Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
File: vYUnKkCAkE914jWkevC0EmbipgM.mft (raw, json)
Hash identifier: M6kouaiSc1YeGs+TkwALlqJ98iKFPyqjgDGUf5yv0h0=
Subject key identifier: A1:97:F2:07:39:16:00:4D:42:FF:6C:7B:F3:B7:FF:51:52:76:5B:D4
Authority key identifier: BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
Certificate issuer: /CN=bd85272a4080904f75e235a47af0b41266e2a603
Certificate serial: 01A0C8C65FB6722C4189B0E56F714671634B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
Manifest number: 0D92
Signing time: Tue 22 Sep 2026 11:00:38 +0000
Manifest this update: Tue 22 Sep 2026 11:00:38 +0000
Manifest next update: Wed 23 Sep 2026 11:00:38 +0000
Files and hashes: 1: 5TQ-JqFgF-IFdipnnBO-T6tTIiI.roa (hash: jvG5fPveO3vEmUkVM2g5EIXNmfe8tIUO+ydnKHanIQ8=)
2: vYUnKkCAkE914jWkevC0EmbipgM.crl (hash: LqJEO0L4s3Y6FcxmSyHZmD62OfK3+f435Vo6VLuTgkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:5f:b6:72:2c:41:89:b0:e5:6f:71:46:71:63:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd85272a4080904f75e235a47af0b41266e2a603
Validity
Not Before: Sep 22 11:00:38 2026 GMT
Not After : Sep 23 11:00:38 2026 GMT
Subject: CN=a197f2073916004d42ff6c7bf3b7ff5152765bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:ff:62:c2:20:78:34:09:44:9d:e9:2f:5b:
cb:38:48:11:c9:d4:06:fe:aa:a8:fa:6b:11:49:56:
53:77:91:da:6a:49:b4:82:dd:3e:1b:05:30:db:ec:
26:3d:f5:e1:f6:11:a4:0a:f4:bd:f0:26:12:1d:1b:
34:02:ea:74:73:ac:31:39:94:5f:b0:a1:48:6b:a2:
43:ed:50:c4:8d:ce:d6:77:58:4c:67:b0:6e:f6:4d:
3c:50:b4:71:f9:f2:71:ca:f1:5b:5c:a4:e1:1a:a2:
98:f6:85:fb:ac:3f:24:c0:5f:8d:71:d9:8b:93:d1:
ed:40:49:2e:22:ea:2e:1f:92:83:d1:e5:fa:ca:58:
8e:08:a8:46:24:33:f2:61:22:e4:df:f4:53:f9:be:
b3:30:70:00:fc:53:15:9e:98:74:f8:65:39:aa:33:
d6:b3:51:47:b0:f5:29:1a:b7:f7:77:59:e3:b4:f9:
32:b1:b8:a7:1b:2a:1d:d9:51:b4:9b:aa:92:af:1f:
22:ce:f4:d3:40:c2:f5:aa:ec:99:30:0f:88:1f:a6:
d4:1b:a4:69:97:ab:4b:e4:31:b7:4e:bc:0e:1d:bc:
cc:ec:94:27:80:18:39:ea:d6:ea:93:41:eb:90:c1:
19:15:ba:68:c2:02:91:f9:29:d5:1b:c5:8f:9d:4c:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:97:F2:07:39:16:00:4D:42:FF:6C:7B:F3:B7:FF:51:52:76:5B:D4
X509v3 Authority Key Identifier:
keyid:BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:09:ea:7d:f2:cb:f7:08:a2:38:b1:50:c9:6e:52:7e:8c:dc:
fb:b3:f5:d6:11:af:57:40:00:af:f7:88:bb:68:8c:5d:62:db:
a8:bc:4e:81:9d:18:41:51:b6:71:19:89:85:30:49:63:61:b0:
f4:ab:9f:91:c9:c0:d3:30:6a:be:1f:ff:d2:15:ab:e0:59:05:
65:aa:ce:58:d9:7c:ab:91:05:6a:e2:b0:85:be:a7:14:c9:f7:
1e:0d:c0:97:4e:69:7e:27:cd:9f:92:59:b5:25:f8:56:3a:b4:
60:4f:d3:85:86:33:7e:aa:80:85:c9:1d:a7:a7:61:75:be:db:
40:42:d8:87:cf:eb:ab:7b:69:b6:48:a0:03:14:f2:ee:03:d2:
d6:d8:07:88:32:d2:5f:58:90:00:cf:3a:dc:83:83:e9:1b:71:
f5:56:44:16:5f:ab:e8:83:6d:18:da:f6:ae:81:a0:61:e5:0c:
65:a1:2a:10:59:6d:1a:86:c3:8a:fd:69:dc:05:b3:c2:a4:48:
38:57:b2:58:f1:e9:01:79:8c:11:ac:8b:4e:88:e4:89:3e:3c:
d0:42:20:5e:05:55:00:d6:3e:31:f9:5f:41:d5:0e:b1:87:da:
76:05:87:b8:cb:90:fa:f5:d2:de:5a:a2:09:07:a6:54:5d:53:
07:9f:5b:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIxl+2cixBibDlb3FGcWNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkODUyNzJhNDA4MDkwNGY3NWUyMzVhNDdhZjBiNDEyNjZl
MmE2MDMwHhcNMjYwOTIyMTEwMDM4WhcNMjYwOTIzMTEwMDM4WjAzMTEwLwYDVQQD
EyhhMTk3ZjIwNzM5MTYwMDRkNDJmZjZjN2JmM2I3ZmY1MTUyNzY1YmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslX/YsIgeDQJRJ3pL1vLOEgRydQG
/qqo+msRSVZTd5Haakm0gt0+GwUw2+wmPfXh9hGkCvS98CYSHRs0Aup0c6wxOZRf
sKFIa6JD7VDEjc7Wd1hMZ7Bu9k08ULRx+fJxyvFbXKThGqKY9oX7rD8kwF+NcdmL
k9HtQEkuIuouH5KD0eX6yliOCKhGJDPyYSLk3/RT+b6zMHAA/FMVnph0+GU5qjPW
s1FHsPUpGrf3d1njtPkysbinGyod2VG0m6qSrx8izvTTQML1quyZMA+IH6bUG6Rp
l6tL5DG3TrwOHbzM7JQngBg56tbqk0HrkMEZFbpowgKR+SnVG8WPnUzVgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGX8gc5FgBNQv9se/O3/1FSdlvUMB8GA1UdIwQY
MBaAFL2FJypAgJBPdeI1pHrwtBJm4qYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdllVbktrQ0FrRTkxNGpXa2V2QzBFbWJpcGdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yODJjYjAtOTFiZS00MjJhLTk1ZDMt
MjRmMjBmOTY3NWVjLzEvdllVbktrQ0FrRTkxNGpXa2V2QzBFbWJpcGdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8yODJjYjAtOTFiZS00MjJhLTk1ZDMtMjRmMjBmOTY3NWVj
LzEvdllVbktrQ0FrRTkxNGpXa2V2QzBFbWJpcGdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgnqffLL
9wiiOLFQyW5Sfozc+7P11hGvV0AAr/eIu2iMXWLbqLxOgZ0YQVG2cRmJhTBJY2Gw
9KufkcnA0zBqvh//0hWr4FkFZarOWNl8q5EFauKwhb6nFMn3Hg3Al05pfifNn5JZ
tSX4Vjq0YE/ThYYzfqqAhckdp6dhdb7bQELYh8/rq3tptkigAxTy7gPS1tgHiDLS
X1iQAM863IOD6Rtx9VZEFl+r6INtGNr2roGgYeUMZaEqEFltGobDiv1p3AWzwqRI
OFeyWPHpAXmMEayLTojkiT480EIgXgVVANY+MflfQdUOsYfadgWHuMuQ+vXS3lqi
CQemVF1TB59b0A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:59:02 2026 by rpki-client