Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
File: vf3CTv25YU3JPpd3TOicHJcw5mU.mft (raw, json)
Hash identifier: b+HrOMIQXcnLs3G7p9ivRjxtHpwbpMIyPNr4Zk6C1lQ=
Subject key identifier: 8A:F4:EE:30:ED:80:74:F7:83:87:75:32:34:47:58:71:14:CF:C6:49
Authority key identifier: BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
Certificate issuer: /CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Certificate serial: 019D9DE38A1B40F9E4203A0A7454E5AFAC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
Manifest number: 0227
Signing time: Sat 18 Apr 2026 00:00:28 +0000
Manifest this update: Sat 18 Apr 2026 00:00:28 +0000
Manifest next update: Sun 19 Apr 2026 00:00:28 +0000
Files and hashes: 1: gAWk_30h7y4VaoOZxcAdDFowjFc.roa (hash: odqu0T0Eb3GJ36/dwAalvTu2Dwy1IIPBya2kP6/fxjk=)
2: vf3CTv25YU3JPpd3TOicHJcw5mU.crl (hash: yYELyOh4fzxITgEjAMPsTFwN/iYsglWWh5QfeT9E4q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:8a:1b:40:f9:e4:20:3a:0a:74:54:e5:af:ac:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Validity
Not Before: Apr 18 00:00:28 2026 GMT
Not After : Apr 19 00:00:28 2026 GMT
Subject: CN=8af4ee30ed8074f7838775323447587114cfc649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:24:10:aa:bf:0f:4a:83:f3:14:ec:fe:4e:f0:
c5:ba:f7:20:3d:eb:28:5f:1e:94:37:1f:63:4f:16:
51:0b:a2:e8:87:95:81:3d:53:10:c3:04:49:82:f7:
d8:d3:a2:1e:34:da:84:48:a4:04:3c:7d:fb:d2:48:
2c:59:96:ea:ca:9f:a8:df:7a:86:b0:eb:34:1c:d8:
a2:ea:9c:11:22:65:ec:f5:fa:59:fa:c6:55:e8:4f:
60:30:9f:7b:c4:45:c4:70:19:fe:c5:e7:7a:99:0e:
07:4d:07:5b:ec:6b:b0:9d:f6:73:b5:5c:38:83:e9:
f5:22:50:e5:b9:d9:8b:67:6d:3d:e8:5a:ec:bb:86:
66:da:11:19:28:72:61:70:3d:99:cd:c2:7c:41:7c:
c1:d5:93:34:3d:59:c7:ee:de:09:09:32:eb:48:a3:
c9:57:da:50:ae:8d:50:2e:e3:16:1c:fe:0f:d1:b9:
00:09:8f:84:96:2c:97:f7:d6:97:5b:52:01:5f:6a:
99:4e:0d:6d:1c:b5:68:d6:f5:31:2b:17:03:83:6a:
0b:04:20:fe:58:94:97:7f:d6:45:7a:0e:87:60:f7:
52:b0:bc:ba:be:f6:d4:54:27:e7:77:1e:3d:24:04:
40:61:67:63:0d:d5:eb:d7:73:bb:fa:f8:55:9b:d9:
c8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F4:EE:30:ED:80:74:F7:83:87:75:32:34:47:58:71:14:CF:C6:49
X509v3 Authority Key Identifier:
keyid:BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e5:e2:0f:ba:b3:7f:10:37:b9:b0:2a:9a:af:fc:ab:87:ff:
e3:46:7d:06:e7:29:80:cc:23:f2:97:f1:ae:6a:1b:b3:5a:ae:
bc:ee:b3:d3:e3:e4:0f:95:04:c5:2b:47:9b:e9:5b:6a:09:65:
e6:3a:a5:8a:2d:61:a5:ee:41:30:ed:76:a5:2a:e6:cf:d1:84:
ba:a8:df:75:60:5d:85:ae:d1:34:25:d7:c4:86:5b:78:6e:3a:
c0:c4:3a:e0:1c:e8:45:dd:7e:8b:d2:3b:d3:6e:1f:7c:a8:85:
ad:55:31:d1:57:27:f2:5d:1b:1f:dd:2c:5f:0b:0e:9a:3d:f7:
f7:e5:a2:aa:cf:38:5e:28:19:92:18:02:37:c0:96:2d:ca:84:
25:f1:3f:16:38:34:c3:44:ed:5d:5e:c0:9d:b8:bb:af:81:b3:
41:d1:8e:0b:6e:06:b6:72:3f:1e:e4:ed:11:51:78:59:78:21:
f3:d3:35:b3:2f:42:1f:bf:9f:d5:c3:94:7d:9d:52:1d:dc:d6:
e7:73:b0:fd:c0:5b:ff:a0:21:8a:aa:a6:8b:41:b7:e8:c8:da:
a1:62:bb:8f:d6:69:92:af:af:d2:d0:62:4e:16:ec:ed:e5:01:
18:5f:9d:79:44:93:71:6a:e0:e1:be:bd:a3:94:bc:0b:f8:12:
31:7f:6a:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2d44obQPnkIDoKdFTlr6yLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmRjMjRlZmRiOTYxNGRjOTNlOTc3NzRjZTg5YzFjOTcz
MGU2NjUwHhcNMjYwNDE4MDAwMDI4WhcNMjYwNDE5MDAwMDI4WjAzMTEwLwYDVQQD
Eyg4YWY0ZWUzMGVkODA3NGY3ODM4Nzc1MzIzNDQ3NTg3MTE0Y2ZjNjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CQQqr8PSoPzFOz+TvDFuvcgPeso
Xx6UNx9jTxZRC6Loh5WBPVMQwwRJgvfY06IeNNqESKQEPH370kgsWZbqyp+o33qG
sOs0HNii6pwRImXs9fpZ+sZV6E9gMJ97xEXEcBn+xed6mQ4HTQdb7GuwnfZztVw4
g+n1IlDludmLZ2096Frsu4Zm2hEZKHJhcD2ZzcJ8QXzB1ZM0PVnH7t4JCTLrSKPJ
V9pQro1QLuMWHP4P0bkACY+EliyX99aXW1IBX2qZTg1tHLVo1vUxKxcDg2oLBCD+
WJSXf9ZFeg6HYPdSsLy6vvbUVCfndx49JARAYWdjDdXr13O7+vhVm9nIsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIr07jDtgHT3g4d1MjRHWHEUz8ZJMB8GA1UdIwQY
MBaAFL39wk79uWFNyT6Xd0zonByXMOZlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmYzQ1R2MjVZVTNKUHBkM1RPaWNISmN3NW1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85Nzg1NDctZTEwMS00ZjRhLTk1Zjct
NGYzYTUzNDNhMDRmLzEvdmYzQ1R2MjVZVTNKUHBkM1RPaWNISmN3NW1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85Nzg1NDctZTEwMS00ZjRhLTk1ZjctNGYzYTUzNDNhMDRm
LzEvdmYzQ1R2MjVZVTNKUHBkM1RPaWNISmN3NW1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeXiD7qz
fxA3ubAqmq/8q4f/40Z9BucpgMwj8pfxrmobs1quvO6z0+PkD5UExStHm+lbagll
5jqlii1hpe5BMO12pSrmz9GEuqjfdWBdha7RNCXXxIZbeG46wMQ64BzoRd1+i9I7
024ffKiFrVUx0Vcn8l0bH90sXwsOmj339+Wiqs84XigZkhgCN8CWLcqEJfE/Fjg0
w0TtXV7Anbi7r4GzQdGOC24GtnI/HuTtEVF4WXgh89M1sy9CH7+f1cOUfZ1SHdzW
53Ow/cBb/6Ahiqqmi0G36MjaoWK7j9Zpkq+v0tBiThbs7eUBGF+deUSTcWrg4b69
o5S8C/gSMX9q1Q==
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:39:21 2026 by rpki-client