Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json)
Hash identifier: MUDiheu2GpUyWk1i0fgo+OVccpaToyShAhGm/izkJ64=
Subject key identifier: 78:54:88:5F:A9:92:85:42:6A:74:AA:2B:64:A9:D2:FC:A9:EC:D9:E3
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 01A0C96B1BF7D0BB75A5DA4AB9FB12D0BC9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
Manifest number: 1A6D
Signing time: Tue 22 Sep 2026 14:00:34 +0000
Manifest this update: Tue 22 Sep 2026 14:00:34 +0000
Manifest next update: Wed 23 Sep 2026 14:00:34 +0000
Files and hashes: 1: V8PCFPrTValkKCiDtwNotmUAoXc.roa (hash: 3Er2ggdCtrhD3DqnQo2BCMQ9XdtanYYog/Rbw/HvLzg=)
2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: PXTTwchsBlSaJcj5K43eXtr4qMXvzXD++YKNsT4xNzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:1b:f7:d0:bb:75:a5:da:4a:b9:fb:12:d0:bc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Sep 22 14:00:34 2026 GMT
Not After : Sep 23 14:00:34 2026 GMT
Subject: CN=7854885fa99285426a74aa2b64a9d2fca9ecd9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:48:04:53:5c:c4:96:dd:ba:1c:6e:e1:ed:
c8:dd:b5:11:3b:b8:3d:14:ce:ba:ec:65:e0:7f:f7:
51:34:b9:fd:3b:c9:f6:17:8a:e5:ec:1a:19:30:96:
dd:a4:b4:13:5e:1e:d9:2e:7c:97:ca:c2:2c:68:a3:
6a:0c:68:38:69:9f:d0:32:66:eb:00:71:9f:68:9f:
d4:2b:62:a9:20:f5:33:a6:d4:6b:2d:97:f3:d1:0f:
b0:e8:39:ee:b0:36:09:db:8f:e5:d6:f1:9e:8f:9b:
cb:8e:8c:8b:2c:18:38:fa:5d:08:31:13:9b:c4:e9:
b1:78:fc:a9:43:28:34:d8:86:b3:9a:bd:40:f0:8e:
bb:49:51:23:47:7f:4a:21:31:f6:61:e1:ff:8d:1d:
74:44:13:b8:65:92:c0:4f:fb:90:67:1a:4f:17:81:
bd:1e:2b:be:c4:08:50:ed:6a:63:12:22:ac:12:54:
61:c3:e8:0f:dd:30:95:48:13:79:09:fc:17:dd:59:
ff:a3:23:54:8a:63:85:d2:d9:ff:41:4d:4d:a4:7c:
86:00:1d:e5:d8:9e:46:ba:6b:b4:28:ab:ab:90:02:
e9:fb:ac:5d:e7:33:d0:80:25:21:5f:0d:8b:b3:ce:
38:b2:4e:97:26:44:19:d8:d7:2a:d8:71:44:5e:71:
23:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:54:88:5F:A9:92:85:42:6A:74:AA:2B:64:A9:D2:FC:A9:EC:D9:E3
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d4:21:0a:d8:5a:36:40:89:cc:f0:6c:41:a3:b4:b5:5b:dd:
5c:6d:d4:9b:5b:b5:32:84:65:6b:40:93:de:3e:a0:6d:64:d5:
25:3e:54:af:ad:d2:4e:82:73:72:3b:91:aa:8d:89:28:94:8b:
66:b8:45:cf:56:04:f5:e5:59:5f:4f:55:18:e1:9c:37:01:bc:
97:67:fc:89:85:54:c4:6e:82:f3:69:fb:a9:ff:57:58:cb:89:
d2:c2:98:f8:7c:96:dc:2e:ad:7d:91:8e:24:b8:78:08:af:07:
62:16:35:4d:eb:81:d4:1f:2b:96:5d:a3:c3:cc:7a:03:db:52:
07:5d:46:de:d1:28:f5:ce:9e:2f:6b:2c:18:bb:e0:ae:c2:8e:
95:fb:1f:06:7c:6c:7b:a1:59:1c:54:1c:a0:6e:2a:3b:15:13:
fd:83:31:c0:6c:fb:00:a5:2f:5b:dd:7e:f3:64:d6:f0:ed:6e:
f5:44:70:5a:fc:16:03:78:92:20:ac:43:7c:e0:0d:a5:f2:d3:
d3:93:58:4f:20:a5:2b:71:a0:57:4e:ed:ab:d3:a5:7d:c9:f4:
b5:6d:a3:5b:86:f3:03:3c:4d:80:36:60:8f:ef:86:d3:37:24:
cc:0b:52:50:67:0f:78:bb:03:69:ba:9c:85:36:69:6c:19:5b:
af:65:7e:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJaxv30Lt1pdpKufsS0LyaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMjBkNDFhZDM1NzBlZDg4OGMzYjlhMzk1ODQzZDI4YzRi
ZGU3MGUwHhcNMjYwOTIyMTQwMDM0WhcNMjYwOTIzMTQwMDM0WjAzMTEwLwYDVQQD
Eyg3ODU0ODg1ZmE5OTI4NTQyNmE3NGFhMmI2NGE5ZDJmY2E5ZWNkOWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoNIBFNcxJbduhxu4e3I3bURO7g9
FM667GXgf/dRNLn9O8n2F4rl7BoZMJbdpLQTXh7ZLnyXysIsaKNqDGg4aZ/QMmbr
AHGfaJ/UK2KpIPUzptRrLZfz0Q+w6DnusDYJ24/l1vGej5vLjoyLLBg4+l0IMROb
xOmxePypQyg02Iazmr1A8I67SVEjR39KITH2YeH/jR10RBO4ZZLAT/uQZxpPF4G9
Hiu+xAhQ7WpjEiKsElRhw+gP3TCVSBN5CfwX3Vn/oyNUimOF0tn/QU1NpHyGAB3l
2J5Gumu0KKurkALp+6xd5zPQgCUhXw2Ls844sk6XJkQZ2Ncq2HFEXnEjkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhUiF+pkoVCanSqK2Sp0vyp7NnjMB8GA1UdIwQY
MBaAFLwg1BrTVw7YiMO5o5WEPSjEvecOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83OWZmNWQtNmRmZS00NDFiLWEyMWQt
MTM1YzQwMjE3Yjg2LzEvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi83OWZmNWQtNmRmZS00NDFiLWEyMWQtMTM1YzQwMjE3Yjg2
LzEvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItQhCtha
NkCJzPBsQaO0tVvdXG3Um1u1MoRla0CT3j6gbWTVJT5Ur63SToJzcjuRqo2JKJSL
ZrhFz1YE9eVZX09VGOGcNwG8l2f8iYVUxG6C82n7qf9XWMuJ0sKY+HyW3C6tfZGO
JLh4CK8HYhY1TeuB1B8rll2jw8x6A9tSB11G3tEo9c6eL2ssGLvgrsKOlfsfBnxs
e6FZHFQcoG4qOxUT/YMxwGz7AKUvW91+82TW8O1u9URwWvwWA3iSIKxDfOANpfLT
05NYTyClK3GgV07tq9Olfcn0tW2jW4bzAzxNgDZgj++G0zckzAtSUGcPeLsDabqc
hTZpbBlbr2V+aQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:50:34 2026 by rpki-client