Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File: _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier: ku4SDmIYVcsq2zOGANMvzOaj1uhvaZZpikWwNj4i398=
Subject key identifier: 15:22:46:F3:D6:22:DE:6C:3C:2E:A6:4A:3B:8C:22:4A:16:A6:F4:32
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial: 019CA9459E4EE2160C80FE35AA054A5489F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number: 0B6E
Signing time: Sun 01 Mar 2026 12:00:37 +0000
Manifest this update: Sun 01 Mar 2026 12:00:37 +0000
Manifest next update: Mon 02 Mar 2026 12:00:37 +0000
Files and hashes: 1: 9CSlDg9AoP6XQftipK09LoZccXE.roa (hash: /0UyKFue8fewRbSVJ3V30gUcuOf6lpAwatxyqWR/sjk=)
2: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: 2JsdXVdqRBaSi9RemxA2IYjqwfA/7dvePq/DFpw06Zs=)
3: kqmzm016eJM-jijUIFSE8gE6p00.roa (hash: gAMMlg6BzmaFhWE/fM7vHF/m24ObBw3vzLwmqGTTkPI=)
4: mykSL7Qh3PSdFsWbgAVoPLK49LQ.roa (hash: fv4E9AvJZausLwDaoGx5qtDafVauUfmM2KAAmLXRacU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:9e:4e:e2:16:0c:80:fe:35:aa:05:4a:54:89:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Validity
Not Before: Mar 1 12:00:37 2026 GMT
Not After : Mar 2 12:00:37 2026 GMT
Subject: CN=152246f3d622de6c3c2ea64a3b8c224a16a6f432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:6e:84:d3:24:ab:17:d8:ce:d0:b6:71:11:
32:6a:6a:2f:7d:6b:00:f9:f6:24:54:16:82:bc:e6:
66:38:4a:f2:b2:89:e2:a5:71:a8:4d:61:17:b1:22:
7e:4b:99:f8:77:47:85:e2:19:fc:de:b5:40:5b:3a:
27:92:65:b0:0d:22:94:96:98:a2:35:2b:75:41:be:
af:41:0f:ab:17:c6:49:ba:12:15:7f:00:b9:f5:2f:
df:ab:3d:a3:cd:ca:d0:32:2b:ea:9a:a6:6f:c7:12:
8d:8f:11:78:7e:d7:01:f5:cd:bc:39:80:7d:49:6c:
55:e6:e7:32:6a:5a:a3:ec:8a:e4:86:2b:64:fa:d7:
b6:4e:8d:b4:1f:32:fa:1c:9b:11:94:51:e0:c0:c5:
00:3a:86:65:ac:67:a3:d9:dc:e7:72:ab:71:77:45:
92:4e:cd:78:49:72:5c:fd:d0:d3:20:19:d8:88:75:
00:d3:64:fc:e6:43:3a:cf:9e:56:4a:78:35:9d:9e:
33:ba:c9:56:ac:cc:11:91:51:6d:db:57:a9:7d:1a:
7b:cd:f9:9a:53:c2:b6:e1:37:d3:7c:e8:d2:f5:e5:
07:c7:6f:3e:28:3a:6e:2f:57:6b:5c:1d:8d:bd:fc:
19:1e:1d:db:e3:65:af:4b:a2:19:94:66:b8:11:5f:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:22:46:F3:D6:22:DE:6C:3C:2E:A6:4A:3B:8C:22:4A:16:A6:F4:32
X509v3 Authority Key Identifier:
keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1d:51:ee:d8:b3:7c:2a:ea:69:2d:f7:92:6d:84:42:31:dd:
07:d6:b9:5c:57:ce:41:71:10:6e:6f:b1:55:57:aa:0e:40:65:
ea:00:8a:4d:c9:7d:ef:b2:6c:9c:d0:e6:0d:fa:b6:12:f3:00:
fa:77:76:88:8b:a1:38:e9:9d:d6:07:80:13:ac:19:59:8c:bc:
11:61:27:b9:79:cc:02:09:49:08:b6:18:a4:69:f2:01:8f:c0:
08:a2:da:e2:a0:ab:9f:eb:6e:60:bf:ff:16:eb:c8:db:12:62:
48:5e:6e:5f:e9:21:ee:75:c7:b1:5d:15:70:b3:50:dd:c3:15:
af:48:7c:17:63:3f:72:26:1f:8b:ae:28:36:aa:ac:b9:c1:27:
20:36:d2:94:52:59:1b:b7:18:af:2e:29:55:c0:04:88:1e:65:
73:32:a6:72:4a:a2:9b:c5:4d:f1:86:8d:ab:d7:d2:96:4f:ea:
2f:82:e4:c4:b0:75:38:82:18:8b:89:18:ff:6c:f1:bb:0a:cf:
27:09:09:f7:4d:d1:22:1b:20:0f:82:4f:51:c6:63:86:56:c1:
8a:20:7f:da:38:43:c3:5d:dd:af:40:c1:be:86:5e:1e:6f:0b:
aa:d3:d2:54:86:ae:01:e1:c0:6b:51:d2:a2:73:38:7c:08:56:
8d:ed:68:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRZ5O4hYMgP41qgVKVInxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZjkxOGM1YTkzMzBkYmJlNmVlZTE3Y2I5YTFkNjJmYmM4
NTViZGUwHhcNMjYwMzAxMTIwMDM3WhcNMjYwMzAyMTIwMDM3WjAzMTEwLwYDVQQD
EygxNTIyNDZmM2Q2MjJkZTZjM2MyZWE2NGEzYjhjMjI0YTE2YTZmNDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1ZuhNMkqxfYztC2cREyamovfWsA
+fYkVBaCvOZmOErysonipXGoTWEXsSJ+S5n4d0eF4hn83rVAWzonkmWwDSKUlpii
NSt1Qb6vQQ+rF8ZJuhIVfwC59S/fqz2jzcrQMivqmqZvxxKNjxF4ftcB9c28OYB9
SWxV5ucyalqj7Irkhitk+te2To20HzL6HJsRlFHgwMUAOoZlrGej2dzncqtxd0WS
Ts14SXJc/dDTIBnYiHUA02T85kM6z55WSng1nZ4zuslWrMwRkVFt21epfRp7zfma
U8K24TfTfOjS9eUHx28+KDpuL1drXB2NvfwZHh3b42WvS6IZlGa4EV9dLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUiRvPWIt5sPC6mSjuMIkoWpvQyMB8GA1UdIwQY
MBaAFP75GMWpMw275u7hfLmh1i+8hVveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3ZrWXhha3pEYnZtN3VGOHVhSFdMN3lGVzk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lZDY1NWQtNTEwMi00OTMyLWIxZGIt
YmEyODg5YWZhYWRkLzEvX3ZrWXhha3pEYnZtN3VGOHVhSFdMN3lGVzk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lZDY1NWQtNTEwMi00OTMyLWIxZGItYmEyODg5YWZhYWRk
LzEvX3ZrWXhha3pEYnZtN3VGOHVhSFdMN3lGVzk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARR1R7tiz
fCrqaS33km2EQjHdB9a5XFfOQXEQbm+xVVeqDkBl6gCKTcl977JsnNDmDfq2EvMA
+nd2iIuhOOmd1geAE6wZWYy8EWEnuXnMAglJCLYYpGnyAY/ACKLa4qCrn+tuYL//
FuvI2xJiSF5uX+kh7nXHsV0VcLNQ3cMVr0h8F2M/ciYfi64oNqqsucEnIDbSlFJZ
G7cYry4pVcAEiB5lczKmckqim8VN8YaNq9fSlk/qL4LkxLB1OIIYi4kY/2zxuwrP
JwkJ903RIhsgD4JPUcZjhlbBiiB/2jhDw13dr0DBvoZeHm8LqtPSVIauAeHAa1HS
onM4fAhWje1o9g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:49 2026 by rpki-client