
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
File: vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json)
Hash identifier: mNBBP00cNR8GaA3tB+Mlds+OOZNU5TXWzYCJSsfOaaE=
Subject key identifier: EB:A6:C4:2B:A3:9A:6D:FC:80:98:05:56:2B:3B:7C:EC:21:E5:F9:0E
Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
Certificate issuer: /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Certificate serial: 01A0C5C517F231EA5DC00073E01596A62A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 21:00:23 +0000
Manifest this update: Mon 21 Sep 2026 21:00:23 +0000
Manifest next update: Tue 22 Sep 2026 21:00:23 +0000
Files and hashes: 1: 2gOMElZpuYjYWwfxZPDkr57xubA.roa (hash: VyukPCJwz31E+u5Ce9cCzwq/Lsn1oqGSgyO+hsnU0ek=)
2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: 6wf8XkSIgLKiQ5oYfUljRE7wPygTUl7qL6TogDsxA5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:17:f2:31:ea:5d:c0:00:73:e0:15:96:a6:2a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Validity
Not Before: Sep 21 21:00:23 2026 GMT
Not After : Sep 22 21:00:23 2026 GMT
Subject: CN=eba6c42ba39a6dfc809805562b3b7cec21e5f90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:8b:6f:26:1f:6b:64:b5:95:cf:3a:a0:ce:
27:6a:1e:7c:73:76:77:29:6d:8b:6a:89:76:db:18:
ad:00:28:f2:db:e7:e0:0b:84:70:fc:e6:97:83:cc:
90:45:c0:9c:85:83:e4:da:97:00:97:65:c7:2c:f1:
ab:f8:85:63:36:87:ef:af:d5:88:cc:ca:0a:17:39:
60:02:61:f3:ed:49:3d:e7:3d:14:9e:57:3c:37:ab:
9a:a1:bf:86:b5:3f:c6:85:76:15:f3:92:58:9f:bb:
56:49:8e:89:6f:b1:76:84:eb:db:1b:2e:c9:28:16:
8f:aa:8f:28:9d:23:08:38:c5:e6:c1:6b:c6:5c:67:
8a:11:83:40:6f:a9:b9:b7:00:b3:67:45:1a:8d:41:
81:88:f5:f8:06:bf:88:20:a0:7e:cf:3a:e3:ef:56:
d9:87:ea:65:da:43:61:77:91:9b:f7:60:3d:08:8e:
04:50:b6:fb:75:95:54:22:7d:fe:ab:54:b9:b6:f4:
3a:f2:c4:1d:cd:d9:1e:65:94:5e:54:ee:f7:e5:78:
61:20:ae:98:37:47:c4:bf:f2:32:e0:04:b7:02:34:
56:30:bc:94:63:fe:bc:39:56:e4:0b:6f:81:37:09:
b3:3a:3f:9d:59:4d:6f:87:17:9f:1d:92:92:73:f7:
d4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A6:C4:2B:A3:9A:6D:FC:80:98:05:56:2B:3B:7C:EC:21:E5:F9:0E
X509v3 Authority Key Identifier:
keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6f:72:6f:73:81:ec:bf:f5:f3:fc:3d:14:ac:8d:09:09:d4:
3e:cf:1e:82:61:0e:d8:d0:82:f8:26:06:c4:e1:63:f1:c7:5f:
b8:1a:39:c8:e8:d3:34:4f:79:8b:e7:48:fd:2f:2d:e2:23:c5:
91:aa:e0:f9:99:20:5c:69:43:db:67:9b:7f:2a:63:c5:9e:03:
01:b4:f5:73:e2:2b:c5:d2:1c:c7:ac:3a:1a:f5:13:ef:53:e7:
f8:9f:ba:51:09:3c:ee:ed:c8:8b:4e:4d:af:6c:57:ca:c7:7b:
18:f5:d0:8b:dd:ac:0f:2e:c9:36:89:4c:a2:b3:d4:98:0b:27:
84:8f:58:12:b9:26:f1:f3:48:3e:e3:16:ce:20:52:84:e5:13:
cc:e3:5b:de:98:ee:e4:7e:af:eb:c5:64:18:a1:64:5f:0c:c3:
41:0d:1a:13:64:e5:a2:4f:0d:59:8c:cd:23:a8:50:10:36:6d:
1e:4e:c8:42:40:54:95:52:57:05:c1:2c:69:8a:62:ad:ab:3b:
ea:1c:a7:44:d9:bc:80:99:31:d4:fc:9f:e2:6d:41:23:5a:85:
f3:96:17:fb:08:86:b1:64:ca:7d:e0:0c:25:fc:58:78:af:72:
50:12:a0:e6:a0:61:24:54:35:10:87:02:61:f8:16:e9:48:19:
35:a1:84:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFxRfyMepdwABz4BWWpioNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZGI2YTRlZDM5M2Q4YTNiNzUwN2Y5NmEzOGJlZTBjNGM4
YjQ3N2YwHhcNMjYwOTIxMjEwMDIzWhcNMjYwOTIyMjEwMDIzWjAzMTEwLwYDVQQD
EyhlYmE2YzQyYmEzOWE2ZGZjODA5ODA1NTYyYjNiN2NlYzIxZTVmOTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKOLbyYfa2S1lc86oM4nah58c3Z3
KW2Laol22xitACjy2+fgC4Rw/OaXg8yQRcCchYPk2pcAl2XHLPGr+IVjNofvr9WI
zMoKFzlgAmHz7Uk95z0Unlc8N6uaob+GtT/GhXYV85JYn7tWSY6Jb7F2hOvbGy7J
KBaPqo8onSMIOMXmwWvGXGeKEYNAb6m5twCzZ0UajUGBiPX4Br+IIKB+zzrj71bZ
h+pl2kNhd5Gb92A9CI4EULb7dZVUIn3+q1S5tvQ68sQdzdkeZZReVO735XhhIK6Y
N0fEv/Iy4AS3AjRWMLyUY/68OVbkC2+BNwmzOj+dWU1vhxefHZKSc/fU5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOumxCujmm38gJgFVis7fOwh5fkOMB8GA1UdIwQY
MBaAFL7bak7Tk9ijt1B/lqOL7gxMi0d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kNDYzNWYtMjE5NS00ZDk0LThkMTYt
NDcwYTkzYjNkM2U3LzEvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9kNDYzNWYtMjE5NS00ZDk0LThkMTYtNDcwYTkzYjNkM2U3
LzEvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA29yb3OB
7L/18/w9FKyNCQnUPs8egmEO2NCC+CYGxOFj8cdfuBo5yOjTNE95i+dI/S8t4iPF
karg+ZkgXGlD22ebfypjxZ4DAbT1c+IrxdIcx6w6GvUT71Pn+J+6UQk87u3Ii05N
r2xXysd7GPXQi92sDy7JNolMorPUmAsnhI9YErkm8fNIPuMWziBShOUTzONb3pju
5H6v68VkGKFkXwzDQQ0aE2Tlok8NWYzNI6hQEDZtHk7IQkBUlVJXBcEsaYpiras7
6hynRNm8gJkx1Pyf4m1BI1qF85YX+wiGsWTKfeAMJfxYeK9yUBKg5qBhJFQ1EIcC
YfgW6UgZNaGEJw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:53:37 2026 by rpki-client