Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
File: viphXepqVOryff6ZwH483I13X74.mft (raw, json)
Hash identifier: /1rfKvdEJlUl+6RHxH7j9GT+nSDlmnOMOtLeAkzUbkY=
Subject key identifier: 02:B5:ED:74:C7:7D:7A:38:DE:F2:A4:44:E8:22:C8:C4:92:70:95:D8
Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
Certificate issuer: /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Certificate serial: 019CAAC6BEAEED2FA49712B6DEE84C4E610F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
Manifest number: 0391
Signing time: Sun 01 Mar 2026 19:01:17 +0000
Manifest this update: Sun 01 Mar 2026 19:01:17 +0000
Manifest next update: Mon 02 Mar 2026 19:01:17 +0000
Files and hashes: 1: lTdGRDnrt9WeZntnZqlzp_ouBUk.roa (hash: 7Ld1N10vzsnooyAXDhjI5cFlj26fJBqTU53xQhD+MQU=)
2: viphXepqVOryff6ZwH483I13X74.crl (hash: rDRunAWdPY2dm0SlOXfGuMn7/jGKXT6LSc7p815FtkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:be:ae:ed:2f:a4:97:12:b6:de:e8:4c:4e:61:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Validity
Not Before: Mar 1 19:01:17 2026 GMT
Not After : Mar 2 19:01:17 2026 GMT
Subject: CN=02b5ed74c77d7a38def2a444e822c8c4927095d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:10:d4:98:c9:11:c7:e8:51:eb:f3:bc:de:
e6:66:ae:96:46:2d:df:7a:35:42:1d:f4:ce:be:cc:
e2:c5:a4:55:9d:cf:c1:20:de:f0:7b:c9:b9:c4:4f:
80:e2:4a:a1:ec:b8:79:1b:87:d8:ca:32:08:11:65:
b9:f2:e2:5d:a3:06:cd:83:71:3a:d7:c6:a8:50:29:
69:a4:67:f3:15:12:1b:04:b9:4b:e4:a1:ce:77:77:
aa:ef:0d:8e:e8:7c:4b:d6:b6:07:ea:fb:9b:f6:55:
01:53:7d:df:37:30:90:04:f6:6c:6f:61:ce:ae:88:
8f:95:f0:fa:61:c6:8d:cd:de:d7:9c:9b:c0:7e:c8:
b9:28:8b:6f:79:6c:79:01:26:bc:58:21:57:dc:16:
94:1f:99:b5:94:7b:8c:24:02:05:1f:fe:d2:6b:f3:
7c:e0:48:ab:f5:a6:96:10:57:b5:74:ac:97:bb:bb:
2e:de:de:44:6f:95:c2:0e:46:f2:11:62:5f:64:0b:
27:1a:df:9c:f8:40:e5:81:3a:17:e3:72:49:1f:2f:
4d:21:5f:62:45:cc:af:e1:99:c0:2c:65:a1:4d:4c:
d0:6c:b5:9f:31:42:3d:e8:ba:7f:26:e0:3f:88:56:
46:0b:42:75:9a:6a:fc:8a:8e:44:b2:8d:1c:62:63:
c7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B5:ED:74:C7:7D:7A:38:DE:F2:A4:44:E8:22:C8:C4:92:70:95:D8
X509v3 Authority Key Identifier:
keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d0:6a:ea:11:88:9b:ef:aa:dd:89:b6:4a:4f:57:72:44:dc:
eb:c1:6d:31:94:74:b2:71:27:e3:96:c8:a3:fb:77:03:92:0c:
7e:e9:03:be:e1:ea:73:72:d5:1a:7f:26:9c:60:6b:25:9f:a7:
65:67:bf:2d:50:d9:9d:90:eb:b2:2e:e1:f1:d5:b3:b3:56:7d:
ad:50:b5:39:64:c4:25:7a:1d:dd:e6:5b:4b:09:84:32:2b:91:
bd:02:f2:12:33:5c:39:1f:66:97:b3:42:61:22:49:a5:a1:d4:
68:6e:42:98:fc:40:a8:29:a7:90:08:2b:e3:0e:40:98:78:4f:
ec:3d:b1:af:3d:13:43:0d:5b:d2:ac:1d:0c:df:62:4e:aa:bd:
56:2a:da:2e:eb:f5:1b:51:e3:6d:d2:39:86:77:96:41:68:c9:
5c:5b:75:03:cf:e7:81:23:06:e0:2e:fe:e6:2c:01:2e:8e:75:
25:f3:71:5e:8b:c4:b5:bd:57:a1:16:ec:86:6c:b2:e1:25:08:
be:bb:d3:d4:22:ac:0e:f3:5d:54:af:51:fa:8a:2f:57:9f:09:
99:9a:e3:ee:54:73:3a:30:48:10:a1:15:10:bf:0b:76:32:56:
96:83:01:3a:35:72:cc:55:23:c3:df:b8:1d:5d:c4:e1:58:b4:
f5:5a:30:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxr6u7S+klxK23uhMTmEPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMmE2MTVkZWE2YTU0ZWFmMjdkZmU5OWMwN2UzY2RjOGQ3
NzVmYmUwHhcNMjYwMzAxMTkwMTE3WhcNMjYwMzAyMTkwMTE3WjAzMTEwLwYDVQQD
EygwMmI1ZWQ3NGM3N2Q3YTM4ZGVmMmE0NDRlODIyYzhjNDkyNzA5NWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0coQ1JjJEcfoUevzvN7mZq6WRi3f
ejVCHfTOvszixaRVnc/BIN7we8m5xE+A4kqh7Lh5G4fYyjIIEWW58uJdowbNg3E6
18aoUClppGfzFRIbBLlL5KHOd3eq7w2O6HxL1rYH6vub9lUBU33fNzCQBPZsb2HO
roiPlfD6YcaNzd7XnJvAfsi5KItveWx5ASa8WCFX3BaUH5m1lHuMJAIFH/7Sa/N8
4Eir9aaWEFe1dKyXu7su3t5Eb5XCDkbyEWJfZAsnGt+c+EDlgToX43JJHy9NIV9i
Rcyv4ZnALGWhTUzQbLWfMUI96Lp/JuA/iFZGC0J1mmr8io5Eso0cYmPHdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAK17XTHfXo43vKkROgiyMSScJXYMB8GA1UdIwQY
MBaAFL4qYV3qalTq8n3+mcB+PNyNd1++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmlwaFhlcHFWT3J5ZmY2WndINDgzSTEzWDc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zYmExZTYtMWZlMi00OWZhLWIzNmUt
ZmU1YWI4MTExYmYwLzEvdmlwaFhlcHFWT3J5ZmY2WndINDgzSTEzWDc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8zYmExZTYtMWZlMi00OWZhLWIzNmUtZmU1YWI4MTExYmYw
LzEvdmlwaFhlcHFWT3J5ZmY2WndINDgzSTEzWDc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdBq6hGI
m++q3Ym2Sk9XckTc68FtMZR0snEn45bIo/t3A5IMfukDvuHqc3LVGn8mnGBrJZ+n
ZWe/LVDZnZDrsi7h8dWzs1Z9rVC1OWTEJXod3eZbSwmEMiuRvQLyEjNcOR9ml7NC
YSJJpaHUaG5CmPxAqCmnkAgr4w5AmHhP7D2xrz0TQw1b0qwdDN9iTqq9ViraLuv1
G1HjbdI5hneWQWjJXFt1A8/ngSMG4C7+5iwBLo51JfNxXovEtb1XoRbshmyy4SUI
vrvT1CKsDvNdVK9R+oovV58JmZrj7lRzOjBIEKEVEL8LdjJWloMBOjVyzFUjw9+4
HV3E4Vi09VowlA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:31 2026 by rpki-client