Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
File: vddoJJ1zZYBx-TRWA5OaudYgw1s.mft (raw, json)
Hash identifier: Rv1Ok8eq3ZOv/F3D8kL9FNqugwKMUb0gZhO6vgojtoM=
Subject key identifier: FA:8E:C5:69:84:A9:7B:A0:BA:09:69:B4:F4:71:F9:44:3E:BE:45:B2
Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b
Certificate serial: 01A1310F4A6FE0681A3C97C181F20E5B59A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
Manifest number: 0378
Signing time: Mon 12 Oct 2026 17:00:48 +0000
Manifest this update: Mon 12 Oct 2026 17:00:48 +0000
Manifest next update: Tue 13 Oct 2026 17:00:48 +0000
Files and hashes: 1: PDxQWyYqgaGOkX5GZzt20B-Uems.roa (hash: B+Ao0KhpwV0cvFRAJ4KyvfBL5J8+ktllkURKL/vgcAg=)
2: vddoJJ1zZYBx-TRWA5OaudYgw1s.crl (hash: VuS5w+ixmG89arIKn7VNrNIcRIhds2qmjELxvWfYn7A=)
3: yFX62ci1qBUDucLwJ8wtZh6slII.roa (hash: jSh0LUqy7JqqicLthv+W+VrwTZt3JtqwoMS9ylaeVMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:0f:4a:6f:e0:68:1a:3c:97:c1:81:f2:0e:5b:59:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b
Validity
Not Before: Oct 12 17:00:48 2026 GMT
Not After : Oct 13 17:00:48 2026 GMT
Subject: CN=fa8ec56984a97ba0ba0969b4f471f9443ebe45b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:41:7c:f0:c6:45:b6:bd:1b:97:74:41:d1:
97:ef:95:53:2b:a0:b1:0a:3d:db:77:c6:db:7a:f4:
cf:7b:37:55:80:61:23:63:e7:83:42:5a:89:5e:6a:
a4:7c:f9:1a:de:f0:8d:9c:99:51:e5:e5:58:12:d7:
fa:f5:47:5a:24:97:e2:05:fa:85:0a:39:09:fe:d5:
53:f2:fc:2a:77:ca:b4:27:1b:66:9c:74:8d:c1:e2:
b8:49:ce:e7:fa:ef:ce:f7:b9:06:91:27:b4:8d:2e:
fb:7f:b5:aa:f7:26:f9:ac:43:96:ae:d3:3b:06:04:
c6:b1:de:14:21:c2:1e:6a:3b:f0:3e:2e:ca:55:1d:
90:91:77:cc:bf:81:19:87:70:da:cd:0a:51:77:ca:
2a:f2:7e:e9:8d:8a:47:c9:fc:1a:71:a9:0a:51:07:
d1:99:84:9c:39:c5:2b:14:9c:1c:b7:89:37:54:63:
75:67:52:13:fb:5f:7f:e1:11:3c:40:f7:78:9b:f8:
e5:1e:25:d5:a4:ac:a3:08:75:11:fd:b3:15:41:31:
2d:d3:05:3d:83:ac:ed:7a:a9:0a:2a:00:89:0d:cb:
c1:7c:44:48:dd:8d:b0:22:58:9a:ae:2d:78:27:c3:
ba:09:a8:b7:63:53:ea:30:d0:22:22:64:8f:c9:84:
08:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8E:C5:69:84:A9:7B:A0:BA:09:69:B4:F4:71:F9:44:3E:BE:45:B2
X509v3 Authority Key Identifier:
keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c2:f0:bf:20:e9:67:33:88:6b:c9:48:47:e8:a3:88:5f:0d:
36:9e:e9:ba:b5:1c:3e:0a:3f:20:a4:f3:60:01:63:37:b0:e2:
c6:2e:79:78:cd:22:19:8f:d3:37:8d:3c:3a:00:2c:21:43:9c:
f5:d2:f3:23:f6:7a:33:76:6a:9d:42:ec:94:4b:01:2f:7a:99:
be:3f:00:59:43:f1:53:cd:59:fc:ec:6f:d6:fe:8c:b2:cf:96:
c7:e8:89:9b:bf:88:15:a3:f7:e7:f1:dc:5c:d0:ed:69:71:ce:
2c:f7:2d:0e:e0:94:98:38:21:8c:96:7f:a4:4c:3e:22:a3:87:
c9:cf:ac:ab:e9:33:45:b8:2b:f7:bf:ba:65:13:87:7a:70:cc:
91:d6:82:7a:cd:69:fa:ee:8b:cf:c1:30:39:a7:29:92:80:5e:
f3:eb:7a:3c:a6:64:39:a7:ae:9f:9e:aa:cf:01:86:a0:6f:33:
f6:63:7a:98:73:fd:b4:9a:d8:e7:b8:a6:32:73:61:31:94:8a:
2b:08:ab:db:1f:c9:c8:72:7a:cb:b6:e5:f7:fb:3a:45:7c:77:
ba:9e:4d:c3:62:76:31:31:e7:e6:b2:5a:09:ef:fb:19:f3:51:
01:02:0a:a7:32:b1:96:1c:47:c9:51:73:a5:c8:a4:92:49:f9:
90:a2:50:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaExD0pv4GgaPJfBgfIOW1mhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDc2ODI0OWQ3MzY1ODA3MWY5MzQ1NjAzOTM5YWI5ZDYy
MGMzNWIwHhcNMjYxMDEyMTcwMDQ4WhcNMjYxMDEzMTcwMDQ4WjAzMTEwLwYDVQQD
EyhmYThlYzU2OTg0YTk3YmEwYmEwOTY5YjRmNDcxZjk0NDNlYmU0NWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjdBfPDGRba9G5d0QdGX75VTK6Cx
Cj3bd8bbevTPezdVgGEjY+eDQlqJXmqkfPka3vCNnJlR5eVYEtf69UdaJJfiBfqF
CjkJ/tVT8vwqd8q0JxtmnHSNweK4Sc7n+u/O97kGkSe0jS77f7Wq9yb5rEOWrtM7
BgTGsd4UIcIeajvwPi7KVR2QkXfMv4EZh3DazQpRd8oq8n7pjYpHyfwacakKUQfR
mYScOcUrFJwct4k3VGN1Z1IT+19/4RE8QPd4m/jlHiXVpKyjCHUR/bMVQTEt0wU9
g6zteqkKKgCJDcvBfERI3Y2wIliari14J8O6Cai3Y1PqMNAiImSPyYQIbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqOxWmEqXuguglptPRx+UQ+vkWyMB8GA1UdIwQY
MBaAFL3XaCSdc2WAcfk0VgOTmrnWIMNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzct
MDY5NjA2NDQxNTE0LzEvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzctMDY5NjA2NDQxNTE0
LzEvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8LwvyDp
ZzOIa8lIR+ijiF8NNp7purUcPgo/IKTzYAFjN7Dixi55eM0iGY/TN408OgAsIUOc
9dLzI/Z6M3ZqnULslEsBL3qZvj8AWUPxU81Z/Oxv1v6Mss+Wx+iJm7+IFaP35/Hc
XNDtaXHOLPctDuCUmDghjJZ/pEw+IqOHyc+sq+kzRbgr97+6ZROHenDMkdaCes1p
+u6Lz8EwOacpkoBe8+t6PKZkOaeun56qzwGGoG8z9mN6mHP9tJrY57imMnNhMZSK
Kwir2x/JyHJ6y7bl9/s6RXx3up5Nw2J2MTHn5rJaCe/7GfNRAQIKpzKxlhxHyVFz
pcikkkn5kKJQFQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 00:44:45 2026 by rpki-client