Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
File: vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft (raw, json)
Hash identifier: /M+cd4PqrzjO4sQ8VkgUyXtBJbtPwN8chS1hOVLetm0=
Subject key identifier: C8:E5:C8:AF:19:69:53:FE:E2:10:C1:7D:F2:8F:01:EB:2E:39:8F:53
Authority key identifier: BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
Certificate issuer: /CN=bd60edf96266b7c0d43836c854ab472cb74db034
Certificate serial: 019FA906C3540720BA65143B83D7CCD8863D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
Manifest number: 03D8
Signing time: Tue 28 Jul 2026 14:00:20 +0000
Manifest this update: Tue 28 Jul 2026 14:00:20 +0000
Manifest next update: Wed 29 Jul 2026 14:00:20 +0000
Files and hashes: 1: 8HPlLJKGC0uGDXpjxVBwb6wa0qk.roa (hash: Ojh5/xBT32ZIv2cbh6f99Qcqv0JCaF6De9sA3ACbGs0=)
2: IivqEYycEJ9ENYkDV_x_rR4eFr0.roa (hash: IQVchAwFZI4RDu0XF+MD2n3sIbpJvcGSbjEZGTu8Mwc=)
3: X8pouaMpaLsuYErTPUpgqpWeT9Y.roa (hash: psbUeXwDjoOPzcvtNOSx3ERhIjFSIX4yWz6HMVvEcEg=)
4: XyAp-ULJDGqQnYw4x0VOKO9WL4A.roa (hash: p7Y5UggA9XaPiUt8v09KTFjc/O7q3EmBodfSudOJ2G0=)
5: mvMvzcuR1NgOhwlZXo7XswNReO8.roa (hash: OC7UawU8PzTtEO+txuJgCieiCDiiiwo16T6kmqVkBqo=)
6: p-FRidV19Ral8HYCkTftp8ZGx_I.roa (hash: hshHmTn3wzmrRXENipR4Ti5XKN7QbdSwu9BQI5Ilgp0=)
7: vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl (hash: /LywWZgYr5+GJFmB8qxpiCui1u23i8e9pCfb3IqZXwk=)
8: wlWnFSIiYVvXp_mwjODRnhkY0UE.roa (hash: Uu3Z+8tn4NyyEWREHHOZxn7oBRlFx43GJ0VENqzt+D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:c3:54:07:20:ba:65:14:3b:83:d7:cc:d8:86:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd60edf96266b7c0d43836c854ab472cb74db034
Validity
Not Before: Jul 28 14:00:20 2026 GMT
Not After : Jul 29 14:00:20 2026 GMT
Subject: CN=c8e5c8af196953fee210c17df28f01eb2e398f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6b:83:70:64:5f:c3:f4:ba:1c:a6:52:a2:32:
00:d8:1f:39:84:b9:58:79:f0:e0:fb:50:b5:1e:78:
1a:4e:17:76:34:c0:4d:e0:42:c1:7a:d2:b8:23:e0:
a7:d2:32:f0:3e:a9:4b:f6:65:30:29:c9:db:6b:26:
fe:78:a2:fb:de:8d:79:76:d7:25:48:3c:c6:bb:f8:
c8:0f:70:53:74:34:0e:4b:ba:5f:bb:3d:50:8f:9c:
0c:f3:9e:5f:eb:49:c0:6e:d5:09:7c:de:aa:85:f6:
81:d3:ae:04:84:5e:ea:a4:49:52:a1:46:5b:32:6e:
54:83:59:f9:5c:13:07:75:e3:c3:31:04:b1:50:32:
95:b1:a5:77:6d:b3:07:06:61:f9:d0:c1:a0:b1:ff:
ce:c9:bb:11:80:03:ca:10:fe:4a:43:33:24:a3:09:
a8:ef:d8:18:98:e9:f3:cc:3d:98:0c:69:31:75:90:
86:c4:b8:2e:5b:3c:34:2e:3d:cc:e0:c3:23:da:56:
ac:bf:c1:46:47:4a:bf:10:27:92:1e:2b:e9:fe:a3:
09:25:b0:d7:41:20:31:38:ab:1a:18:8c:c2:e9:10:
6d:42:40:13:e2:b0:b9:7b:de:63:a0:7a:52:84:56:
09:bd:ab:c7:ae:8d:b7:8e:bc:0e:b5:4f:74:03:0a:
40:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E5:C8:AF:19:69:53:FE:E2:10:C1:7D:F2:8F:01:EB:2E:39:8F:53
X509v3 Authority Key Identifier:
keyid:BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ca:d8:e2:96:f5:03:0d:01:00:a7:7e:92:56:82:49:a1:fc:
2d:21:95:90:a9:96:75:4f:22:7d:5e:44:23:c9:a3:f9:0b:9e:
5c:c4:ae:0e:a2:f2:3c:31:93:2a:67:e0:9c:f6:78:0b:02:4c:
b1:95:85:39:aa:40:7a:04:cb:1e:83:a2:7e:0a:81:9a:67:f1:
8a:b0:91:2a:5d:2e:f1:5a:20:b7:79:b3:f9:46:12:68:0f:b8:
8f:6a:18:93:0f:7b:26:46:52:3a:42:72:f5:ac:b3:14:a7:26:
f0:3c:be:a4:e5:2e:a1:8c:74:09:07:90:04:0e:63:f0:5d:f2:
51:77:3a:ff:00:ee:61:b3:35:35:cf:a6:14:37:7a:f1:57:8e:
2a:6b:c5:05:d9:fa:ef:fa:9c:34:86:d3:7b:0c:30:55:14:3e:
97:0d:28:0d:ab:18:59:ae:b5:a6:de:e0:c7:0c:58:51:53:9e:
37:72:1e:06:6e:8c:17:77:dd:88:51:78:49:54:33:9a:7b:e0:
9e:ca:f4:16:b0:87:e9:89:3b:1a:20:f1:f8:e2:e3:fc:6a:cf:
62:91:4d:59:6b:33:21:88:5f:3f:26:e9:20:91:90:e0:3b:0b:
8a:4a:ab:e3:a9:8a:36:d9:dd:66:a8:02:53:8d:b7:d6:56:eb:
2b:0b:f8:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBsNUByC6ZRQ7g9fM2IY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjBlZGY5NjI2NmI3YzBkNDM4MzZjODU0YWI0NzJjYjc0
ZGIwMzQwHhcNMjYwNzI4MTQwMDIwWhcNMjYwNzI5MTQwMDIwWjAzMTEwLwYDVQQD
EyhjOGU1YzhhZjE5Njk1M2ZlZTIxMGMxN2RmMjhmMDFlYjJlMzk4ZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22uDcGRfw/S6HKZSojIA2B85hLlY
efDg+1C1HngaThd2NMBN4ELBetK4I+Cn0jLwPqlL9mUwKcnbayb+eKL73o15dtcl
SDzGu/jID3BTdDQOS7pfuz1Qj5wM855f60nAbtUJfN6qhfaB064EhF7qpElSoUZb
Mm5Ug1n5XBMHdePDMQSxUDKVsaV3bbMHBmH50MGgsf/OybsRgAPKEP5KQzMkowmo
79gYmOnzzD2YDGkxdZCGxLguWzw0Lj3M4MMj2lasv8FGR0q/ECeSHivp/qMJJbDX
QSAxOKsaGIzC6RBtQkAT4rC5e95joHpShFYJvavHro23jrwOtU90AwpASwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjlyK8ZaVP+4hDBffKPAesuOY9TMB8GA1UdIwQY
MBaAFL1g7fliZrfA1Dg2yFSrRyy3TbA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9iNWQ1YmItMjNjNi00YjNkLTk0Yzgt
NDJiYmYxYTZhNjViLzEvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9iNWQ1YmItMjNjNi00YjNkLTk0YzgtNDJiYmYxYTZhNjVi
LzEvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssrY4pb1
Aw0BAKd+klaCSaH8LSGVkKmWdU8ifV5EI8mj+QueXMSuDqLyPDGTKmfgnPZ4CwJM
sZWFOapAegTLHoOifgqBmmfxirCRKl0u8Vogt3mz+UYSaA+4j2oYkw97JkZSOkJy
9ayzFKcm8Dy+pOUuoYx0CQeQBA5j8F3yUXc6/wDuYbM1Nc+mFDd68VeOKmvFBdn6
7/qcNIbTewwwVRQ+lw0oDasYWa61pt7gxwxYUVOeN3IeBm6MF3fdiFF4SVQzmnvg
nsr0FrCH6Yk7GiDx+OLj/GrPYpFNWWszIYhfPybpIJGQ4DsLikqr46mKNtndZqgC
U4231lbrKwv4Kg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:09 2026 by rpki-client