Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
File: viphXepqVOryff6ZwH483I13X74.mft (raw, json)
Hash identifier: QYSxuEq3x3Pwk3nkIUyuRvww+hGU4nt2fYqzINfCpc8=
Subject key identifier: 98:25:4B:7D:94:3E:D0:3B:63:CC:34:97:52:21:D4:84:1E:61:CD:32
Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
Certificate issuer: /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Certificate serial: 01A0C17AB3D0CA389F67E59233C3F07E2D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
Manifest number: 05AF
Signing time: Mon 21 Sep 2026 01:00:39 +0000
Manifest this update: Mon 21 Sep 2026 01:00:39 +0000
Manifest next update: Tue 22 Sep 2026 01:00:39 +0000
Files and hashes: 1: lTdGRDnrt9WeZntnZqlzp_ouBUk.roa (hash: 7Ld1N10vzsnooyAXDhjI5cFlj26fJBqTU53xQhD+MQU=)
2: viphXepqVOryff6ZwH483I13X74.crl (hash: sFF+t0KQzoq4mW90Am5wrjl6EbmnV1Ndvu+n3lYc89s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:b3:d0:ca:38:9f:67:e5:92:33:c3:f0:7e:2d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Validity
Not Before: Sep 21 01:00:39 2026 GMT
Not After : Sep 22 01:00:39 2026 GMT
Subject: CN=98254b7d943ed03b63cc34975221d4841e61cd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:78:fb:b4:f4:ec:43:7f:99:4c:3f:a0:65:
09:3b:25:e8:4d:06:b8:c3:19:c3:40:f3:26:77:cc:
66:90:a1:92:34:8a:7d:68:f2:f9:f9:f3:a9:19:7c:
a6:59:2c:5f:96:f7:3a:46:ba:9c:08:ec:44:0c:04:
03:e0:61:0d:b7:9a:d3:96:0c:08:27:88:de:f3:3b:
9a:af:82:a5:bd:8f:1e:18:fb:89:64:9e:bf:24:87:
a1:e0:f4:0e:bc:cb:06:1a:50:3b:ad:38:02:5e:3f:
e5:77:db:65:da:2e:88:7c:70:c6:9c:c8:8f:d0:6e:
92:2f:de:e9:10:6e:bd:61:66:ec:99:90:ed:29:b9:
0a:f2:37:92:9a:8f:11:93:db:5a:f6:8f:e4:0a:b0:
5e:35:e5:8c:2a:ff:7a:e6:ac:34:ba:d0:49:c8:7b:
c9:70:62:5d:c6:26:94:f3:52:f8:ea:60:c6:20:e7:
4a:35:85:e3:38:cf:89:91:9b:38:71:60:68:17:fb:
de:cd:b4:9d:95:e0:0b:03:5b:f1:12:42:1f:5f:40:
ee:54:ca:07:d3:ac:7f:f2:91:d3:e3:0f:e7:ce:1c:
60:e1:48:bd:65:f4:1b:5a:3a:9e:c6:ce:da:d7:7a:
78:03:9e:14:c1:55:3e:fb:18:1f:b5:25:8a:e3:e9:
9d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:25:4B:7D:94:3E:D0:3B:63:CC:34:97:52:21:D4:84:1E:61:CD:32
X509v3 Authority Key Identifier:
keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e2:e1:c0:4f:8b:ec:f5:3a:6c:8d:9c:7c:48:5e:fe:14:49:
1d:34:17:c0:bd:67:0c:d0:23:31:80:4e:0b:dc:ff:91:eb:c1:
92:89:e5:21:1d:fa:a6:0d:0d:81:1c:5f:d9:7a:d9:06:4d:e5:
49:6c:4a:b3:83:4e:a3:75:eb:af:f8:c2:d4:cf:6c:c4:55:90:
6f:8c:41:5e:d9:0a:9e:de:d7:62:bf:8d:47:37:5e:75:94:3d:
c6:de:01:31:2f:a1:f3:dc:bb:69:bf:50:a8:00:53:d5:9c:85:
4a:71:09:74:f3:cb:00:76:9c:49:89:fb:c0:fa:33:ef:93:65:
8b:7d:8e:dc:a6:fb:fd:ed:bd:31:39:44:2f:f4:72:8e:5b:d9:
41:3a:96:f1:99:4a:8b:6e:df:7d:4f:19:5a:9d:c9:6e:4b:85:
ae:ba:4c:0b:ed:a3:67:20:fc:e0:5e:a8:c0:91:43:69:d4:e8:
77:fe:c2:7b:1f:a1:b5:a9:11:db:4a:b6:e7:5c:0d:a7:c6:f2:
77:5c:23:58:52:a4:32:ea:cd:ea:85:bc:73:3e:23:6f:a0:f6:
ca:5e:99:06:d5:2b:84:6c:a8:bc:d9:dd:d0:ce:3b:84:25:6f:
96:b3:cb:bd:b6:d1:eb:9d:9f:d8:0d:3d:d0:05:f2:6a:6f:83:
b0:08:db:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBerPQyjifZ+WSM8Pwfi0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMmE2MTVkZWE2YTU0ZWFmMjdkZmU5OWMwN2UzY2RjOGQ3
NzVmYmUwHhcNMjYwOTIxMDEwMDM5WhcNMjYwOTIyMDEwMDM5WjAzMTEwLwYDVQQD
Eyg5ODI1NGI3ZDk0M2VkMDNiNjNjYzM0OTc1MjIxZDQ4NDFlNjFjZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl14+7T07EN/mUw/oGUJOyXoTQa4
wxnDQPMmd8xmkKGSNIp9aPL5+fOpGXymWSxflvc6RrqcCOxEDAQD4GENt5rTlgwI
J4je8zuar4KlvY8eGPuJZJ6/JIeh4PQOvMsGGlA7rTgCXj/ld9tl2i6IfHDGnMiP
0G6SL97pEG69YWbsmZDtKbkK8jeSmo8Rk9ta9o/kCrBeNeWMKv965qw0utBJyHvJ
cGJdxiaU81L46mDGIOdKNYXjOM+JkZs4cWBoF/vezbSdleALA1vxEkIfX0DuVMoH
06x/8pHT4w/nzhxg4Ui9ZfQbWjqexs7a13p4A54UwVU++xgftSWK4+md/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJglS32UPtA7Y8w0l1Ih1IQeYc0yMB8GA1UdIwQY
MBaAFL4qYV3qalTq8n3+mcB+PNyNd1++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmlwaFhlcHFWT3J5ZmY2WndINDgzSTEzWDc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zYmExZTYtMWZlMi00OWZhLWIzNmUt
ZmU1YWI4MTExYmYwLzEvdmlwaFhlcHFWT3J5ZmY2WndINDgzSTEzWDc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8zYmExZTYtMWZlMi00OWZhLWIzNmUtZmU1YWI4MTExYmYw
LzEvdmlwaFhlcHFWT3J5ZmY2WndINDgzSTEzWDc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOLhwE+L
7PU6bI2cfEhe/hRJHTQXwL1nDNAjMYBOC9z/kevBkonlIR36pg0NgRxf2XrZBk3l
SWxKs4NOo3Xrr/jC1M9sxFWQb4xBXtkKnt7XYr+NRzdedZQ9xt4BMS+h89y7ab9Q
qABT1ZyFSnEJdPPLAHacSYn7wPoz75Nli32O3Kb7/e29MTlEL/RyjlvZQTqW8ZlK
i27ffU8ZWp3JbkuFrrpMC+2jZyD84F6owJFDadTod/7Cex+htakR20q251wNp8by
d1wjWFKkMurN6oW8cz4jb6D2yl6ZBtUrhGyovNnd0M47hCVvlrPLvbbR652f2A09
0AXyam+DsAjbkg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 06:00:37 2026 by rpki-client