Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft
File: vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft (raw, json)
Hash identifier: OYWlMR3bNSbvOlWEWJ/8AlKRUwCrxV0Zefxihhdguto=
Subject key identifier: BC:14:DC:4D:E2:FA:AA:99:59:86:A9:D2:B5:F2:56:E2:99:9A:69:B1
Authority key identifier: BF:07:FA:84:49:89:13:CD:0A:F2:47:B9:8F:C2:E4:DA:F1:47:F7:E9
Certificate issuer: /CN=bf07fa84498913cd0af247b98fc2e4daf147f7e9
Certificate serial: 01A0D50246622E0A27AE76467A1CE5A493D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vwf6hEmJE80K8ke5j8Lk2vFH9-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft
Manifest number: 98
Signing time: Thu 24 Sep 2026 20:01:31 +0000
Manifest this update: Thu 24 Sep 2026 20:01:31 +0000
Manifest next update: Fri 25 Sep 2026 20:01:31 +0000
Files and hashes: 1: 1--vzy1e-ka0R2VffB1Cs0T0nvBI.roa (hash: BXk8ninGeDuuF8CYBQR72p10jh3CVqnPWA05JGML8xw=)
2: vwf6hEmJE80K8ke5j8Lk2vFH9-k.crl (hash: e8JtpahcOA25YSgMmO6BY8ne+I/eHp/KgLHgrnkzvLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vwf6hEmJE80K8ke5j8Lk2vFH9-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:46:62:2e:0a:27:ae:76:46:7a:1c:e5:a4:93:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf07fa84498913cd0af247b98fc2e4daf147f7e9
Validity
Not Before: Sep 24 20:01:31 2026 GMT
Not After : Sep 25 20:01:31 2026 GMT
Subject: CN=bc14dc4de2faaa995986a9d2b5f256e2999a69b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:ea:ca:38:f6:c6:64:ba:99:90:4a:0e:64:
b2:f6:1b:80:56:b9:d2:44:43:5e:c4:94:3f:1f:fa:
7f:f6:a1:00:5e:03:85:cc:bd:5e:03:cf:ae:e0:6e:
04:9d:89:43:12:16:f0:d5:ee:80:3a:a7:ad:01:a2:
62:ca:33:9c:42:bd:ac:2e:98:56:aa:f0:cc:cd:4a:
16:3b:48:2f:12:c5:35:0c:de:54:d1:7e:ef:26:c8:
3c:e2:d8:b0:b0:10:59:9b:fa:be:17:2c:5b:87:44:
a4:10:98:a8:a3:9a:32:4b:73:2b:17:fd:f0:33:5a:
84:ed:bd:b6:1b:b6:70:4e:f9:24:c1:f8:41:f3:91:
50:74:c6:11:3b:8b:d1:e3:9b:2a:ca:6f:36:69:00:
70:d9:98:9e:5e:06:16:f0:ae:fd:f9:98:55:9f:ae:
f5:e8:e1:99:d4:e5:52:a6:05:6e:69:64:ea:0b:2d:
29:0d:89:07:c0:a2:c2:cc:ad:9f:aa:18:ee:9e:26:
5b:41:19:e3:ae:61:2e:ed:16:4a:3d:f7:ea:ba:ab:
ea:9e:15:ef:c2:99:0a:88:d9:67:e2:d6:e5:fa:56:
6e:91:1b:e8:df:27:ea:4d:db:bc:04:eb:7d:9b:20:
65:04:1f:f7:3a:e2:10:44:a4:03:72:ef:59:e3:0a:
91:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:14:DC:4D:E2:FA:AA:99:59:86:A9:D2:B5:F2:56:E2:99:9A:69:B1
X509v3 Authority Key Identifier:
keyid:BF:07:FA:84:49:89:13:CD:0A:F2:47:B9:8F:C2:E4:DA:F1:47:F7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vwf6hEmJE80K8ke5j8Lk2vFH9-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7b:12:46:2c:f9:35:51:dd:84:cd:fb:aa:46:50:51:03:18:
7b:58:05:04:f5:71:ad:99:e1:b3:bd:26:35:a8:b4:6c:7c:c3:
4a:76:21:24:c1:e0:e1:ce:e6:8a:12:4c:4f:16:f4:a4:cd:c3:
eb:59:9f:b3:ab:c7:00:01:16:76:05:ef:58:a9:62:91:c2:46:
10:c6:27:08:ea:b7:8a:78:3c:f6:58:8d:d6:de:c3:17:c1:b3:
90:d6:fd:71:e8:f4:2c:c7:2f:ff:74:5e:c3:ae:bb:11:95:80:
0b:e7:f9:ac:75:20:0f:c2:e4:60:80:fa:6a:ea:11:75:2b:55:
2e:95:90:d9:07:f5:8b:68:03:1f:bf:d1:e7:21:6d:a7:54:df:
2f:ea:ba:21:c4:1b:cf:89:34:a7:d2:65:b0:0b:bd:4a:e7:6a:
df:4e:71:1a:d2:82:ab:ec:ea:70:da:35:91:d0:27:e2:9a:cd:
2e:e2:d1:94:41:ca:ab:4d:44:00:02:89:b8:63:8f:7a:3a:03:
fd:36:e0:0d:ea:b0:29:d6:cc:b1:3e:06:f9:94:88:c6:74:ce:
9f:c7:9f:5c:d4:ad:1f:5b:17:ca:59:f1:01:6e:a8:b2:be:40:
d2:aa:60:ca:60:06:56:e3:12:dd:7b:15:d7:f3:63:54:a5:b2:
39:2b:70:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVAkZiLgonrnZGehzlpJPVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMDdmYTg0NDk4OTEzY2QwYWYyNDdiOThmYzJlNGRhZjE0
N2Y3ZTkwHhcNMjYwOTI0MjAwMTMxWhcNMjYwOTI1MjAwMTMxWjAzMTEwLwYDVQQD
EyhiYzE0ZGM0ZGUyZmFhYTk5NTk4NmE5ZDJiNWYyNTZlMjk5OWE2OWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw/qyjj2xmS6mZBKDmSy9huAVrnS
RENexJQ/H/p/9qEAXgOFzL1eA8+u4G4EnYlDEhbw1e6AOqetAaJiyjOcQr2sLphW
qvDMzUoWO0gvEsU1DN5U0X7vJsg84tiwsBBZm/q+Fyxbh0SkEJioo5oyS3MrF/3w
M1qE7b22G7ZwTvkkwfhB85FQdMYRO4vR45sqym82aQBw2ZieXgYW8K79+ZhVn671
6OGZ1OVSpgVuaWTqCy0pDYkHwKLCzK2fqhjuniZbQRnjrmEu7RZKPffquqvqnhXv
wpkKiNln4tbl+lZukRvo3yfqTdu8BOt9myBlBB/3OuIQRKQDcu9Z4wqRiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwU3E3i+qqZWYap0rXyVuKZmmmxMB8GA1UdIwQY
MBaAFL8H+oRJiRPNCvJHuY/C5NrxR/fpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdndmNmhFbUpFODBLOGtlNWo4TGsydkZIOS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8yYzhiYTktZDgwMy00NzViLTkxZDUt
YzdhODcxZDJkZmEyLzEvdndmNmhFbUpFODBLOGtlNWo4TGsydkZIOS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8yYzhiYTktZDgwMy00NzViLTkxZDUtYzdhODcxZDJkZmEy
LzEvdndmNmhFbUpFODBLOGtlNWo4TGsydkZIOS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3sSRiz5
NVHdhM37qkZQUQMYe1gFBPVxrZnhs70mNai0bHzDSnYhJMHg4c7mihJMTxb0pM3D
61mfs6vHAAEWdgXvWKlikcJGEMYnCOq3ing89liN1t7DF8GzkNb9cej0LMcv/3Re
w667EZWAC+f5rHUgD8LkYID6auoRdStVLpWQ2Qf1i2gDH7/R5yFtp1TfL+q6IcQb
z4k0p9JlsAu9Sudq305xGtKCq+zqcNo1kdAn4prNLuLRlEHKq01EAAKJuGOPejoD
/TbgDeqwKdbMsT4G+ZSIxnTOn8efXNStH1sXylnxAW6osr5A0qpgymAGVuMS3XsV
1/NjVKWyOStwjg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:42:52 2026 by rpki-client