Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
File: viphXepqVOryff6ZwH483I13X74.mft (raw, json)
Hash identifier: 7pSg1HSUVKg6E5wVXjkOLYm2RfdD7nhEgvVM6wqZ8Qs=
Subject key identifier: 11:29:A7:63:8E:21:69:08:38:B7:16:BB:88:B9:3D:59:3D:48:53:91
Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
Certificate issuer: /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Certificate serial: 01A1C631C3F326C77C1680275668CB07EAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
Manifest number: 0636
Signing time: Tue 10 Nov 2026 16:01:52 +0000
Manifest this update: Tue 10 Nov 2026 16:01:52 +0000
Manifest next update: Wed 11 Nov 2026 16:01:52 +0000
Files and hashes: 1: lTdGRDnrt9WeZntnZqlzp_ouBUk.roa (hash: 7Ld1N10vzsnooyAXDhjI5cFlj26fJBqTU53xQhD+MQU=)
2: viphXepqVOryff6ZwH483I13X74.crl (hash: 8nVq4M6nplNtijzE9Bz5a22uW0yxpc7hF026B+Aa1Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:31:c3:f3:26:c7:7c:16:80:27:56:68:cb:07:ea:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Validity
Not Before: Nov 10 16:01:52 2026 GMT
Not After : Nov 11 16:01:52 2026 GMT
Subject: CN=1129a7638e21690838b716bb88b93d593d485391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:8b:45:a1:5b:5b:20:c3:01:79:9e:d1:16:
e8:a2:c6:52:1a:e1:5a:a6:31:ad:83:2d:57:86:91:
1d:23:77:9b:c9:74:86:6f:97:e6:ce:2c:6a:e1:6c:
39:ba:cd:3b:65:8d:ef:b0:00:7b:62:90:de:82:ae:
3e:68:6e:db:a4:48:50:f1:0a:bc:22:f1:71:2e:bc:
dd:51:1d:26:33:99:12:c2:b1:06:32:9c:f5:8e:4c:
3b:0d:41:71:6e:e0:7e:96:0a:c2:8e:e9:7b:29:36:
e8:4e:fd:5c:9e:ee:fc:11:7f:54:c3:1b:da:fc:9b:
f0:ab:12:c7:6a:0c:d7:10:d2:dc:b3:6f:7e:82:5c:
ca:5f:3e:64:8d:a0:7a:e8:37:10:35:09:10:fd:90:
52:d0:d0:28:d2:e1:f0:63:5a:4d:c6:ad:e5:9b:90:
52:41:ed:4a:c4:46:f3:7b:2c:1d:42:f5:6d:29:ee:
f2:1b:96:f3:37:86:8c:2a:33:15:ca:9a:ac:b6:cc:
48:5a:48:4f:35:b7:88:10:ba:d7:be:a3:40:46:ea:
21:e5:9f:eb:1a:be:19:bd:d9:0e:d6:07:f3:40:ef:
f4:0a:68:01:64:18:1a:8f:7d:c7:b8:11:d1:f7:f1:
b8:44:0c:01:e8:ee:1f:c4:c6:39:34:1b:df:cd:41:
64:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:29:A7:63:8E:21:69:08:38:B7:16:BB:88:B9:3D:59:3D:48:53:91
X509v3 Authority Key Identifier:
keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d7:d5:7c:6c:bc:db:a7:10:99:ed:2c:f1:bd:5b:b3:16:d9:
9d:41:7a:64:78:98:72:09:9a:c3:b2:8b:55:51:b3:46:b6:23:
d0:fa:ca:d1:38:6c:0c:e8:d1:29:80:b7:dc:93:11:1a:f5:b2:
70:a5:f6:d2:7e:4a:d4:1a:e2:93:32:df:2c:a3:86:54:1f:a9:
87:87:e0:c6:2d:b9:3c:39:8b:ae:52:9e:c4:96:5f:cb:8a:6c:
a8:89:d1:8a:62:72:e1:82:4d:b6:4e:f5:b0:98:4c:84:bf:66:
50:0e:5c:1b:05:d3:6d:35:6c:dc:7f:f9:59:39:02:9a:95:53:
dd:fb:00:3d:0a:72:9d:38:60:74:da:ff:73:38:51:7d:f5:a4:
8e:30:fd:98:f0:9c:d2:2c:8e:7a:d6:3d:58:c8:38:6b:18:69:
57:fe:10:4b:1b:71:87:1f:73:90:8d:a0:74:d4:9f:79:63:7e:
64:07:1b:f2:5f:a3:c0:25:a1:b9:f1:0a:e8:b0:41:75:6b:9b:
db:d9:3d:05:85:7b:40:a8:a2:c8:a2:21:00:e0:bf:2d:58:2f:
73:ca:14:81:f5:cd:f6:14:0a:8e:ab:b2:d0:b1:8d:b5:0d:90:
f5:43:38:80:99:98:9b:8c:ed:0c:83:27:e7:9c:a0:10:a3:01:
2c:71:13:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHGMcPzJsd8FoAnVmjLB+rwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMmE2MTVkZWE2YTU0ZWFmMjdkZmU5OWMwN2UzY2RjOGQ3
NzVmYmUwHhcNMjYxMTEwMTYwMTUyWhcNMjYxMTExMTYwMTUyWjAzMTEwLwYDVQQD
EygxMTI5YTc2MzhlMjE2OTA4MzhiNzE2YmI4OGI5M2Q1OTNkNDg1MzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4GLRaFbWyDDAXme0RboosZSGuFa
pjGtgy1XhpEdI3ebyXSGb5fmzixq4Ww5us07ZY3vsAB7YpDegq4+aG7bpEhQ8Qq8
IvFxLrzdUR0mM5kSwrEGMpz1jkw7DUFxbuB+lgrCjul7KTboTv1cnu78EX9Uwxva
/JvwqxLHagzXENLcs29+glzKXz5kjaB66DcQNQkQ/ZBS0NAo0uHwY1pNxq3lm5BS
Qe1KxEbzeywdQvVtKe7yG5bzN4aMKjMVypqstsxIWkhPNbeIELrXvqNARuoh5Z/r
Gr4ZvdkO1gfzQO/0CmgBZBgaj33HuBHR9/G4RAwB6O4fxMY5NBvfzUFkNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEpp2OOIWkIOLcWu4i5PVk9SFORMB8GA1UdIwQY
MBaAFL4qYV3qalTq8n3+mcB+PNyNd1++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmlwaFhlcHFWT3J5ZmY2WndINDgzSTEzWDc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zYmExZTYtMWZlMi00OWZhLWIzNmUt
ZmU1YWI4MTExYmYwLzEvdmlwaFhlcHFWT3J5ZmY2WndINDgzSTEzWDc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8zYmExZTYtMWZlMi00OWZhLWIzNmUtZmU1YWI4MTExYmYw
LzEvdmlwaFhlcHFWT3J5ZmY2WndINDgzSTEzWDc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9fVfGy8
26cQme0s8b1bsxbZnUF6ZHiYcgmaw7KLVVGzRrYj0PrK0ThsDOjRKYC33JMRGvWy
cKX20n5K1BrikzLfLKOGVB+ph4fgxi25PDmLrlKexJZfy4psqInRimJy4YJNtk71
sJhMhL9mUA5cGwXTbTVs3H/5WTkCmpVT3fsAPQpynThgdNr/czhRffWkjjD9mPCc
0iyOetY9WMg4axhpV/4QSxtxhx9zkI2gdNSfeWN+ZAcb8l+jwCWhufEK6LBBdWub
29k9BYV7QKiiyKIhAOC/LVgvc8oUgfXN9hQKjquy0LGNtQ2Q9UM4gJmYm4ztDIMn
55ygEKMBLHETeA==
-----END CERTIFICATE-----
Generated at Wed Nov 11 01:00:50 2026 by rpki-client