Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/e9cbd7-cabd-4298-8ad5-f75b3348f685/1/vQsIAXGKC6dWWC1gVGzwSgxKUUE.mft
File: vQsIAXGKC6dWWC1gVGzwSgxKUUE.mft (raw, json)
Hash identifier: 8nnx5C2Zd0lGGCkfCgxaIs9PbHT72wXi3dviCt5imLQ=
Subject key identifier: 81:06:B9:4E:E5:72:B2:21:DF:09:7F:3C:FF:93:A3:BF:86:FE:8B:F1
Authority key identifier: BD:0B:08:01:71:8A:0B:A7:56:58:2D:60:54:6C:F0:4A:0C:4A:51:41
Certificate issuer: /CN=bd0b0801718a0ba756582d60546cf04a0c4a5141
Certificate serial: 01A0E81C2A1FD8B279657D8520FA947FFAEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQsIAXGKC6dWWC1gVGzwSgxKUUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e9cbd7-cabd-4298-8ad5-f75b3348f685/1/vQsIAXGKC6dWWC1gVGzwSgxKUUE.mft
Manifest number: A2
Signing time: Mon 28 Sep 2026 13:02:34 +0000
Manifest this update: Mon 28 Sep 2026 13:02:34 +0000
Manifest next update: Tue 29 Sep 2026 13:02:34 +0000
Files and hashes: 1: reeSo543-iiV_hwwXrGw1Fvughg.roa (hash: n9+iAAB1GwbtnN2Cb2yq5/uQtkeoVL1fosqNhMcu7iE=)
2: vQsIAXGKC6dWWC1gVGzwSgxKUUE.crl (hash: R49F4lkCtyvoNo2SC5DFyGsdvfjEvp4n1PD6oyk1frA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e9cbd7-cabd-4298-8ad5-f75b3348f685/1/vQsIAXGKC6dWWC1gVGzwSgxKUUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e9cbd7-cabd-4298-8ad5-f75b3348f685/1/vQsIAXGKC6dWWC1gVGzwSgxKUUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQsIAXGKC6dWWC1gVGzwSgxKUUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:2a:1f:d8:b2:79:65:7d:85:20:fa:94:7f:fa:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd0b0801718a0ba756582d60546cf04a0c4a5141
Validity
Not Before: Sep 28 13:02:34 2026 GMT
Not After : Sep 29 13:02:34 2026 GMT
Subject: CN=8106b94ee572b221df097f3cff93a3bf86fe8bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:06:e6:44:a5:25:4d:10:33:89:8a:11:2a:
4f:ce:18:ca:88:b3:0a:50:b3:bc:f6:70:59:1e:de:
11:90:dd:65:76:15:e4:9e:7f:d0:7d:1f:74:a0:ec:
b8:ff:96:77:45:1d:19:fe:13:c9:71:61:9e:93:6f:
da:f8:d4:d4:7b:ba:e9:78:9f:29:d1:a9:10:55:06:
4b:1c:fc:f6:4b:47:fe:1b:82:48:f5:56:ec:00:1b:
37:3a:ba:0b:fb:6f:65:30:95:65:d3:66:29:8e:72:
34:5a:b8:59:2d:a1:10:48:b6:2c:be:a9:d4:31:ba:
a4:a6:3d:51:18:cb:34:e1:ac:f9:17:f3:45:bb:ac:
d4:94:06:12:65:dc:40:a9:ff:60:fa:29:e2:67:75:
43:3f:29:23:2c:37:d8:56:3b:21:7d:b5:59:1e:f2:
7a:ae:87:da:de:da:71:48:d7:63:dc:4c:2e:f8:c6:
3d:bb:54:9c:91:fd:40:fc:e0:37:58:58:a0:69:e4:
64:3a:48:d8:42:30:ac:43:76:79:00:64:fe:e9:86:
67:b4:53:59:cd:7a:b9:58:cc:00:fb:73:39:83:48:
4b:d8:91:7f:65:53:b1:3e:9d:20:60:49:6d:54:7d:
94:07:3b:b5:d2:c1:44:25:b3:2c:2d:5e:47:d6:06:
fd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:06:B9:4E:E5:72:B2:21:DF:09:7F:3C:FF:93:A3:BF:86:FE:8B:F1
X509v3 Authority Key Identifier:
keyid:BD:0B:08:01:71:8A:0B:A7:56:58:2D:60:54:6C:F0:4A:0C:4A:51:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQsIAXGKC6dWWC1gVGzwSgxKUUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e9cbd7-cabd-4298-8ad5-f75b3348f685/1/vQsIAXGKC6dWWC1gVGzwSgxKUUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e9cbd7-cabd-4298-8ad5-f75b3348f685/1/vQsIAXGKC6dWWC1gVGzwSgxKUUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b2:0a:af:cd:2b:8c:02:9b:97:1c:4d:85:e0:08:82:43:48:
3f:a1:24:84:bd:79:e2:dc:84:1c:80:fe:fc:8c:61:d8:0a:78:
47:6d:b5:8a:80:fb:f6:09:17:8e:cf:33:df:da:7c:10:5e:99:
40:57:a8:5a:a0:c5:14:d0:3d:a6:e6:1a:97:3a:1a:15:ac:5c:
92:56:5e:66:68:d0:a6:41:cf:df:35:ed:3a:e5:76:76:06:56:
5d:4a:0a:af:71:fe:1a:55:3c:a4:68:d4:92:4b:ef:c1:0e:76:
10:84:80:ac:f7:21:10:8e:d6:3a:63:dd:6d:db:9e:56:64:e2:
24:f6:ff:37:3b:ed:be:b1:8e:12:e5:46:a5:1a:d1:77:21:72:
61:8a:a3:fb:e6:9c:f4:72:1e:ca:9c:90:ce:f7:1e:f1:1a:6a:
57:4f:11:9f:ac:7a:4b:e2:aa:38:35:a4:00:ca:ee:a1:de:e1:
d3:31:b3:20:69:2b:e4:e2:9f:2c:5c:5d:a2:b1:c4:1e:89:30:
eb:3d:40:08:40:e6:9f:d4:6e:ad:f1:4b:41:15:ed:d7:b1:d9:
39:fb:6d:0e:e7:b3:27:c6:d1:d2:aa:c7:64:98:59:77:f1:c2:
93:4f:0f:77:26:31:a4:74:fa:93:7f:f8:10:90:c8:96:23:df:
34:89:8c:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoHCof2LJ5ZX2FIPqUf/rsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMGIwODAxNzE4YTBiYTc1NjU4MmQ2MDU0NmNmMDRhMGM0
YTUxNDEwHhcNMjYwOTI4MTMwMjM0WhcNMjYwOTI5MTMwMjM0WjAzMTEwLwYDVQQD
Eyg4MTA2Yjk0ZWU1NzJiMjIxZGYwOTdmM2NmZjkzYTNiZjg2ZmU4YmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHEG5kSlJU0QM4mKESpPzhjKiLMK
ULO89nBZHt4RkN1ldhXknn/QfR90oOy4/5Z3RR0Z/hPJcWGek2/a+NTUe7rpeJ8p
0akQVQZLHPz2S0f+G4JI9VbsABs3OroL+29lMJVl02YpjnI0WrhZLaEQSLYsvqnU
Mbqkpj1RGMs04az5F/NFu6zUlAYSZdxAqf9g+iniZ3VDPykjLDfYVjshfbVZHvJ6
rofa3tpxSNdj3Ewu+MY9u1Sckf1A/OA3WFigaeRkOkjYQjCsQ3Z5AGT+6YZntFNZ
zXq5WMwA+3M5g0hL2JF/ZVOxPp0gYEltVH2UBzu10sFEJbMsLV5H1gb9rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEGuU7lcrIh3wl/PP+To7+G/ovxMB8GA1UdIwQY
MBaAFL0LCAFxigunVlgtYFRs8EoMSlFBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlFzSUFYR0tDNmRXV0MxZ1ZHendTZ3hLVVVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lOWNiZDctY2FiZC00Mjk4LThhZDUt
Zjc1YjMzNDhmNjg1LzEvdlFzSUFYR0tDNmRXV0MxZ1ZHendTZ3hLVVVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lOWNiZDctY2FiZC00Mjk4LThhZDUtZjc1YjMzNDhmNjg1
LzEvdlFzSUFYR0tDNmRXV0MxZ1ZHendTZ3hLVVVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUrIKr80r
jAKblxxNheAIgkNIP6EkhL154tyEHID+/Ixh2Ap4R221ioD79gkXjs8z39p8EF6Z
QFeoWqDFFNA9puYalzoaFaxcklZeZmjQpkHP3zXtOuV2dgZWXUoKr3H+GlU8pGjU
kkvvwQ52EISArPchEI7WOmPdbdueVmTiJPb/NzvtvrGOEuVGpRrRdyFyYYqj++ac
9HIeypyQzvce8RpqV08Rn6x6S+KqODWkAMruod7h0zGzIGkr5OKfLFxdorHEHokw
6z1ACEDmn9RurfFLQRXt17HZOfttDuezJ8bR0qrHZJhZd/HCk08PdyYxpHT6k3/4
EJDIliPfNImMCg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 20:51:25 2026 by rpki-client