Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
File: bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft (raw, json)
Hash identifier: i21QefAUBE4FUV9EJc8qTmITA2WZ4YJQr8H2TIbApAM=
Subject key identifier: 15:E9:4A:E5:A4:11:A6:2A:4B:D1:D2:09:9E:94:85:4B:0C:B8:C1:CB
Authority key identifier: 6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54
Certificate issuer: /CN=6d5700916f90983bd8e89cd05fe629ec183bfa54
Certificate serial: 019DA48A960D6AFF011C471C477597359D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
Manifest number: 0D31
Signing time: Sun 19 Apr 2026 07:00:38 +0000
Manifest this update: Sun 19 Apr 2026 07:00:38 +0000
Manifest next update: Mon 20 Apr 2026 07:00:38 +0000
Files and hashes: 1: bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl (hash: a8eHPcQjJzepLaK/yKv408sbjapQOwKqdThxgeetcHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:96:0d:6a:ff:01:1c:47:1c:47:75:97:35:9d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5700916f90983bd8e89cd05fe629ec183bfa54
Validity
Not Before: Apr 19 07:00:38 2026 GMT
Not After : Apr 20 07:00:38 2026 GMT
Subject: CN=15e94ae5a411a62a4bd1d2099e94854b0cb8c1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:a5:9e:55:20:00:30:b4:10:07:2d:0c:14:
63:50:33:b1:0c:82:84:92:4a:78:e9:a4:70:18:e0:
0d:7e:26:4b:75:4c:4b:83:e6:ab:b4:00:44:d1:42:
c5:75:a7:06:1a:a4:f8:be:09:35:ad:12:d0:0c:28:
f3:02:d2:dc:b7:fb:95:bc:14:d1:66:bc:ac:56:13:
0b:76:ac:12:6e:fb:3b:35:ec:f8:06:77:bf:ae:f4:
d4:93:5e:60:70:2a:4c:7e:6e:df:f5:a4:1b:1e:ad:
69:28:8b:02:f9:48:09:7a:62:03:bb:d6:59:c4:8a:
ce:21:f7:f4:96:2a:b1:a3:9d:05:57:eb:31:72:aa:
81:00:bf:49:67:e7:31:9f:e8:57:31:82:f6:22:d3:
bc:bc:3a:65:09:bd:aa:bb:63:77:07:47:79:da:97:
f1:de:31:02:6d:62:29:a0:07:0a:7c:c5:90:e0:77:
98:e2:4e:77:80:1d:2f:ba:23:b5:9a:d2:49:c5:f5:
15:96:98:f2:fe:df:25:f8:5c:2b:f9:14:c8:b9:6d:
8d:14:fc:61:7b:c3:eb:f8:75:ef:09:a1:9e:03:ee:
b6:4c:a2:a8:44:72:da:9c:a1:98:f6:c3:74:ee:d5:
52:54:af:79:ff:94:0d:a3:2b:0c:6c:cb:76:76:56:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E9:4A:E5:A4:11:A6:2A:4B:D1:D2:09:9E:94:85:4B:0C:B8:C1:CB
X509v3 Authority Key Identifier:
keyid:6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e2:a5:cb:25:59:3a:7b:e8:65:4f:21:11:36:97:47:79:1c:
5d:d5:8b:0f:1a:f4:f6:af:8b:4e:1c:e9:3e:a1:1e:18:72:cd:
be:13:70:34:93:6a:01:a1:5b:3b:16:21:f7:ca:97:4e:be:1d:
92:83:b3:e2:1f:6e:a7:90:f6:1b:d3:a7:85:46:ef:f8:34:fe:
55:b4:55:6b:d4:5b:92:cd:fa:fc:d2:61:92:41:e8:ea:ce:db:
cf:eb:4a:b7:0f:10:07:82:d6:c2:a2:48:a9:81:a3:9a:93:ff:
22:62:32:e2:db:85:99:1b:46:e2:4b:2c:df:90:2e:03:91:9b:
59:92:b7:22:62:cf:f3:4d:6b:06:d8:d4:89:70:54:6e:84:e9:
fd:98:12:2f:07:6e:ac:7d:56:6c:04:19:d9:3e:b8:71:7f:a7:
f7:15:00:62:31:14:71:f7:b5:83:1d:54:18:5f:36:31:0c:3e:
a2:ea:0e:3b:21:a6:8a:cc:04:78:9c:d4:d9:dd:bd:21:ae:c6:
1b:7b:df:e4:e8:15:f1:36:a7:8d:1e:c5:0b:c4:92:a3:11:6d:
77:38:cd:77:b4:25:b8:f8:c7:52:81:a3:8c:3c:63:54:fb:fd:
b7:5f:06:63:5d:8f:c0:99:3d:2f:3f:dc:60:78:76:fc:ec:74:
0f:43:2b:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kipYNav8BHEccR3WXNZ1jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNTcwMDkxNmY5MDk4M2JkOGU4OWNkMDVmZTYyOWVjMTgz
YmZhNTQwHhcNMjYwNDE5MDcwMDM4WhcNMjYwNDIwMDcwMDM4WjAzMTEwLwYDVQQD
EygxNWU5NGFlNWE0MTFhNjJhNGJkMWQyMDk5ZTk0ODU0YjBjYjhjMWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiSlnlUgADC0EActDBRjUDOxDIKE
kkp46aRwGOANfiZLdUxLg+artABE0ULFdacGGqT4vgk1rRLQDCjzAtLct/uVvBTR
ZrysVhMLdqwSbvs7Nez4Bne/rvTUk15gcCpMfm7f9aQbHq1pKIsC+UgJemIDu9ZZ
xIrOIff0liqxo50FV+sxcqqBAL9JZ+cxn+hXMYL2ItO8vDplCb2qu2N3B0d52pfx
3jECbWIpoAcKfMWQ4HeY4k53gB0vuiO1mtJJxfUVlpjy/t8l+Fwr+RTIuW2NFPxh
e8Pr+HXvCaGeA+62TKKoRHLanKGY9sN07tVSVK95/5QNoysMbMt2dlavYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXpSuWkEaYqS9HSCZ6UhUsMuMHLMB8GA1UdIwQY
MBaAFG1XAJFvkJg72Oic0F/mKewYO/pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlZjQWtXLVFtRHZZNkp6UVgtWXA3Qmc3LWxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85YmZkYjYtMDhiNy00YjFkLThhODgt
OTI2YjM0ODE0MTMwLzEvYlZjQWtXLVFtRHZZNkp6UVgtWXA3Qmc3LWxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi85YmZkYjYtMDhiNy00YjFkLThhODgtOTI2YjM0ODE0MTMw
LzEvYlZjQWtXLVFtRHZZNkp6UVgtWXA3Qmc3LWxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuKlyyVZ
OnvoZU8hETaXR3kcXdWLDxr09q+LThzpPqEeGHLNvhNwNJNqAaFbOxYh98qXTr4d
koOz4h9up5D2G9OnhUbv+DT+VbRVa9Rbks36/NJhkkHo6s7bz+tKtw8QB4LWwqJI
qYGjmpP/ImIy4tuFmRtG4kss35AuA5GbWZK3ImLP801rBtjUiXBUboTp/ZgSLwdu
rH1WbAQZ2T64cX+n9xUAYjEUcfe1gx1UGF82MQw+ouoOOyGmiswEeJzU2d29Ia7G
G3vf5OgV8TanjR7FC8SSoxFtdzjNd7QluPjHUoGjjDxjVPv9t18GY12PwJk9Lz/c
YHh2/Ox0D0Mrbw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:40 2026 by rpki-client