Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File: vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier: gE8a+4Ssbb2pFlKM577rPG9heMy8dn36/fLNHEGyebA=
Subject key identifier: F1:C7:D0:DB:AA:75:C2:22:D9:AE:0A:3A:4D:D2:8A:74:E5:D8:E2:16
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial: 019D66BF1CAC03F08B0D36612AFF1904F36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number: 18A3
Signing time: Tue 07 Apr 2026 07:01:33 +0000
Manifest this update: Tue 07 Apr 2026 07:01:33 +0000
Manifest next update: Wed 08 Apr 2026 07:01:33 +0000
Files and hashes: 1: Q2LlNZpjm7QSfpQ8SxDMKPen6fs.roa (hash: +LvudqksRpkI5ThHyJo6o0SESZrwUB4lFuLcKBfvGGo=)
2: lb9dWd03BfnM72HsEUOqMfSXM5c.roa (hash: RJsPG6DuVrowjWLhY1jcZaBG3s9HD98PpDetQPQtNn0=)
3: n8D_NKCQjks2jeuzf-VmDEGhJy0.roa (hash: BxlSKmYiJSjve5WPsQ9b002bw4r8+dfXErMK1Yu3iW0=)
4: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: wdR11ty2YteRAkivuE54VA+4LHvh7jSMjzggwFhFxkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:bf:1c:ac:03:f0:8b:0d:36:61:2a:ff:19:04:f3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Validity
Not Before: Apr 7 07:01:33 2026 GMT
Not After : Apr 8 07:01:33 2026 GMT
Subject: CN=f1c7d0dbaa75c222d9ae0a3a4dd28a74e5d8e216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9e:49:5b:9a:9a:a8:91:b0:e4:ad:f4:e1:94:
cf:70:9c:5d:52:ec:78:03:2a:c7:ef:fd:e3:02:17:
2c:c8:1b:c5:04:9f:95:3d:21:e3:c1:47:ca:da:0d:
77:3a:04:9e:31:45:45:1c:1e:1b:1d:97:7a:db:d7:
aa:3c:0e:65:5e:09:d8:28:60:3b:e3:70:15:b1:76:
77:d8:ab:71:7a:18:0f:a3:ae:17:1a:08:7c:38:62:
ab:e3:82:8d:6e:6b:3a:9f:0f:4c:c8:60:02:21:21:
51:4a:c4:38:a2:53:c4:73:d8:cc:99:1f:e9:70:dd:
1f:2e:b0:4c:f9:a0:df:18:79:5f:19:91:88:7a:11:
0b:27:2a:91:ad:2a:10:a7:a3:a6:24:24:c8:29:aa:
70:ce:19:69:7e:45:54:40:de:a0:1b:d2:7b:d6:74:
9f:11:a3:e9:23:72:a0:c1:ea:58:c3:c1:a3:76:f0:
47:87:81:53:f3:a0:a6:70:77:87:8c:c4:61:86:69:
ae:06:88:19:fc:fd:9a:80:6d:d1:99:fa:11:d4:f7:
f9:b9:34:16:f1:f0:99:03:43:24:57:f0:51:f5:57:
11:81:c6:06:5b:4d:62:9d:63:79:72:6b:f1:8f:33:
e5:af:26:7f:09:b1:ad:8d:de:5e:24:58:a1:6f:56:
6e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C7:D0:DB:AA:75:C2:22:D9:AE:0A:3A:4D:D2:8A:74:E5:D8:E2:16
X509v3 Authority Key Identifier:
keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a0:9d:e6:88:39:91:53:2e:28:e4:78:a1:87:97:37:d7:b6:
21:32:42:d4:a4:86:10:cb:ad:15:f2:67:06:50:16:52:31:7d:
90:20:7f:d4:ba:3b:da:53:a4:00:38:2d:2e:93:24:f8:bc:ba:
78:6c:67:f5:31:35:64:13:c7:a6:f0:da:fe:e8:fe:07:f1:33:
4c:b5:80:59:8b:50:f5:bd:38:f7:68:e2:1b:52:8a:a1:7f:b7:
91:85:17:ce:48:79:3d:f9:a6:5d:9b:70:19:b2:2b:b6:74:dd:
40:bb:78:df:3a:0b:f4:f9:92:34:63:1c:95:cb:b1:97:da:5a:
fd:0f:f2:ac:c9:d3:b8:20:8d:a1:96:d0:dd:36:96:62:ec:9d:
ff:34:64:ba:bb:2a:45:0b:42:08:6c:86:94:15:c1:61:7f:83:
29:48:68:e4:ae:4e:8d:51:7c:d9:4e:c2:a7:b0:53:ef:f0:74:
9f:20:1c:f9:52:7b:85:b3:45:d8:00:18:e7:96:87:0d:70:7f:
bd:a2:a3:64:65:b7:8a:c8:7b:aa:79:76:0d:77:27:6f:2e:4d:
ab:26:3a:76:e9:6c:0f:09:a7:76:ed:83:80:a0:9f:bb:1a:ba:
29:e8:07:d3:c1:7b:b9:78:7d:fb:00:1f:6f:ee:9d:7a:a7:c7:
08:ba:71:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1mvxysA/CLDTZhKv8ZBPNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjM5Yzc3OTBmYzNkNTc3NjI2ZDViYmYxODYxZTU5Yzli
NDcwYWUwHhcNMjYwNDA3MDcwMTMzWhcNMjYwNDA4MDcwMTMzWjAzMTEwLwYDVQQD
EyhmMWM3ZDBkYmFhNzVjMjIyZDlhZTBhM2E0ZGQyOGE3NGU1ZDhlMjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip5JW5qaqJGw5K304ZTPcJxdUux4
AyrH7/3jAhcsyBvFBJ+VPSHjwUfK2g13OgSeMUVFHB4bHZd629eqPA5lXgnYKGA7
43AVsXZ32KtxehgPo64XGgh8OGKr44KNbms6nw9MyGACISFRSsQ4olPEc9jMmR/p
cN0fLrBM+aDfGHlfGZGIehELJyqRrSoQp6OmJCTIKapwzhlpfkVUQN6gG9J71nSf
EaPpI3KgwepYw8GjdvBHh4FT86CmcHeHjMRhhmmuBogZ/P2agG3RmfoR1Pf5uTQW
8fCZA0MkV/BR9VcRgcYGW01inWN5cmvxjzPlryZ/CbGtjd5eJFihb1Zu3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHH0NuqdcIi2a4KOk3SinTl2OIWMB8GA1UdIwQY
MBaAFL8jnHeQ/D1XdibVu/GGHlnJtHCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMGRlZWMtNzIzMy00MmYzLTg3Njct
YjU1MDNhMzJlZGZlLzEvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9iMGRlZWMtNzIzMy00MmYzLTg3NjctYjU1MDNhMzJlZGZl
LzEvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6Cd5og5
kVMuKOR4oYeXN9e2ITJC1KSGEMutFfJnBlAWUjF9kCB/1Lo72lOkADgtLpMk+Ly6
eGxn9TE1ZBPHpvDa/uj+B/EzTLWAWYtQ9b0492jiG1KKoX+3kYUXzkh5PfmmXZtw
GbIrtnTdQLt43zoL9PmSNGMclcuxl9pa/Q/yrMnTuCCNoZbQ3TaWYuyd/zRkursq
RQtCCGyGlBXBYX+DKUho5K5OjVF82U7Cp7BT7/B0nyAc+VJ7hbNF2AAY55aHDXB/
vaKjZGW3ish7qnl2DXcnby5NqyY6dulsDwmndu2DgKCfuxq6KegH08F7uXh9+wAf
b+6deqfHCLpxbg==
-----END CERTIFICATE-----
Generated at Tue Apr 7 12:05:54 2026 by rpki-client