Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
File: vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft (raw, json)
Hash identifier: OoR2MFNxXziWqWu/elblZs811qJ0fUPsNCEpE3eyjf0=
Subject key identifier: 0A:0E:71:52:74:68:00:AA:8B:F3:31:AB:86:72:EA:0C:D2:F5:58:C6
Authority key identifier: BC:1F:4A:CE:71:99:08:E5:DB:67:D5:C8:7E:F0:54:AA:16:76:92:8D
Certificate issuer: /CN=bc1f4ace719908e5db67d5c87ef054aa1676928d
Certificate serial: 01A1212F6C65A9871AC43B3928F987070096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
Manifest number: 010F
Signing time: Fri 09 Oct 2026 15:01:58 +0000
Manifest this update: Fri 09 Oct 2026 15:01:58 +0000
Manifest next update: Sat 10 Oct 2026 15:01:58 +0000
Files and hashes: 1: 1CjpuaS4rw8ge0-ltXV4l2OX60Q.roa (hash: xS3Tyjiosi2JKWLFjDH1G3QDY2JB3RAWfG149pE1I9U=)
2: vB9KznGZCOXbZ9XIfvBUqhZ2ko0.crl (hash: RIwhOoxSqAjGxC4+8yulzsHo4HpQiJzbV/2II7UuHYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2f:6c:65:a9:87:1a:c4:3b:39:28:f9:87:07:00:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1f4ace719908e5db67d5c87ef054aa1676928d
Validity
Not Before: Oct 9 15:01:58 2026 GMT
Not After : Oct 10 15:01:58 2026 GMT
Subject: CN=0a0e7152746800aa8bf331ab8672ea0cd2f558c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:8e:1b:1d:44:96:d3:76:ce:99:10:bc:d1:
0a:b2:e5:c4:8a:9d:09:48:0a:90:2f:48:3e:d1:bd:
43:29:29:19:b1:96:58:2d:92:ec:25:28:fb:9f:25:
b4:7b:18:83:37:3c:6d:d2:e3:8a:1f:9c:5b:81:ea:
99:a0:24:80:56:ca:9d:27:3d:a0:15:f9:ab:7e:33:
2c:bc:22:ec:8c:24:c5:5f:d1:f9:86:47:db:2e:a6:
fc:2b:dc:52:48:ec:c4:09:70:5c:5c:33:25:80:e5:
23:c8:02:13:26:bc:6b:06:e6:53:a6:ae:0e:4e:3d:
3e:d2:ae:01:32:3e:d5:a4:dc:3a:e8:13:1d:3f:a6:
ce:14:8d:58:91:ec:f2:2c:91:dd:a6:2c:9e:2d:70:
5e:5a:1f:21:7c:5e:f4:2d:82:ff:06:ac:35:93:21:
a6:67:de:05:4c:93:25:4b:fe:4a:17:77:4e:53:20:
50:26:fb:37:1d:e0:d0:05:16:84:0c:15:05:4f:55:
95:2f:42:15:04:85:87:34:1f:88:1a:31:b0:0a:b2:
8d:b8:68:7b:27:e5:be:4b:a1:4a:a2:38:c9:d2:8c:
fd:f1:48:07:82:ae:34:bf:2d:c5:eb:9d:25:a7:dc:
f4:96:48:f1:36:9b:e9:2e:93:3a:18:5c:c5:42:d5:
13:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0E:71:52:74:68:00:AA:8B:F3:31:AB:86:72:EA:0C:D2:F5:58:C6
X509v3 Authority Key Identifier:
keyid:BC:1F:4A:CE:71:99:08:E5:DB:67:D5:C8:7E:F0:54:AA:16:76:92:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:aa:95:3a:46:15:0f:f6:2b:42:44:c7:b8:e8:f6:d2:00:a2:
4f:b5:f6:58:ea:ee:fc:4f:6b:8c:69:98:73:9d:18:1b:00:3b:
9f:da:d4:f3:75:f0:3e:3f:7c:02:af:f8:c2:5b:74:ed:fe:3f:
34:17:57:83:2e:fc:b5:39:cb:22:a2:66:9a:0c:17:7a:cd:0f:
d4:50:0e:89:6b:90:47:ec:d3:4e:c4:2e:d9:64:34:e5:6e:ba:
59:4d:42:c9:46:26:a1:61:90:e1:8f:43:9c:0e:ac:bc:84:ad:
9d:5e:44:86:3c:b4:57:b5:54:33:cf:d9:09:00:af:9a:85:c0:
be:7b:01:0e:69:c6:a7:42:00:1e:e3:24:cb:ef:d6:8e:85:24:
7b:88:b7:8d:bc:16:c9:c9:2b:9b:c1:f5:bf:21:4f:4d:bf:36:
72:ab:9f:52:44:9d:ae:4f:82:1f:06:f2:9f:0b:28:02:3d:56:
f0:7f:0b:cd:9f:54:82:24:6f:74:7a:f8:d2:c3:c4:12:67:36:
ea:77:d2:57:dd:27:74:76:36:00:c9:aa:44:92:ab:c9:bc:8a:
ae:27:61:90:ea:bd:dc:06:1a:ac:1d:b6:80:30:d8:aa:a0:33:
26:3d:54:1f:fd:d1:b6:56:f8:37:ea:a8:1f:86:5d:dd:b8:d2:
5c:19:5d:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEhL2xlqYcaxDs5KPmHBwCWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMWY0YWNlNzE5OTA4ZTVkYjY3ZDVjODdlZjA1NGFhMTY3
NjkyOGQwHhcNMjYxMDA5MTUwMTU4WhcNMjYxMDEwMTUwMTU4WjAzMTEwLwYDVQQD
EygwYTBlNzE1Mjc0NjgwMGFhOGJmMzMxYWI4NjcyZWEwY2QyZjU1OGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWSOGx1EltN2zpkQvNEKsuXEip0J
SAqQL0g+0b1DKSkZsZZYLZLsJSj7nyW0exiDNzxt0uOKH5xbgeqZoCSAVsqdJz2g
FfmrfjMsvCLsjCTFX9H5hkfbLqb8K9xSSOzECXBcXDMlgOUjyAITJrxrBuZTpq4O
Tj0+0q4BMj7VpNw66BMdP6bOFI1YkezyLJHdpiyeLXBeWh8hfF70LYL/Bqw1kyGm
Z94FTJMlS/5KF3dOUyBQJvs3HeDQBRaEDBUFT1WVL0IVBIWHNB+IGjGwCrKNuGh7
J+W+S6FKojjJ0oz98UgHgq40vy3F650lp9z0lkjxNpvpLpM6GFzFQtUTKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoOcVJ0aACqi/Mxq4Zy6gzS9VjGMB8GA1UdIwQY
MBaAFLwfSs5xmQjl22fVyH7wVKoWdpKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkI5S3puR1pDT1hiWjlYSWZ2QlVxaFoya28wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zZjQzOTUtMTg3MS00Y2IxLTgwN2It
MzQ2MDI2MjQ1NWIyLzEvdkI5S3puR1pDT1hiWjlYSWZ2QlVxaFoya28wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zZjQzOTUtMTg3MS00Y2IxLTgwN2ItMzQ2MDI2MjQ1NWIy
LzEvdkI5S3puR1pDT1hiWjlYSWZ2QlVxaFoya28wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKqVOkYV
D/YrQkTHuOj20gCiT7X2WOru/E9rjGmYc50YGwA7n9rU83XwPj98Aq/4wlt07f4/
NBdXgy78tTnLIqJmmgwXes0P1FAOiWuQR+zTTsQu2WQ05W66WU1CyUYmoWGQ4Y9D
nA6svIStnV5Ehjy0V7VUM8/ZCQCvmoXAvnsBDmnGp0IAHuMky+/WjoUke4i3jbwW
yckrm8H1vyFPTb82cqufUkSdrk+CHwbynwsoAj1W8H8LzZ9UgiRvdHr40sPEEmc2
6nfSV90ndHY2AMmqRJKrybyKridhkOq93AYarB22gDDYqqAzJj1UH/3Rtlb4N+qo
H4Zd3bjSXBldAA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 17:38:59 2026 by rpki-client