Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier: +DQboQLiK7FwDcUToaKZOFKIKSwFAQzU+ZxU5GhIE/o=
Subject key identifier: 2E:15:FC:A9:D8:B0:E8:8E:5A:D7:75:3E:F7:86:7A:35:4C:C5:71:61
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 01A1249D8C2A8D8668D276118D90FC09F1B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number: 0CE5
Signing time: Sat 10 Oct 2026 07:01:07 +0000
Manifest this update: Sat 10 Oct 2026 07:01:07 +0000
Manifest next update: Sun 11 Oct 2026 07:01:07 +0000
Files and hashes: 1: BqP8JpSkO9zmFzKOVwQO5quzGwc.roa (hash: mL1va32nLh3K1Fn2SjIGSxBOV9vU7EKGw0UkMzUCNeA=)
2: WhNnG7RGoKzd13ukyLrTiCjdCGU.roa (hash: xIXQvTfLd53mh36/jnGCyL3HlmPNklCfsGo5gTXyrIc=)
3: XSZ7L0E4xmYvUgsTZ3XvXFl4Eno.roa (hash: dAImuk+Q6V1EJ1OrpsgP2U2fzTi2XwHAPHF4flZhKc0=)
4: bFe3f5dqm6CeDxF5_5dX7WBQoLU.roa (hash: FzZuYRsHytP8CktVJKuMoVGRaDw+yRywVAIuiA5WiBU=)
5: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: LjWvpKUZuwHyVPb1ftnH3m+/9Ou9c4C+CY/msgEwnmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:9d:8c:2a:8d:86:68:d2:76:11:8d:90:fc:09:f1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Oct 10 07:01:07 2026 GMT
Not After : Oct 11 07:01:07 2026 GMT
Subject: CN=2e15fca9d8b0e88e5ad7753ef7867a354cc57161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:3b:e6:93:18:bf:31:44:80:24:f1:19:6e:
74:73:b2:01:2c:82:96:cd:be:ce:22:1e:57:78:15:
5f:a1:ad:18:29:35:87:98:36:98:dd:07:e2:ce:d8:
01:b4:eb:1d:22:8e:59:08:1d:ec:f1:d4:64:f0:fb:
6f:8c:ff:55:a4:21:34:ef:34:8a:10:c1:f9:61:f0:
48:00:63:88:88:18:3f:e8:0d:40:35:a9:4c:09:cd:
24:a4:8c:bd:56:3e:af:f1:c6:69:a4:db:e7:f6:6e:
15:cf:a0:c5:30:b5:14:03:2e:40:2a:d4:0b:37:8d:
f8:ba:e2:cf:a4:df:6a:64:1a:eb:27:07:13:7d:be:
f2:8b:93:1e:8e:5f:0b:ee:a6:1b:c1:c6:26:b9:8f:
ec:18:d4:1e:fb:c1:02:70:f6:40:3f:af:e6:3f:ba:
48:27:4b:56:b3:90:63:ce:57:4c:34:f9:6d:6d:d7:
b7:bc:2a:fe:3c:ac:3c:c0:17:c3:7c:2a:4e:7f:94:
10:1b:70:8c:8f:58:3f:11:5a:bd:1a:9d:4e:ba:22:
a4:8a:d0:90:f0:b9:17:a6:97:f4:37:b8:f2:fa:52:
66:ba:86:29:5c:ac:59:48:00:7e:35:9b:2f:1f:64:
72:a5:95:41:66:f7:9b:77:e6:ca:34:c0:4f:3a:2d:
10:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:15:FC:A9:D8:B0:E8:8E:5A:D7:75:3E:F7:86:7A:35:4C:C5:71:61
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:12:c1:f4:b7:43:4b:95:a1:78:4b:94:ad:29:0f:d3:45:cc:
6e:be:8a:8c:31:30:ca:7a:5b:97:86:85:4e:85:f4:ad:36:3d:
05:94:0b:40:15:93:df:1d:b8:f9:54:69:f2:7a:c4:66:2d:a1:
25:87:94:e7:ca:20:53:10:65:45:b5:73:ec:9f:71:00:c2:e3:
bc:1a:ff:91:d4:f1:6d:37:bf:c4:75:96:bf:8f:bf:97:b6:5b:
98:f7:4a:ca:0e:fe:50:2b:34:5e:21:19:8a:dd:78:d3:a6:fe:
79:26:46:6b:81:21:66:8a:9b:b6:61:58:ff:c8:8a:da:59:ee:
c6:3a:94:59:bd:bd:bc:12:74:0e:54:4e:e0:16:81:20:bf:19:
d1:c8:f0:ee:74:53:e9:1b:41:08:8b:b5:e5:eb:63:be:8a:4d:
8d:59:bf:0c:2a:a6:b3:10:51:c5:8e:70:c4:99:a1:32:4a:47:
30:29:95:a0:dd:0d:71:05:1d:ec:5e:0f:9f:3e:53:3d:ec:67:
6c:25:9b:2b:f1:fe:26:fc:b9:fa:60:ec:85:1a:7f:d4:33:f8:
39:c4:e7:ce:35:11:66:b9:dd:47:4a:8f:d1:4b:29:f8:39:c2:
88:5e:c4:12:b4:b8:91:6b:c0:d5:08:15:17:0d:a5:d5:ef:ee:
ff:a4:08:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEknYwqjYZo0nYRjZD8CfG5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWM0MDNhZDAwN2UyYTI0MmE2YjA5MDYxYTNjMWEzNjBh
NjRkNWEwHhcNMjYxMDEwMDcwMTA3WhcNMjYxMDExMDcwMTA3WjAzMTEwLwYDVQQD
EygyZTE1ZmNhOWQ4YjBlODhlNWFkNzc1M2VmNzg2N2EzNTRjYzU3MTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXQ75pMYvzFEgCTxGW50c7IBLIKW
zb7OIh5XeBVfoa0YKTWHmDaY3QfiztgBtOsdIo5ZCB3s8dRk8PtvjP9VpCE07zSK
EMH5YfBIAGOIiBg/6A1ANalMCc0kpIy9Vj6v8cZppNvn9m4Vz6DFMLUUAy5AKtQL
N434uuLPpN9qZBrrJwcTfb7yi5Mejl8L7qYbwcYmuY/sGNQe+8ECcPZAP6/mP7pI
J0tWs5BjzldMNPltbde3vCr+PKw8wBfDfCpOf5QQG3CMj1g/EVq9Gp1OuiKkitCQ
8LkXppf0N7jy+lJmuoYpXKxZSAB+NZsvH2RypZVBZvebd+bKNMBPOi0QuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4V/KnYsOiOWtd1PveGejVMxXFhMB8GA1UdIwQY
MBaAFLycQDrQB+KiQqawkGGjwaNgpk1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQt
ODhlNjgxNjI3MWY3LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQtODhlNjgxNjI3MWY3
LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBLB9LdD
S5WheEuUrSkP00XMbr6KjDEwynpbl4aFToX0rTY9BZQLQBWT3x24+VRp8nrEZi2h
JYeU58ogUxBlRbVz7J9xAMLjvBr/kdTxbTe/xHWWv4+/l7ZbmPdKyg7+UCs0XiEZ
it1406b+eSZGa4EhZoqbtmFY/8iK2lnuxjqUWb29vBJ0DlRO4BaBIL8Z0cjw7nRT
6RtBCIu15etjvopNjVm/DCqmsxBRxY5wxJmhMkpHMCmVoN0NcQUd7F4Pnz5TPexn
bCWbK/H+Jvy5+mDshRp/1DP4OcTnzjURZrndR0qP0Usp+DnCiF7EErS4kWvA1QgV
Fw2l1e/u/6QIUQ==
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:46:56 2026 by rpki-client