Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File: vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier: o/npLU4SvtH1pYeYkvx6QpbSuASGJ7eYzUVIqFeEYbU=
Subject key identifier: D0:D3:81:00:10:06:87:F2:5B:14:3B:A6:8E:65:2D:57:5C:D6:CA:79
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer: /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial: 01A0C3690756F6E6A8BAA0C26ACF1BDDE989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 10:00:35 +0000
Manifest this update: Mon 21 Sep 2026 10:00:35 +0000
Manifest next update: Tue 22 Sep 2026 10:00:35 +0000
Files and hashes: 1: ZGekjXEzpu_RZ-7_vyg6Eo2ZkNk.roa (hash: g9zJSRkWxGZifxxDK0NFw2MI+0xI5nvgLjURj1IFEFw=)
2: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: HsunRa5gIcSuE9dzEWpth+mPIAXeXIvyD1wkGz+++hs=)
3: xj3KIjGGQeE9p2z5xDtR4kdM838.roa (hash: KadOdd0YIetDxyuEeROWrqZ3UbDrY1vHEUtLjmlaM0E=)
4: z6bCwLojIPVuxbTXw72sR-aZPSQ.roa (hash: jarPN7oKXyiEaRbhLltezQTSG2nKsHFs4sdkmV5yFgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:07:56:f6:e6:a8:ba:a0:c2:6a:cf:1b:dd:e9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Validity
Not Before: Sep 21 10:00:35 2026 GMT
Not After : Sep 22 10:00:35 2026 GMT
Subject: CN=d0d38100100687f25b143ba68e652d575cd6ca79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:40:08:aa:d7:fd:26:4b:41:b1:82:a2:20:
8b:1f:99:8c:1f:73:ce:ec:fc:ef:72:bc:61:4a:40:
e6:96:85:59:a2:74:2f:f5:b6:01:d6:67:a5:30:57:
6b:81:be:5a:fd:42:74:5e:cc:05:24:97:30:0e:a0:
38:0c:d1:8d:86:9f:fa:8e:54:c3:4a:af:60:a3:ef:
d3:65:97:82:b4:57:d8:90:9c:4d:27:17:4f:cb:fb:
3a:09:d8:19:de:92:e1:52:42:aa:d7:5e:16:53:bb:
bd:f4:5f:f7:6a:80:0e:04:26:57:78:70:9c:04:65:
8b:8f:8a:a1:cf:66:c2:51:a4:17:27:01:a8:dd:89:
cd:0f:12:4b:94:bc:79:89:71:b9:a1:95:d7:9e:6f:
c4:28:76:01:16:22:9b:e0:0c:02:26:97:dc:08:65:
30:16:58:6d:d7:2f:8d:22:0c:74:31:80:eb:7f:9e:
f1:d9:e2:47:a8:6e:3d:09:33:8c:e9:b0:2a:2f:73:
da:5a:ad:aa:9c:6f:2e:de:b4:d1:39:51:cd:20:d6:
f3:d7:6d:03:99:2d:5f:79:e1:0f:6d:a5:57:80:bd:
00:3f:d2:3a:36:73:80:9e:4f:ea:4f:97:77:e5:39:
58:b7:ef:b6:6b:55:d2:de:77:89:58:f2:e2:5a:ce:
e1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D3:81:00:10:06:87:F2:5B:14:3B:A6:8E:65:2D:57:5C:D6:CA:79
X509v3 Authority Key Identifier:
keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a1:1f:13:8d:8d:1f:4d:39:0f:77:70:95:c8:88:65:5b:49:
2f:12:be:df:56:14:00:ee:6e:77:8b:68:14:f7:f8:84:08:70:
b4:97:e6:f3:e1:2d:46:79:4c:63:d0:2c:b2:c2:ac:26:35:4e:
e1:86:d9:e3:b5:2c:42:79:ff:bd:9a:a6:19:d7:fd:e5:cf:d6:
07:27:72:49:bc:05:81:f9:fe:a1:b7:0c:d4:e8:07:be:71:42:
e4:c9:dc:4a:41:be:41:4a:bf:85:3c:b6:46:cb:38:ae:83:59:
33:98:3d:d6:fd:63:24:5e:6b:c4:3f:24:ae:e3:4c:15:db:58:
af:ab:ee:49:40:cb:4c:22:d4:97:10:b2:11:09:55:81:ad:09:
6c:3b:55:f3:66:bd:92:6b:16:c5:f0:e8:6c:0b:98:07:dd:39:
9e:d1:1b:cc:4c:e8:aa:d5:f4:18:19:f6:53:d8:26:ac:83:53:
03:79:18:1a:b2:52:ad:a6:d1:a9:41:f7:25:4c:7b:d6:ae:d8:
58:07:40:5d:c9:21:e4:52:da:88:77:c6:98:2f:54:4e:15:cb:
dc:d1:f9:7a:67:4f:66:56:7a:ad:4d:50:95:11:e7:27:bd:89:
a7:98:12:8a:17:06:76:d9:e3:6d:4f:78:16:4a:d6:20:70:44:
6c:0b:cf:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDaQdW9uaouqDCas8b3emJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNTZkYjc5NmRlZjBkYmRiNGM3OGYyNDQ1YWJlY2MxNTcw
YTZmZDkwHhcNMjYwOTIxMTAwMDM1WhcNMjYwOTIyMTAwMDM1WjAzMTEwLwYDVQQD
EyhkMGQzODEwMDEwMDY4N2YyNWIxNDNiYTY4ZTY1MmQ1NzVjZDZjYTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxxACKrX/SZLQbGCoiCLH5mMH3PO
7PzvcrxhSkDmloVZonQv9bYB1melMFdrgb5a/UJ0XswFJJcwDqA4DNGNhp/6jlTD
Sq9go+/TZZeCtFfYkJxNJxdPy/s6CdgZ3pLhUkKq114WU7u99F/3aoAOBCZXeHCc
BGWLj4qhz2bCUaQXJwGo3YnNDxJLlLx5iXG5oZXXnm/EKHYBFiKb4AwCJpfcCGUw
Flht1y+NIgx0MYDrf57x2eJHqG49CTOM6bAqL3PaWq2qnG8u3rTROVHNINbz120D
mS1feeEPbaVXgL0AP9I6NnOAnk/qT5d35TlYt++2a1XS3neJWPLiWs7hswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDTgQAQBofyWxQ7po5lLVdc1sp5MB8GA1UdIwQY
MBaAFLxW23lt7w29tMePJEWr7MFXCm/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84YjliZDktM2Y2Mi00ZTMwLTgwODUt
MWVjNzIxZmEyYTMwLzEvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC84YjliZDktM2Y2Mi00ZTMwLTgwODUtMWVjNzIxZmEyYTMw
LzEvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6EfE42N
H005D3dwlciIZVtJLxK+31YUAO5ud4toFPf4hAhwtJfm8+EtRnlMY9AsssKsJjVO
4YbZ47UsQnn/vZqmGdf95c/WBydySbwFgfn+obcM1OgHvnFC5MncSkG+QUq/hTy2
Rss4roNZM5g91v1jJF5rxD8kruNMFdtYr6vuSUDLTCLUlxCyEQlVga0JbDtV82a9
kmsWxfDobAuYB905ntEbzEzoqtX0GBn2U9gmrINTA3kYGrJSrabRqUH3JUx71q7Y
WAdAXckh5FLaiHfGmC9UThXL3NH5emdPZlZ6rU1QlRHnJ72Jp5gSihcGdtnjbU94
FkrWIHBEbAvPYw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:38:32 2026 by rpki-client