Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
File: v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft (raw, json)
Hash identifier: ZE9mD4b2ZQZvyWgQi9PCz5VeL/qLVgtV3YheE3wsIzs=
Subject key identifier: 38:C2:2E:74:62:B9:E6:6B:93:5C:4F:29:6B:80:90:1F:D6:23:AD:B3
Authority key identifier: BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
Certificate issuer: /CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Certificate serial: 019D9C9A5897F48D6187F913038AE6120F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
Manifest number: 01C6
Signing time: Fri 17 Apr 2026 18:00:54 +0000
Manifest this update: Fri 17 Apr 2026 18:00:54 +0000
Manifest next update: Sat 18 Apr 2026 18:00:54 +0000
Files and hashes: 1: 1Zl-IUirtFi4sZnWNhZ6XX4eC48.roa (hash: vrKUDuWKYhc1NZIetKI50go1lW0cijo+2gHcyXj0OzQ=)
2: jsXKldUP6xb6KQhmvufaY8HlIYU.roa (hash: o0QQc0vgOjau+xWYxGMgFh+K0UaqG+UGqUdPlhwyR0Q=)
3: v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl (hash: H3rnCNo0pyxefCrJPQLqJzI5FkisP4a8jsGWQecX8XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:58:97:f4:8d:61:87:f9:13:03:8a:e6:12:0f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Validity
Not Before: Apr 17 18:00:54 2026 GMT
Not After : Apr 18 18:00:54 2026 GMT
Subject: CN=38c22e7462b9e66b935c4f296b80901fd623adb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:86:7a:7d:19:c6:77:3a:07:25:65:aa:20:
37:b5:e9:6d:1b:56:25:7d:d1:88:5d:34:28:bc:3f:
9e:a8:45:9a:a4:63:95:76:a6:86:4d:b2:16:bc:32:
2c:8a:e5:47:4f:d4:62:0c:f8:80:c2:c7:7d:1c:c1:
70:86:cb:8d:36:ca:b9:8f:15:bd:c7:76:2b:a2:fc:
bc:27:e7:e1:a3:1b:2d:27:67:32:17:55:d8:eb:1a:
02:09:35:74:28:d1:e1:06:ce:d4:c7:e2:6f:02:dc:
97:2b:67:d3:47:3c:2f:1b:72:6f:20:a9:7a:62:9d:
41:a1:01:8a:17:d0:2a:d8:c7:84:95:53:99:06:27:
0a:9c:6c:50:c3:2f:59:6a:e5:38:ee:3c:4a:d5:2c:
ad:5c:47:62:39:a7:86:30:ae:cb:21:ee:2c:a9:92:
25:bc:6a:cb:96:0a:71:56:8a:83:f5:f6:91:6c:b4:
48:04:39:04:0a:d3:91:7f:79:2d:ad:5d:bd:2d:35:
1e:79:9b:45:f6:5e:39:b2:ca:ff:aa:30:c7:73:f1:
46:20:7d:36:3c:27:23:6e:de:59:ec:59:18:25:e8:
43:ea:ea:99:5e:13:3f:15:12:bc:c8:41:5f:66:1f:
fe:d6:0d:49:85:f9:45:a4:eb:e2:44:96:3a:c6:42:
74:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C2:2E:74:62:B9:E6:6B:93:5C:4F:29:6B:80:90:1F:D6:23:AD:B3
X509v3 Authority Key Identifier:
keyid:BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:83:d2:75:36:37:42:b4:7d:e1:53:13:14:cd:ee:01:c9:a9:
4d:29:f4:9a:1b:c0:62:e6:b7:92:83:96:fe:53:d3:43:14:1c:
1a:de:a7:63:64:14:a5:0d:65:01:a2:c0:ac:6a:11:ea:0c:86:
a3:a2:7a:40:60:0c:92:29:9a:4c:fc:e1:5a:45:20:29:68:1d:
78:42:33:45:56:79:3c:88:54:07:07:cc:8f:b0:f1:76:e7:8f:
d9:8c:68:fd:b7:1c:5c:35:10:42:d1:53:4c:a9:38:a0:da:d2:
5e:df:cf:92:b3:c2:f6:14:ee:df:a2:c3:17:3c:d8:96:47:33:
63:7a:96:55:6b:2e:19:52:49:09:a1:0f:f0:c6:5d:34:b8:e3:
6e:8c:62:2d:af:f3:dd:de:4e:2e:8a:f3:3f:8c:b8:f3:3d:e7:
59:aa:db:1f:14:d9:17:1b:47:9f:bf:b0:1e:a4:7f:e5:dd:6c:
aa:93:b0:0c:ae:0b:9c:39:63:b1:92:aa:8a:24:ab:57:f5:61:
d7:15:51:a6:54:83:54:a8:09:ef:ce:d4:27:17:1b:5d:b3:fa:
85:96:54:15:5b:b4:1c:05:e3:82:57:a9:d9:e6:8b:44:4b:f5:
83:5d:72:5d:9d:81:cf:66:48:68:7f:3d:0d:05:a0:45:7d:d6:
33:26:42:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cmliX9I1hh/kTA4rmEg8/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZjc2YTA2ZWFhMmEwM2M3OTkxMzQ3NTA5Yjg2MDhmNGE3
MTA3MWYwHhcNMjYwNDE3MTgwMDU0WhcNMjYwNDE4MTgwMDU0WjAzMTEwLwYDVQQD
EygzOGMyMmU3NDYyYjllNjZiOTM1YzRmMjk2YjgwOTAxZmQ2MjNhZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTuGen0Zxnc6ByVlqiA3teltG1Yl
fdGIXTQovD+eqEWapGOVdqaGTbIWvDIsiuVHT9RiDPiAwsd9HMFwhsuNNsq5jxW9
x3Yrovy8J+fhoxstJ2cyF1XY6xoCCTV0KNHhBs7Ux+JvAtyXK2fTRzwvG3JvIKl6
Yp1BoQGKF9Aq2MeElVOZBicKnGxQwy9ZauU47jxK1SytXEdiOaeGMK7LIe4sqZIl
vGrLlgpxVoqD9faRbLRIBDkECtORf3ktrV29LTUeeZtF9l45ssr/qjDHc/FGIH02
PCcjbt5Z7FkYJehD6uqZXhM/FRK8yEFfZh/+1g1JhflFpOviRJY6xkJ0NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjCLnRiueZrk1xPKWuAkB/WI62zMB8GA1UdIwQY
MBaAFL/3agbqoqA8eZE0dQm4YI9KcQcfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdl9kcUJ1cWlvRHg1a1RSMUNiaGdqMHB4Qng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xNDU5NDMtNjUxZi00NmZmLTkzYjIt
OTQ5NjYyYjI3MWIyLzEvdl9kcUJ1cWlvRHg1a1RSMUNiaGdqMHB4Qng4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xNDU5NDMtNjUxZi00NmZmLTkzYjItOTQ5NjYyYjI3MWIy
LzEvdl9kcUJ1cWlvRHg1a1RSMUNiaGdqMHB4Qng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoPSdTY3
QrR94VMTFM3uAcmpTSn0mhvAYua3koOW/lPTQxQcGt6nY2QUpQ1lAaLArGoR6gyG
o6J6QGAMkimaTPzhWkUgKWgdeEIzRVZ5PIhUBwfMj7DxdueP2Yxo/bccXDUQQtFT
TKk4oNrSXt/PkrPC9hTu36LDFzzYlkczY3qWVWsuGVJJCaEP8MZdNLjjboxiLa/z
3d5OLorzP4y48z3nWarbHxTZFxtHn7+wHqR/5d1sqpOwDK4LnDljsZKqiiSrV/Vh
1xVRplSDVKgJ787UJxcbXbP6hZZUFVu0HAXjglep2eaLREv1g11yXZ2Bz2ZIaH89
DQWgRX3WMyZCWQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:04:54 2026 by rpki-client