Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
File: vrfYT-FaMkPBAANHsJkLpGuzrkI.mft (raw, json)
Hash identifier: 7dFPsSGpRpAOog/BkjPqesvJmsPoVa4tewcXQtf84s4=
Subject key identifier: 02:57:76:C7:E0:BC:85:62:02:EB:70:9A:19:D1:27:CF:58:99:6C:CF
Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
Certificate issuer: /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Certificate serial: 019CAB3480D177E0C32AD14818C5CC465C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
Manifest number: 0877
Signing time: Sun 01 Mar 2026 21:01:10 +0000
Manifest this update: Sun 01 Mar 2026 21:01:10 +0000
Manifest next update: Mon 02 Mar 2026 21:01:10 +0000
Files and hashes: 1: MZeI3fx7Rs6vgWADfZ3b9x-IPrw.roa (hash: 88TFwnxWocrDYKNiW9RVsE1t/Ul4aE3DSPX0lbd55Bc=)
2: vrfYT-FaMkPBAANHsJkLpGuzrkI.crl (hash: vLjNlUG6g3EKSbjY2l4c5L/jEyURNbjsEcXfZgakEXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:80:d1:77:e0:c3:2a:d1:48:18:c5:cc:46:5c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Validity
Not Before: Mar 1 21:01:10 2026 GMT
Not After : Mar 2 21:01:10 2026 GMT
Subject: CN=025776c7e0bc856202eb709a19d127cf58996ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ea:56:88:4d:8d:2c:ca:a9:e1:53:1e:c7:d4:
d4:d7:6c:86:ca:25:c9:5d:92:e8:cf:4e:ad:80:b0:
78:56:f0:fa:f6:cd:6b:8c:77:21:2a:e7:1d:c4:83:
81:79:4e:67:26:b4:82:43:63:6a:39:68:7e:98:c4:
bb:97:fe:9b:6d:3a:c0:61:5b:0b:45:2f:6d:9d:ad:
61:1f:58:a2:7d:12:3f:05:d0:ce:59:52:dd:fb:90:
10:29:17:d0:2e:15:fd:12:00:bc:7a:18:37:28:5a:
a2:f6:46:ad:17:df:7f:42:37:c8:8c:13:4f:34:a3:
b0:11:18:e5:57:ba:50:08:04:e9:e1:50:75:fe:56:
91:22:46:89:21:4d:03:c9:05:95:1f:7d:db:b4:c6:
d2:a5:c4:fb:98:6f:8c:8a:ce:02:ab:60:e8:fd:60:
42:7c:fa:31:cc:f8:39:c5:c2:4f:31:75:55:81:20:
be:fe:de:b1:57:f3:d4:af:ca:9a:87:b9:9b:45:43:
9b:d5:b4:f1:59:10:53:76:87:b0:51:77:84:e3:e4:
e6:96:9d:82:d5:04:91:2e:2f:e0:0b:89:b7:4a:28:
a4:6b:a5:4f:f4:44:01:66:d2:cb:11:d8:0b:e3:07:
3a:6b:e8:a0:57:b7:18:4c:31:8b:69:6a:c3:4f:07:
c0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:57:76:C7:E0:BC:85:62:02:EB:70:9A:19:D1:27:CF:58:99:6C:CF
X509v3 Authority Key Identifier:
keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0d:ea:4d:8a:1b:77:51:69:25:19:f3:32:66:21:d4:cb:1d:
77:53:75:8b:e0:19:6f:05:84:6e:d0:68:93:aa:ab:48:62:6d:
86:d4:f1:3a:79:6f:18:08:85:70:9a:8e:c9:13:0b:09:26:39:
66:5f:c1:d7:e8:e9:c5:87:cd:94:67:12:b6:7d:e6:33:99:57:
37:08:8d:5f:0b:6b:13:f8:d8:d4:be:fd:cc:8e:36:65:14:7d:
42:71:e3:4e:50:fd:a0:e8:e9:3a:5a:f6:40:82:8c:67:ea:6d:
7c:8d:07:73:9d:47:94:fd:19:ab:36:f0:69:c5:0f:98:a1:96:
06:7c:ac:9d:6a:92:63:b7:38:ef:e6:a5:29:e0:cd:53:b5:53:
4f:78:63:31:6c:16:f5:06:57:0e:22:ec:e2:10:be:c0:a4:25:
a9:d1:df:b9:7b:cb:40:25:19:e3:93:ee:c6:3b:bb:87:07:aa:
50:36:32:7c:aa:70:90:95:f2:2c:ac:98:d1:8d:39:ac:58:32:
29:a8:30:f4:c7:26:08:b5:7b:0d:3d:a6:ef:59:94:3c:ec:b6:
d4:1d:ee:f8:01:ae:6f:e4:62:ef:03:22:30:95:da:fd:c1:4b:
05:c9:a2:ac:61:9f:7f:50:01:4e:87:e2:b8:d6:5a:ff:40:de:
1d:b7:42:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNIDRd+DDKtFIGMXMRlw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYjdkODRmZTE1YTMyNDNjMTAwMDM0N2IwOTkwYmE0NmJi
M2FlNDIwHhcNMjYwMzAxMjEwMTEwWhcNMjYwMzAyMjEwMTEwWjAzMTEwLwYDVQQD
EygwMjU3NzZjN2UwYmM4NTYyMDJlYjcwOWExOWQxMjdjZjU4OTk2Y2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOpWiE2NLMqp4VMex9TU12yGyiXJ
XZLoz06tgLB4VvD69s1rjHchKucdxIOBeU5nJrSCQ2NqOWh+mMS7l/6bbTrAYVsL
RS9tna1hH1iifRI/BdDOWVLd+5AQKRfQLhX9EgC8ehg3KFqi9katF99/QjfIjBNP
NKOwERjlV7pQCATp4VB1/laRIkaJIU0DyQWVH33btMbSpcT7mG+Mis4Cq2Do/WBC
fPoxzPg5xcJPMXVVgSC+/t6xV/PUr8qah7mbRUOb1bTxWRBTdoewUXeE4+Tmlp2C
1QSRLi/gC4m3Siika6VP9EQBZtLLEdgL4wc6a+igV7cYTDGLaWrDTwfArQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJXdsfgvIViAutwmhnRJ89YmWzPMB8GA1UdIwQY
MBaAFL632E/hWjJDwQADR7CZC6Rrs65CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xNzc0YmQtNmY3ZC00ZDRmLTk2ZGMt
ZTdiODYwMzMyY2I3LzEvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xNzc0YmQtNmY3ZC00ZDRmLTk2ZGMtZTdiODYwMzMyY2I3
LzEvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKA3qTYob
d1FpJRnzMmYh1Msdd1N1i+AZbwWEbtBok6qrSGJthtTxOnlvGAiFcJqOyRMLCSY5
Zl/B1+jpxYfNlGcStn3mM5lXNwiNXwtrE/jY1L79zI42ZRR9QnHjTlD9oOjpOlr2
QIKMZ+ptfI0Hc51HlP0ZqzbwacUPmKGWBnysnWqSY7c47+alKeDNU7VTT3hjMWwW
9QZXDiLs4hC+wKQlqdHfuXvLQCUZ45Puxju7hweqUDYyfKpwkJXyLKyY0Y05rFgy
Kagw9McmCLV7DT2m71mUPOy21B3u+AGub+Ri7wMiMJXa/cFLBcmirGGff1ABTofi
uNZa/0DeHbdC2Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:39:45 2026 by rpki-client