Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json)
Hash identifier: YP45OUa6qYD3Q4Y+4LpDqm5cHpnax9jfasxrveUkepY=
Subject key identifier: 6E:B4:B1:92:7D:6E:20:0F:13:3C:8E:0D:C0:1A:19:96:A4:64:1B:E0
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial: 019CAC7E0E834320D7783F2FCE3B9A3BB531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
Manifest number: 0714
Signing time: Mon 02 Mar 2026 03:01:08 +0000
Manifest this update: Mon 02 Mar 2026 03:01:08 +0000
Manifest next update: Tue 03 Mar 2026 03:01:08 +0000
Files and hashes: 1: Ivg6snMydNXdySu3QX12mNo28u8.roa (hash: j9c4g1fOAHiMBPWaG5AigoutzfZxb4EuhkBYBF49VwY=)
2: i69vJEQPkDcWZtUI4FCC2gJOc0U.roa (hash: D7g5fdfmMlJvg4w+bYuZp2xJXQeTRhu8e3EybLceqmw=)
3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: mkTRuvT7m4vb2ZgWNHfhb4kprQwqQ6W/RIsOo/8Af64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:0e:83:43:20:d7:78:3f:2f:ce:3b:9a:3b:b5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Validity
Not Before: Mar 2 03:01:08 2026 GMT
Not After : Mar 3 03:01:08 2026 GMT
Subject: CN=6eb4b1927d6e200f133c8e0dc01a1996a4641be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:dd:2a:ea:1c:09:3e:e3:da:4e:71:89:17:d3:
4c:25:e4:ab:60:f5:81:42:53:85:f6:73:21:08:d6:
d1:66:f4:da:0a:d0:01:ad:a5:39:2c:24:4f:65:3a:
dc:da:a1:55:e5:72:fc:b1:eb:1f:3f:fb:9e:6b:96:
8c:47:da:8b:07:e1:83:e1:4d:f4:5a:f4:97:9c:3f:
65:db:a1:4d:fa:73:ed:21:c3:d5:ea:82:38:02:74:
62:b3:9f:37:46:b3:72:a7:5a:bd:dc:e6:c7:98:10:
74:fc:80:40:67:90:2c:22:8b:e6:95:72:e9:26:cf:
cb:62:73:f6:62:67:4a:9e:67:a3:83:6d:3f:e3:81:
b9:e7:b5:52:40:66:1d:43:a2:5f:05:c7:bb:cc:a8:
05:f6:9e:b2:81:f3:fd:94:51:ba:77:72:1a:38:cc:
d9:89:1f:e8:ba:89:64:16:b2:56:82:e1:a1:52:7c:
2d:ce:56:8e:8a:32:cb:4f:a7:12:7a:24:af:b6:e2:
c8:2c:84:34:e4:01:a2:38:5f:9c:3f:63:22:a7:90:
0c:bd:6b:a2:74:49:0c:10:0d:21:b0:96:81:7a:4d:
5b:af:33:fc:c3:9f:34:bb:ac:b8:73:f5:fb:de:ec:
97:23:40:a2:de:50:f3:48:c6:83:05:95:27:fb:67:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B4:B1:92:7D:6E:20:0F:13:3C:8E:0D:C0:1A:19:96:A4:64:1B:E0
X509v3 Authority Key Identifier:
keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:92:df:5d:1f:c3:34:53:28:f5:f4:d7:27:0c:85:45:fe:fc:
a6:42:80:7d:36:ce:b8:f3:67:77:64:27:ae:74:51:ca:02:7b:
f9:ba:30:30:4e:94:d1:96:cf:79:44:29:b4:d0:6a:a2:d8:7c:
ef:12:ce:a5:70:21:9d:2e:42:32:13:ab:52:43:75:21:da:62:
bf:ce:0d:46:ad:e8:8f:85:36:f9:9c:16:a9:a5:db:3f:7e:a5:
6e:f7:13:7a:44:d3:f9:88:29:76:1b:06:db:5d:1d:c0:7f:93:
41:d3:7e:05:55:80:fe:5d:7b:9f:f9:8d:8e:90:33:07:d7:25:
08:db:20:e6:1a:8f:10:bd:ed:5e:74:d9:d9:f0:a9:62:4c:fb:
81:8c:bd:fe:52:ec:10:76:e1:6e:14:55:f9:08:55:d4:10:8f:
c9:17:3d:9f:4e:fd:39:d4:f5:8a:e4:1d:35:36:a9:1b:76:ba:
e6:9b:42:fb:d4:13:64:87:8e:82:05:e3:4e:b4:cc:1f:8f:39:
9c:0e:8e:b7:59:92:44:38:b4:23:a9:0f:ec:5f:4d:1d:85:53:
a2:32:c7:3e:cf:b8:ce:5d:74:ed:08:c8:00:7f:92:b6:47:65:
65:0f:cc:38:6b:54:0c:10:a7:5a:7a:74:0c:bc:47:5b:f5:50:
ac:b6:bf:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfg6DQyDXeD8vzjuaO7UxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNWMwODMyM2FjMjdhYjY1NTNhNWE2OWE3M2E1OGY4MDI0
MjNkNjgwHhcNMjYwMzAyMDMwMTA4WhcNMjYwMzAzMDMwMTA4WjAzMTEwLwYDVQQD
Eyg2ZWI0YjE5MjdkNmUyMDBmMTMzYzhlMGRjMDFhMTk5NmE0NjQxYmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8N0q6hwJPuPaTnGJF9NMJeSrYPWB
QlOF9nMhCNbRZvTaCtABraU5LCRPZTrc2qFV5XL8sesfP/uea5aMR9qLB+GD4U30
WvSXnD9l26FN+nPtIcPV6oI4AnRis583RrNyp1q93ObHmBB0/IBAZ5AsIovmlXLp
Js/LYnP2YmdKnmejg20/44G557VSQGYdQ6JfBce7zKgF9p6ygfP9lFG6d3IaOMzZ
iR/ouolkFrJWguGhUnwtzlaOijLLT6cSeiSvtuLILIQ05AGiOF+cP2Mip5AMvWui
dEkMEA0hsJaBek1brzP8w580u6y4c/X73uyXI0Ci3lDzSMaDBZUn+2dJjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG60sZJ9biAPEzyODcAaGZakZBvgMB8GA1UdIwQY
MBaAFL1cCDI6wnq2VTpaaac6WPgCQj1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMt
NDY0MWFiNmU0YmZiLzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMtNDY0MWFiNmU0YmZi
LzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZLfXR/D
NFMo9fTXJwyFRf78pkKAfTbOuPNnd2QnrnRRygJ7+bowME6U0ZbPeUQptNBqoth8
7xLOpXAhnS5CMhOrUkN1Idpiv84NRq3oj4U2+ZwWqaXbP36lbvcTekTT+YgpdhsG
210dwH+TQdN+BVWA/l17n/mNjpAzB9clCNsg5hqPEL3tXnTZ2fCpYkz7gYy9/lLs
EHbhbhRV+QhV1BCPyRc9n079OdT1iuQdNTapG3a65ptC+9QTZIeOggXjTrTMH485
nA6Ot1mSRDi0I6kP7F9NHYVTojLHPs+4zl107QjIAH+StkdlZQ/MOGtUDBCnWnp0
DLxHW/VQrLa/sg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:44 2026 by rpki-client