Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier: phdHPRgaTB56h1iSlbhq4oJQiBcBg4GFJSeDvK2C3qs=
Subject key identifier: 9A:1E:B2:3A:42:68:BF:4E:3B:B8:C0:EE:65:CD:D4:89:4F:D3:CD:84
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 019CAE356F38CFF19CFDBC4D00B4C128248B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number: 0A93
Signing time: Mon 02 Mar 2026 11:01:03 +0000
Manifest this update: Mon 02 Mar 2026 11:01:03 +0000
Manifest next update: Tue 03 Mar 2026 11:01:03 +0000
Files and hashes: 1: WhNnG7RGoKzd13ukyLrTiCjdCGU.roa (hash: xIXQvTfLd53mh36/jnGCyL3HlmPNklCfsGo5gTXyrIc=)
2: XSZ7L0E4xmYvUgsTZ3XvXFl4Eno.roa (hash: dAImuk+Q6V1EJ1OrpsgP2U2fzTi2XwHAPHF4flZhKc0=)
3: bFe3f5dqm6CeDxF5_5dX7WBQoLU.roa (hash: FzZuYRsHytP8CktVJKuMoVGRaDw+yRywVAIuiA5WiBU=)
4: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: zMQeRKuQ576IoWsLAUixCmMl1myClAC1geiF/Ls7Thc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:6f:38:cf:f1:9c:fd:bc:4d:00:b4:c1:28:24:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Mar 2 11:01:03 2026 GMT
Not After : Mar 3 11:01:03 2026 GMT
Subject: CN=9a1eb23a4268bf4e3bb8c0ee65cdd4894fd3cd84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:7d:b7:b5:59:b6:4b:9b:99:c2:6e:0b:da:
cd:17:9e:69:9f:ab:ee:5d:00:75:51:b7:52:ab:f3:
87:01:cc:5f:21:31:0d:8e:1d:0a:68:32:4c:4b:8a:
d6:44:58:33:d3:85:67:b3:0f:0c:73:35:5b:d6:4e:
4c:ee:14:f9:89:e5:c0:c3:41:f8:ce:61:73:3b:e7:
e1:f7:4d:68:de:cc:e1:37:26:6b:e1:1b:08:40:bc:
5a:9d:f6:19:4e:59:02:be:9f:a1:6f:92:38:07:2a:
5e:b3:4b:15:7c:8a:b0:cb:9b:2f:98:19:d0:45:c7:
45:9e:68:51:e1:aa:f9:0e:2c:c9:1b:f5:80:4d:64:
bd:0c:6e:95:cb:df:31:a3:8b:1d:5d:26:14:6c:49:
79:1a:3b:5f:ea:7c:b1:a2:af:f0:32:88:e2:9a:2b:
4a:4b:bd:e0:49:60:25:72:8a:6b:ab:dd:ca:21:b0:
d6:bf:be:09:14:27:dd:06:8e:b4:65:84:d2:fb:36:
8a:85:63:d2:7c:6f:73:09:28:5b:55:ca:10:cd:fb:
67:ad:28:7a:b0:8a:60:55:40:a1:46:c2:24:d2:df:
71:6d:29:12:f8:b9:90:bb:25:f4:3b:71:03:7b:be:
0c:e1:83:9d:99:eb:45:23:3c:e3:fa:9a:70:2a:70:
68:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1E:B2:3A:42:68:BF:4E:3B:B8:C0:EE:65:CD:D4:89:4F:D3:CD:84
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:83:2d:91:dc:d1:06:f4:37:c4:5f:7e:b7:dd:07:7e:43:1a:
f5:54:28:ec:ac:c8:89:4b:10:6f:6d:6e:28:90:d2:f2:29:67:
d2:61:07:b5:75:8d:c0:56:23:62:74:29:4b:ef:51:c9:8e:0d:
a4:ee:90:05:35:ae:f6:d0:2e:bc:98:f9:47:98:38:14:a4:d2:
29:a0:ce:5d:65:9d:a8:58:e2:b8:c5:b3:c7:88:91:16:d3:08:
70:c0:ae:c3:20:ca:cc:ce:48:9e:aa:e9:30:e6:a2:01:4d:5a:
a3:bf:59:73:c1:a7:60:36:0c:43:11:12:98:4e:af:d4:1e:7a:
10:93:ee:4b:59:b1:8f:3e:6b:d5:37:32:75:2a:d9:b0:6a:b3:
29:a7:44:14:09:20:42:9c:67:63:34:56:1c:8e:f9:68:da:10:
58:01:09:e2:78:08:12:68:36:07:5f:da:c9:42:8d:61:a5:53:
3f:cf:19:b7:46:02:a5:ba:07:17:c9:2a:cf:42:b4:34:f2:6b:
7e:e5:83:12:72:f8:ab:f7:ba:e8:c3:32:70:e9:7d:a4:c9:6b:
09:9d:7b:62:4c:93:e6:a2:d8:7e:38:c0:17:ae:92:31:ca:74:
c3:e7:9c:a3:50:d2:9b:1c:d2:47:72:b8:2b:4e:47:e4:ca:3d:
55:38:45:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNW84z/Gc/bxNALTBKCSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWM0MDNhZDAwN2UyYTI0MmE2YjA5MDYxYTNjMWEzNjBh
NjRkNWEwHhcNMjYwMzAyMTEwMTAzWhcNMjYwMzAzMTEwMTAzWjAzMTEwLwYDVQQD
Eyg5YTFlYjIzYTQyNjhiZjRlM2JiOGMwZWU2NWNkZDQ4OTRmZDNjZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodd9t7VZtkubmcJuC9rNF55pn6vu
XQB1UbdSq/OHAcxfITENjh0KaDJMS4rWRFgz04Vnsw8MczVb1k5M7hT5ieXAw0H4
zmFzO+fh901o3szhNyZr4RsIQLxanfYZTlkCvp+hb5I4Bypes0sVfIqwy5svmBnQ
RcdFnmhR4ar5DizJG/WATWS9DG6Vy98xo4sdXSYUbEl5Gjtf6nyxoq/wMojimitK
S73gSWAlcoprq93KIbDWv74JFCfdBo60ZYTS+zaKhWPSfG9zCShbVcoQzftnrSh6
sIpgVUChRsIk0t9xbSkS+LmQuyX0O3EDe74M4YOdmetFIzzj+ppwKnBouQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoesjpCaL9OO7jA7mXN1IlP082EMB8GA1UdIwQY
MBaAFLycQDrQB+KiQqawkGGjwaNgpk1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQt
ODhlNjgxNjI3MWY3LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQtODhlNjgxNjI3MWY3
LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoMtkdzR
BvQ3xF9+t90HfkMa9VQo7KzIiUsQb21uKJDS8iln0mEHtXWNwFYjYnQpS+9RyY4N
pO6QBTWu9tAuvJj5R5g4FKTSKaDOXWWdqFjiuMWzx4iRFtMIcMCuwyDKzM5Inqrp
MOaiAU1ao79Zc8GnYDYMQxESmE6v1B56EJPuS1mxjz5r1TcydSrZsGqzKadEFAkg
QpxnYzRWHI75aNoQWAEJ4ngIEmg2B1/ayUKNYaVTP88Zt0YCpboHF8kqz0K0NPJr
fuWDEnL4q/e66MMycOl9pMlrCZ17YkyT5qLYfjjAF66SMcp0w+eco1DSmxzSR3K4
K05H5Mo9VThFKQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:30 2026 by rpki-client