Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: LnCv3mW0J8h5lwh8RoCOXH4AOZd2IrvkNZFlTf08kUk=
Subject key identifier: 61:AA:BB:F1:05:69:A5:98:5E:65:3C:E9:70:EF:DE:81:5E:40:21:F3
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 01A10211C47B07C9E02365EB9BEDE4D0F249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 0B02
Signing time: Sat 03 Oct 2026 14:01:21 +0000
Manifest this update: Sat 03 Oct 2026 14:01:21 +0000
Manifest next update: Sun 04 Oct 2026 14:01:21 +0000
Files and hashes: 1: 2vPfx8Li_NUBxFIa1sHLuZQFAz4.roa (hash: 0dmBzMyhuyOWC20lzdsr5tWctKrKudD/LXfTno/MKsQ=)
2: lCay49jNA6hN-ql5UdLPpmY0qyA.roa (hash: wJB8n42rVcnEySyiUs5rmdGl27xFBWQxOkbBGoicUQM=)
3: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: bhPoyc62bcXwsrhIlcpvsWd+Eur1A8ZBl/1Swiip4AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:11:c4:7b:07:c9:e0:23:65:eb:9b:ed:e4:d0:f2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Oct 3 14:01:21 2026 GMT
Not After : Oct 4 14:01:21 2026 GMT
Subject: CN=61aabbf10569a5985e653ce970efde815e4021f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:aa:4d:67:d1:41:2b:09:9d:96:94:a8:62:
f4:1d:18:c7:8b:cf:72:86:99:e4:94:51:08:03:56:
4f:3e:9f:34:c7:81:95:0c:98:eb:05:9c:92:e5:f8:
40:65:b3:87:8d:41:37:0e:5a:c4:b9:4c:e3:20:c0:
1f:95:fd:e8:23:a6:bf:51:e2:a0:a1:2b:30:e9:5e:
18:b5:8a:dc:ba:35:ba:b5:5e:86:69:dc:7f:e3:ec:
68:96:50:bd:04:bf:e1:51:fb:3e:86:00:0b:c1:0e:
03:f5:ce:c4:af:ec:81:cb:14:dd:67:42:8a:7f:8b:
f8:6e:18:48:f3:26:26:b6:8e:b1:a0:c2:18:69:52:
07:8d:09:de:f4:4d:0b:5c:c5:d6:6f:0f:17:dc:23:
af:6b:13:0a:1e:9f:8a:a8:0b:0e:6a:e4:47:75:72:
de:b0:00:bd:f6:15:5a:5a:2c:66:2a:f6:9d:17:b2:
8b:dc:ff:58:fe:6b:79:81:b3:a5:f4:f4:ec:25:25:
ad:52:2d:96:f1:2f:3d:91:9b:98:bc:49:c3:18:0f:
97:df:d4:b0:7b:5f:de:33:af:e2:00:25:03:a4:18:
bc:ce:95:36:ad:56:6b:89:3b:80:6b:03:90:ab:a0:
04:05:47:9d:81:12:f8:9d:ef:52:cf:4f:8a:b5:89:
5d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AA:BB:F1:05:69:A5:98:5E:65:3C:E9:70:EF:DE:81:5E:40:21:F3
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:12:ce:b6:eb:27:eb:cd:77:d0:ab:a3:ea:92:54:3b:63:01:
77:a4:c6:86:05:cd:1f:12:65:47:1b:b5:17:36:09:2a:18:6b:
d3:97:92:e2:c2:4d:a4:5f:6f:d1:11:f4:96:e6:2c:31:bd:94:
73:91:df:da:bb:7d:50:fa:73:5a:b5:5c:0d:69:88:4f:fa:ed:
71:87:e0:1f:23:62:19:28:3e:3d:e3:f3:52:5a:48:2c:45:0c:
9a:cc:c7:6a:c9:0a:3c:93:34:23:05:f5:7d:c1:e4:01:0d:8a:
f4:89:2a:36:6b:94:4e:38:be:1a:2a:dd:0b:f6:95:b4:66:ce:
a6:c8:a8:fe:f4:8b:ea:9a:70:bf:4c:7a:53:ee:25:2c:f1:76:
bf:98:d9:f8:c8:40:8f:88:44:c2:a7:9a:54:88:f5:d8:52:f8:
dc:92:14:8f:04:b4:23:0e:7e:75:90:db:a3:6b:e8:24:c7:61:
ae:19:c5:22:ac:81:4f:d8:95:c1:9a:f1:5c:7c:e6:b8:63:e4:
44:6b:77:e2:c5:64:34:3b:ee:b4:6e:fc:7b:e4:41:53:ef:d8:
93:d1:ec:d5:1f:de:40:e1:d4:e0:1f:52:71:e2:a2:9d:30:9b:
f8:30:c3:94:d3:80:21:1a:3e:52:0a:a2:12:c3:e4:78:05:9c:
b4:ce:bf:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECEcR7B8ngI2Xrm+3k0PJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTI3ODY0Y2Q0MzA0ODU1MGVkMTY5OWM1ODRiNWMxNGQ4
MGUwOTgwHhcNMjYxMDAzMTQwMTIxWhcNMjYxMDA0MTQwMTIxWjAzMTEwLwYDVQQD
Eyg2MWFhYmJmMTA1NjlhNTk4NWU2NTNjZTk3MGVmZGU4MTVlNDAyMWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPqqTWfRQSsJnZaUqGL0HRjHi89y
hpnklFEIA1ZPPp80x4GVDJjrBZyS5fhAZbOHjUE3DlrEuUzjIMAflf3oI6a/UeKg
oSsw6V4YtYrcujW6tV6Gadx/4+xollC9BL/hUfs+hgALwQ4D9c7Er+yByxTdZ0KK
f4v4bhhI8yYmto6xoMIYaVIHjQne9E0LXMXWbw8X3COvaxMKHp+KqAsOauRHdXLe
sAC99hVaWixmKvadF7KL3P9Y/mt5gbOl9PTsJSWtUi2W8S89kZuYvEnDGA+X39Sw
e1/eM6/iACUDpBi8zpU2rVZriTuAawOQq6AEBUedgRL4ne9Sz0+KtYldtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGqu/EFaaWYXmU86XDv3oFeQCHzMB8GA1UdIwQY
MBaAFLwSeGTNQwSFUO0WmcWEtcFNgOCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJKNFpNMURCSVZRN1JhWnhZUzF3VTJBNEpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC84YTNiYjUtOWQ5NS00OTUzLTkzODgt
MDMxZjQwN2IzMjYzLzEvdkJKNFpNMURCSVZRN1JhWnhZUzF3VTJBNEpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC84YTNiYjUtOWQ5NS00OTUzLTkzODgtMDMxZjQwN2IzMjYz
LzEvdkJKNFpNMURCSVZRN1JhWnhZUzF3VTJBNEpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABLOtusn
68130Kuj6pJUO2MBd6TGhgXNHxJlRxu1FzYJKhhr05eS4sJNpF9v0RH0luYsMb2U
c5Hf2rt9UPpzWrVcDWmIT/rtcYfgHyNiGSg+PePzUlpILEUMmszHaskKPJM0IwX1
fcHkAQ2K9IkqNmuUTji+GirdC/aVtGbOpsio/vSL6ppwv0x6U+4lLPF2v5jZ+MhA
j4hEwqeaVIj12FL43JIUjwS0Iw5+dZDbo2voJMdhrhnFIqyBT9iVwZrxXHzmuGPk
RGt34sVkNDvutG78e+RBU+/Yk9Hs1R/eQOHU4B9SceKinTCb+DDDlNOAIRo+Ugqi
EsPkeAWctM6/OA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:34:11 2026 by rpki-client