Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: An96khvj2ujBLuuHA69Ou+SKBQ8qPYwv7XvbXqmTXn8=
Subject key identifier: E9:CD:67:29:1B:A7:2F:24:3A:70:65:05:F0:01:DA:D9:C8:66:AF:E7
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 01A10135E967F483B13FAE53C9E6F529F8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 0E86
Signing time: Sat 03 Oct 2026 10:01:12 +0000
Manifest this update: Sat 03 Oct 2026 10:01:12 +0000
Manifest next update: Sun 04 Oct 2026 10:01:12 +0000
Files and hashes: 1: FKH8xZJ_YHOc07BQdMH2-QcT4rI.roa (hash: Yvb0PbUbYKGYDycEyweK+TQumsZjfiIHZGi6vLPV4RI=)
2: UFyGWXWcim7DlwzYRFdDDxFp02E.roa (hash: kKnEir5+3nk1ouhvn6251pQ8Tl1aQO6TIVnnwdHfSdI=)
3: sdzS0oCftjlUBF_x6Se_monNeYk.roa (hash: WoH/tQiUE8dkOdaeguscSVlQ0r0KBSj1gMZzcaTJ6DM=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: DEi1e3mVmwGBAVPjjSzJcUwCJpoptY5SC+9gds/vjAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:35:e9:67:f4:83:b1:3f:ae:53:c9:e6:f5:29:f8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Oct 3 10:01:12 2026 GMT
Not After : Oct 4 10:01:12 2026 GMT
Subject: CN=e9cd67291ba72f243a706505f001dad9c866afe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:a8:2c:1c:ae:23:a7:ff:37:d9:d6:1f:fa:
c1:83:62:04:78:1c:53:fe:42:b2:7e:59:3a:11:cf:
f1:ff:41:e7:17:ba:c1:88:7d:40:30:82:35:a0:c0:
6b:dd:23:80:d1:98:08:57:ec:8e:92:b7:f4:eb:a9:
36:5f:af:87:43:4d:92:3a:f7:6c:77:e0:92:a4:fa:
23:17:82:5a:49:09:84:a0:e2:ad:78:b2:01:a0:fb:
b3:16:64:66:7f:c2:8f:b5:44:9b:81:ae:6b:f1:26:
90:bc:aa:6b:ba:f7:ce:7d:be:55:e5:7e:be:87:c3:
c6:47:48:5b:74:94:e7:40:b5:e4:46:3a:6b:6b:81:
8b:1f:c8:90:c2:ce:a3:e0:0f:31:94:02:c3:cc:c5:
cf:7e:78:39:52:46:dd:c9:ff:9d:a0:3c:d8:fe:bc:
80:29:c0:c9:ff:7c:96:2b:5a:f9:64:a1:03:20:56:
b8:02:c6:87:82:26:e4:6e:51:9f:d5:52:58:4f:db:
38:52:f8:4e:95:9f:43:f8:e9:3c:27:1b:df:19:a9:
c8:5d:39:4d:3d:08:f7:80:62:04:80:a5:03:d2:cf:
83:8f:0f:24:67:ce:53:55:43:ea:1f:e7:1c:12:81:
5c:46:09:35:92:57:1f:26:ba:22:86:5c:0d:8a:93:
37:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CD:67:29:1B:A7:2F:24:3A:70:65:05:F0:01:DA:D9:C8:66:AF:E7
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:08:a0:da:52:a5:a4:82:31:ec:44:4d:95:85:90:2d:76:1c:
7f:53:83:7c:68:45:52:d9:5a:93:d8:26:f5:6e:47:68:97:aa:
f9:2a:da:a2:34:92:d5:4e:c9:a3:6f:43:07:5c:87:b9:7b:d9:
87:fb:5b:9d:83:c0:f1:e0:18:70:ad:b0:01:90:ce:e1:e2:73:
0b:67:fa:87:d3:c6:56:18:11:10:49:5c:26:1e:b7:a5:84:f6:
aa:71:14:46:51:de:b1:e1:3e:c5:8f:1b:68:f3:94:11:f6:af:
c6:8c:73:92:4d:b0:97:1a:5a:cb:c2:a9:4e:81:2c:73:e3:32:
6b:67:e2:28:50:05:02:32:9c:d9:27:f3:2f:e6:eb:84:8b:2a:
f0:e7:57:1a:4f:8d:04:db:01:fd:7f:97:0d:27:fb:7b:a6:bb:
54:4a:cf:b1:f0:76:0f:11:eb:8c:e1:24:b7:ff:1d:1e:a0:0f:
0e:7b:39:0c:97:b8:76:29:a6:1e:e1:0e:23:87:0d:89:2d:5e:
2d:0a:5d:e7:b9:51:1b:16:ec:0b:46:b5:3c:e3:3f:7f:e4:a5:
fc:88:a2:8e:40:7f:b2:16:51:d5:8f:c6:82:d8:7c:94:4a:5f:
17:25:8f:c9:61:1d:8a:e2:9e:2b:0a:c7:53:95:b4:5a:94:5e:
e0:2e:88:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEBNeln9IOxP65Tyeb1KfjgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMzdjNzBmMWM2N2VjYTE3NzVhNzA5YzkyMzVkNmEyZjU1
NTE2YjgwHhcNMjYxMDAzMTAwMTEyWhcNMjYxMDA0MTAwMTEyWjAzMTEwLwYDVQQD
EyhlOWNkNjcyOTFiYTcyZjI0M2E3MDY1MDVmMDAxZGFkOWM4NjZhZmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7aoLByuI6f/N9nWH/rBg2IEeBxT
/kKyflk6Ec/x/0HnF7rBiH1AMII1oMBr3SOA0ZgIV+yOkrf066k2X6+HQ02SOvds
d+CSpPojF4JaSQmEoOKteLIBoPuzFmRmf8KPtUSbga5r8SaQvKpruvfOfb5V5X6+
h8PGR0hbdJTnQLXkRjpra4GLH8iQws6j4A8xlALDzMXPfng5Ukbdyf+doDzY/ryA
KcDJ/3yWK1r5ZKEDIFa4AsaHgibkblGf1VJYT9s4UvhOlZ9D+Ok8JxvfGanIXTlN
PQj3gGIEgKUD0s+Djw8kZ85TVUPqH+ccEoFcRgk1klcfJroihlwNipM3GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnNZykbpy8kOnBlBfAB2tnIZq/nMB8GA1UdIwQY
MBaAFL43xw8cZ+yhd1pwnJI11qL1VRa4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmpmSER4eG43S0YzV25DY2tqWFdvdlZWRnJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85NzM0MzEtNWFlNC00NTIxLTk0NTQt
YzhlYjA4Y2U5MDg5LzEvdmpmSER4eG43S0YzV25DY2tqWFdvdlZWRnJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85NzM0MzEtNWFlNC00NTIxLTk0NTQtYzhlYjA4Y2U5MDg5
LzEvdmpmSER4eG43S0YzV25DY2tqWFdvdlZWRnJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwig2lKl
pIIx7ERNlYWQLXYcf1ODfGhFUtlak9gm9W5HaJeq+SraojSS1U7Jo29DB1yHuXvZ
h/tbnYPA8eAYcK2wAZDO4eJzC2f6h9PGVhgREElcJh63pYT2qnEURlHeseE+xY8b
aPOUEfavxoxzkk2wlxpay8KpToEsc+Mya2fiKFAFAjKc2SfzL+brhIsq8OdXGk+N
BNsB/X+XDSf7e6a7VErPsfB2DxHrjOEkt/8dHqAPDns5DJe4dimmHuEOI4cNiS1e
LQpd57lRGxbsC0a1POM/f+Sl/IiijkB/shZR1Y/Ggth8lEpfFyWPyWEdiuKeKwrH
U5W0WpRe4C6IVQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 14:25:25 2026 by rpki-client