:e9:be:c1:6d:2f:4a:3e:16:58:40:01:3e:5f:d6:
f1:b6:30:48:2a:b6:1b:ce:31:88:ce:fb:c5:49:d9:
00:7f:43:ac:3a:41:7f:cc:c1:d8:3b:52:a5:8e:c9:
9b:5a:84:c4:88:71:ab:2e:22:7f:48:78:ee:bc:a9:
95:06:ff:dc:3e:f2:46:4e:f9:9a:c8:27:4c:52:91:
22:8f:55:67:7f:12:dc:10:6e:b2:2e:0b:dc:23:9d:
44:69:e7:17:ec:f2:ce:5b:37:29:bf:ae:2c:97:4e:
f5:12:2a:39:5e:17:45:04:ce:7f:a7:20:74:b9:d1:
4b:9a:c8:6a:0e:d8:11:af:b2:8f:1e:39:4c:58:08:
9c:fe:3e:71:59:47:ff:04:25:e9:10:1b:aa:b9:d1:
0b:93:6a:21:d9:4b:27:e4:fd:bd:6f:56:b5:69:35:
5e:74:20:4a:4f:9e:8a:b5:ba:f0:b8:29:7e:bc:1b:
b2:ad:3c:a7:63:8c:de:ce:bb:d3:08:68:50:fc:d7:
6c:5d:cf:17:0d:d5:bd:f1:9e:fd:09:50:da:9d:d6:
06:4b:d2:42:87:ce:87:3a:81:96:a2:8e:65:73:b1:
3c:32:16:3d:ae:58:c8:17:e5:e1:d2:cc:f8:28:0c:
d2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3D:55:06:C6:0A:A6:20:6D:A9:E8:33:7C:60:4B:5A:97:96:F0:A9
X509v3 Authority Key Identifier:
keyid:BF:3A:6F:67:B6:22:44:3B:37:18:BA:58:0D:F1:6D:D5:BE:8A:12:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vzpvZ7YiRDs3GLpYDfFt1b6KErs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b0:b5:a5:64:8a:a8:84:14:e6:54:48:e5:5f:26:06:ad:e3:
9b:f7:c7:d5:4d:63:9e:29:01:14:1d:1a:a9:e6:6a:31:cf:30:
db:2e:42:1c:53:d2:47:65:2d:61:ad:e1:5d:c1:6c:4d:37:18:
7e:17:a9:14:fc:72:ea:dc:27:a5:fc:2a:fc:2d:19:39:5b:64:
14:27:5e:40:17:16:24:d0:e6:2e:b4:a6:7f:3b:9c:fa:f0:c0:
1f:30:06:17:62:6e:9f:7a:45:4d:76:35:af:00:44:ee:62:1e:
0c:98:91:9b:32:8e:70:fb:91:d0:99:24:ce:11:5e:3d:f9:ce:
1b:46:98:1e:57:ba:60:96:5f:cc:46:55:37:dd:9a:65:88:66:
79:57:1a:da:9c:64:66:bc:af:e0:f0:2c:c9:7e:ab:1a:16:cc:
39:dd:70:e1:89:88:2e:38:f7:55:eb:d8:1c:46:85:2d:51:88:
5b:8d:6b:55:40:07:53:9b:b5:8a:8a:91:48:54:db:1c:65:ab:
a4:88:1f:33:85:40:ba:cd:38:86:46:e8:66:34:09:68:57:24:
b9:48:76:64:1b:e4:39:a9:2c:96:c0:11:25:33:7c:d9:78:b3:
7e:23:d3:c0:61:12:ba:1c:f8:2f:a8:12:52:03:a9:4e:28:15:
76:7b:20:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh+jprMI9bRwwV6TKbtkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmM2E2ZjY3YjYyMjQ0M2IzNzE4YmE1ODBkZjE2ZGQ1YmU4
YTEyYmIwHhcNMjYwNzI4MjEwMTAxWhcNMjYwNzI5MjEwMTAxWjAzMTEwLwYDVQQD
EygzOTNkNTUwNmM2MGFhNjIwNmRhOWU4MzM3YzYwNGI1YTk3OTZmMGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye3lKZXSN/aDctzKmCmE6b7BbS9K
PhZYQAE+X9bxtjBIKrYbzjGIzvvFSdkAf0OsOkF/zMHYO1KljsmbWoTEiHGrLiJ/
SHjuvKmVBv/cPvJGTvmayCdMUpEij1VnfxLcEG6yLgvcI51EaecX7PLOWzcpv64s
l071Eio5XhdFBM5/pyB0udFLmshqDtgRr7KPHjlMWAic/j5xWUf/BCXpEBuqudEL
k2oh2Usn5P29b1a1aTVedCBKT56KtbrwuCl+vBuyrTynY4zezrvTCGhQ/NdsXc8X
DdW98Z79CVDandYGS9JCh86HOoGWoo5lc7E8MhY9rljIF+Xh0sz4KAzSxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDk9VQbGCqYgbanoM3xgS1qXlvCpMB8GA1UdIwQY
MBaAFL86b2e2IkQ7Nxi6WA3xbdW+ihK7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnpwdlo3WWlSRHMzR0xwWURmRnQxYjZLRXJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNzhmZjctOTRhNy00ZmMyLWFlZDgt
OGQxZGE5ZjM4YTBiLzEvdnpwdlo3WWlSRHMzR0xwWURmRnQxYjZLRXJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNzhmZjctOTRhNy00ZmMyLWFlZDgtOGQxZGE5ZjM4YTBi
LzEvdnpwdlo3WWlSRHMzR0xwWURmRnQxYjZLRXJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrC1pWSK
qIQU5lRI5V8mBq3jm/fH1U1jnikBFB0aqeZqMc8w2y5CHFPSR2UtYa3hXcFsTTcY
fhepFPxy6twnpfwq/C0ZOVtkFCdeQBcWJNDmLrSmfzuc+vDAHzAGF2Jun3pFTXY1
rwBE7mIeDJiRmzKOcPuR0JkkzhFePfnOG0aYHle6YJZfzEZVN92aZYhmeVca2pxk
Zryv4PAsyX6rGhbMOd1w4YmILjj3VevYHEaFLVGIW41rVUAHU5u1ioqRSFTbHGWr
pIgfM4VAus04hkboZjQJaFckuUh2ZBvkOakslsARJTN82XizfiPTwGESuhz4L6gS
UgOpTigVdnsg+w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:23:12 2026 by rpki-client