Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
File: vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json)
Hash identifier: xOVEYqwMeMAhjmZ89aTRutLADRlFFosN8MeNakoTkqc=
Subject key identifier: 42:FE:8E:75:0E:10:17:3C:94:21:4C:BE:47:5B:DA:E6:3C:9F:C6:47
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial: 01A0DEAA1A374742448440234C3C356AB8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
Manifest number: 0C0A
Signing time: Sat 26 Sep 2026 17:01:24 +0000
Manifest this update: Sat 26 Sep 2026 17:01:24 +0000
Manifest next update: Sun 27 Sep 2026 17:01:24 +0000
Files and hashes: 1: gOX8D8p806A5CJ7mpndk-EXr948.roa (hash: 2sz6qMSJk6TSCV4AbeeKZkEdeqE+n55SbpZkpDDbX6E=)
2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: +b7Y3SuAK1Y+mUpQzB4l86MuBtOdkJD/yDtgR+JK+Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:aa:1a:37:47:42:44:84:40:23:4c:3c:35:6a:b8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Validity
Not Before: Sep 26 17:01:24 2026 GMT
Not After : Sep 27 17:01:24 2026 GMT
Subject: CN=42fe8e750e10173c94214cbe475bdae63c9fc647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:8e:62:50:32:b7:65:b5:b2:df:f7:2b:6c:
51:8a:b3:32:56:b2:da:07:2f:3f:af:d0:fe:ff:93:
8f:30:58:18:65:d8:d4:77:58:dc:e7:9d:85:11:44:
12:d9:d4:00:0b:53:06:cf:9f:52:d7:29:4d:16:81:
3a:ea:4f:f1:46:7b:cb:02:c8:fd:f4:04:2f:6c:66:
43:d9:66:ed:b6:8e:4e:fe:ae:fa:1a:20:12:93:67:
28:39:81:e8:16:b7:27:3b:35:5a:3c:e1:69:d7:30:
09:85:de:6a:e1:03:6d:cf:23:09:19:2c:92:06:4c:
29:27:17:0a:0e:85:e4:9c:10:61:a8:ad:99:ad:75:
c0:06:6a:45:c9:3c:cf:c6:23:a2:49:72:cf:8d:67:
bd:e2:3b:25:77:3d:0a:2f:68:c0:b5:5b:8d:69:fa:
cc:b2:ed:06:20:ba:c8:16:92:4e:8c:95:f4:b9:c2:
ba:e5:eb:7f:d2:39:cb:ce:85:ce:48:eb:21:a2:3e:
07:eb:f9:df:d5:f2:d3:e4:cc:d4:92:12:25:55:b7:
10:6a:1b:a6:ae:17:ab:c6:2b:e7:a8:cc:0e:37:4a:
10:c6:ad:20:13:96:5b:e6:63:d0:34:2f:ab:16:25:
0a:e7:65:f8:18:b8:ee:2d:75:2b:67:8b:68:dd:cd:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FE:8E:75:0E:10:17:3C:94:21:4C:BE:47:5B:DA:E6:3C:9F:C6:47
X509v3 Authority Key Identifier:
keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:af:43:b6:4c:71:9a:25:53:ee:1a:af:15:0b:0f:07:93:d0:
97:35:64:d8:52:c0:ab:9a:fb:90:a3:e8:ae:7c:d1:ab:67:49:
40:83:c1:f4:15:ef:7b:4c:35:d8:02:ee:22:64:d4:a8:14:a8:
44:ef:5f:4c:c0:f8:72:91:f0:a3:20:43:07:ef:b9:ce:5e:69:
0f:1e:bb:e4:28:38:5e:38:f8:7f:6b:3c:23:c2:5c:36:e3:7c:
e3:28:e3:15:fa:40:b6:19:2d:a4:33:e9:d6:04:b2:08:be:84:
60:a4:1d:95:c4:d5:88:97:d5:b8:32:b7:a7:98:44:5a:44:11:
ef:2e:b9:0d:6b:57:44:93:f1:f2:78:be:58:8a:93:af:4c:db:
96:e8:e1:a5:dc:d8:2f:7d:f0:3e:db:0b:de:22:37:e9:01:11:
b1:c1:15:d2:a2:66:63:08:2f:eb:d6:b6:9f:42:28:e1:9c:cd:
40:00:36:99:cc:3a:e5:74:c2:b4:a6:94:3a:35:5a:a5:58:ba:
64:68:a1:3d:06:05:4d:f7:ad:5e:45:7f:11:74:f3:21:e7:df:
6e:74:1a:b7:1b:2a:10:a7:99:05:47:d6:9b:4b:7e:81:3a:02:
63:79:da:3c:87:1b:ad:4c:d3:fa:fe:f4:8b:f0:34:6a:9c:fc:
a4:57:20:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDeqho3R0JEhEAjTDw1arjtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOTBiYzNlMzcxMTQwYjQyYTIxZDY5N2Q4MzAwZDk0MTBh
MjQ5YWEwHhcNMjYwOTI2MTcwMTI0WhcNMjYwOTI3MTcwMTI0WjAzMTEwLwYDVQQD
Eyg0MmZlOGU3NTBlMTAxNzNjOTQyMTRjYmU0NzViZGFlNjNjOWZjNjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPiOYlAyt2W1st/3K2xRirMyVrLa
By8/r9D+/5OPMFgYZdjUd1jc552FEUQS2dQAC1MGz59S1ylNFoE66k/xRnvLAsj9
9AQvbGZD2Wbtto5O/q76GiASk2coOYHoFrcnOzVaPOFp1zAJhd5q4QNtzyMJGSyS
BkwpJxcKDoXknBBhqK2ZrXXABmpFyTzPxiOiSXLPjWe94jsldz0KL2jAtVuNafrM
su0GILrIFpJOjJX0ucK65et/0jnLzoXOSOshoj4H6/nf1fLT5MzUkhIlVbcQahum
rherxivnqMwON0oQxq0gE5Zb5mPQNC+rFiUK52X4GLjuLXUrZ4to3c2F3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEL+jnUOEBc8lCFMvkdb2uY8n8ZHMB8GA1UdIwQY
MBaAFL2QvD43EUC0KiHWl9gwDZQQokmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81NGU4YTYtNGQ4MS00ODc1LWE5ODct
ZmViMGU1MTVjMDJjLzEvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi81NGU4YTYtNGQ4MS00ODc1LWE5ODctZmViMGU1MTVjMDJj
LzEvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARK9Dtkxx
miVT7hqvFQsPB5PQlzVk2FLAq5r7kKPornzRq2dJQIPB9BXve0w12ALuImTUqBSo
RO9fTMD4cpHwoyBDB++5zl5pDx675Cg4Xjj4f2s8I8JcNuN84yjjFfpAthktpDPp
1gSyCL6EYKQdlcTViJfVuDK3p5hEWkQR7y65DWtXRJPx8ni+WIqTr0zblujhpdzY
L33wPtsL3iI36QERscEV0qJmYwgv69a2n0Io4ZzNQAA2mcw65XTCtKaUOjVapVi6
ZGihPQYFTfetXkV/EXTzIeffbnQatxsqEKeZBUfWm0t+gToCY3naPIcbrUzT+v70
i/A0apz8pFcgcQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:01:13 2026 by rpki-client