
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
File: vJ8LmsHVZS89yh7xYjv5mrKWR98.mft (raw, json)
Hash identifier: IgktWtUITpLoDHTziClakGuw45AErZTwIYW21cr/CWc=
Subject key identifier: E6:6E:68:DE:E4:43:29:07:68:FA:A2:6E:B8:36:9F:F0:AA:94:0B:F0
Authority key identifier: BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
Certificate issuer: /CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Certificate serial: 01A13DEEAB1912D30E9B27DD14A6BDD70460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 05:00:13 +0000
Manifest this update: Thu 15 Oct 2026 05:00:13 +0000
Manifest next update: Fri 16 Oct 2026 05:00:13 +0000
Files and hashes: 1: Y4GsPYL5IzvewFFwkZIhdfeJfyA.roa (hash: eD8cUm6eR2m4jrtu7qYzfbk2kaBxMh/aGCqnzhmpaDY=)
2: g5jXkTpT8rS4RDrTaaqiauLNaBc.roa (hash: isrTkqL/KrQh1HHr0NL5DuWGUHsje/NyVaTqgUAy9vE=)
3: vJ8LmsHVZS89yh7xYjv5mrKWR98.crl (hash: J+GCOylKfAvwRF3IuHJt0R173awfwcn51H8iS2OKGPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:ab:19:12:d3:0e:9b:27:dd:14:a6:bd:d7:04:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Validity
Not Before: Oct 15 05:00:13 2026 GMT
Not After : Oct 16 05:00:13 2026 GMT
Subject: CN=e66e68dee443290768faa26eb8369ff0aa940bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:21:62:79:6c:d7:32:a5:f9:57:b3:2e:57:11:
44:20:47:e4:a8:c0:82:0c:56:e4:ae:3b:32:1f:67:
0e:e7:f7:7d:49:ef:52:a2:78:a2:ad:66:9b:72:d9:
f2:95:e4:80:a3:4d:81:fb:b4:bd:3d:84:d9:fd:f5:
8c:af:cd:84:30:23:f6:09:87:ac:57:6e:50:1e:be:
ff:de:22:20:a3:36:5e:94:42:24:2b:26:56:22:6f:
87:9b:79:0c:81:4f:ee:fa:c8:fc:8f:a4:5c:67:2c:
58:d3:e7:61:46:c1:60:d2:71:b4:5d:77:4d:44:5d:
09:64:da:aa:00:c2:52:a4:74:48:f4:4d:b1:a5:57:
ce:2c:78:27:75:4a:98:d7:1a:11:85:65:49:7f:9a:
27:f6:4f:ca:7a:57:fc:1d:dc:3f:7f:59:ca:3d:3f:
22:2a:19:3d:79:04:aa:77:f9:5b:58:d7:28:bb:d0:
fb:d2:8a:d5:28:66:d0:4e:33:90:8e:40:48:fb:ba:
06:7d:a5:d0:0a:9c:d2:12:1c:4c:5f:a9:a1:cd:d7:
b6:ca:e0:9e:94:2e:12:b2:97:2e:42:c1:bb:2a:59:
f0:8f:28:a1:d3:14:6a:f2:14:ae:e9:43:00:32:f6:
ab:c1:b5:dc:b4:d2:bf:f7:96:78:b8:99:91:ab:c6:
8e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6E:68:DE:E4:43:29:07:68:FA:A2:6E:B8:36:9F:F0:AA:94:0B:F0
X509v3 Authority Key Identifier:
keyid:BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c2:76:75:0e:bd:ca:60:b1:01:d0:84:29:f6:ec:d5:eb:4a:
2c:2b:1b:92:19:58:ae:fa:3c:98:96:0f:31:87:a0:db:d4:86:
28:39:d1:85:17:88:47:79:31:e0:b5:48:29:d1:e4:8c:68:39:
44:75:5f:d8:cb:fa:d0:3e:60:08:b9:9d:82:f7:f4:df:40:25:
30:d9:a5:8a:2c:0c:0f:3c:81:ee:b0:15:bc:c6:e7:05:8a:df:
4c:18:2d:78:b8:03:e3:75:cb:d5:1f:2f:8e:00:e4:3c:93:65:
0f:ee:e3:10:73:a8:40:c8:58:2e:46:1f:97:01:1f:12:78:7e:
81:7d:44:c5:13:5f:55:6f:03:38:d0:d9:01:b8:b9:7e:75:e0:
25:2b:b9:e9:a3:a4:b6:a2:df:07:cd:86:16:af:63:06:f1:a3:
59:05:99:20:ac:b2:08:b9:9b:5c:be:69:63:98:52:7f:d1:d2:
55:2f:ac:31:6c:4b:c7:5d:15:44:39:3b:6e:9d:57:b1:c6:8a:
57:e4:db:07:f4:c3:10:31:83:42:83:fc:73:a1:4b:46:12:22:
84:38:09:37:26:6e:0e:16:64:a2:6e:74:d2:4f:ac:08:20:80:
98:6a:b2:94:ba:f5:b4:0c:d9:a5:40:e1:2f:97:36:81:f3:71:
7f:a1:96:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE97qsZEtMOmyfdFKa91wRgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWYwYjlhYzFkNTY1MmYzZGNhMWVmMTYyM2JmOTlhYjI5
NjQ3ZGYwHhcNMjYxMDE1MDUwMDEzWhcNMjYxMDE2MDUwMDEzWjAzMTEwLwYDVQQD
EyhlNjZlNjhkZWU0NDMyOTA3NjhmYWEyNmViODM2OWZmMGFhOTQwYmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SFieWzXMqX5V7MuVxFEIEfkqMCC
DFbkrjsyH2cO5/d9Se9SoniirWabctnyleSAo02B+7S9PYTZ/fWMr82EMCP2CYes
V25QHr7/3iIgozZelEIkKyZWIm+Hm3kMgU/u+sj8j6RcZyxY0+dhRsFg0nG0XXdN
RF0JZNqqAMJSpHRI9E2xpVfOLHgndUqY1xoRhWVJf5on9k/Kelf8Hdw/f1nKPT8i
Khk9eQSqd/lbWNcou9D70orVKGbQTjOQjkBI+7oGfaXQCpzSEhxMX6mhzde2yuCe
lC4SspcuQsG7Klnwjyih0xRq8hSu6UMAMvarwbXctNK/95Z4uJmRq8aORQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZuaN7kQykHaPqibrg2n/CqlAvwMB8GA1UdIwQY
MBaAFLyfC5rB1WUvPcoe8WI7+ZqylkffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80OTkyYjYtZmRhZS00YzlmLWJmM2Ut
OTVjODk0MmRmNzI0LzEvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80OTkyYjYtZmRhZS00YzlmLWJmM2UtOTVjODk0MmRmNzI0
LzEvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMJ2dQ69
ymCxAdCEKfbs1etKLCsbkhlYrvo8mJYPMYeg29SGKDnRhReIR3kx4LVIKdHkjGg5
RHVf2Mv60D5gCLmdgvf030AlMNmliiwMDzyB7rAVvMbnBYrfTBgteLgD43XL1R8v
jgDkPJNlD+7jEHOoQMhYLkYflwEfEnh+gX1ExRNfVW8DONDZAbi5fnXgJSu56aOk
tqLfB82GFq9jBvGjWQWZIKyyCLmbXL5pY5hSf9HSVS+sMWxLx10VRDk7bp1XscaK
V+TbB/TDEDGDQoP8c6FLRhIihDgJNyZuDhZkom500k+sCCCAmGqylLr1tAzZpUDh
L5c2gfNxf6GWTA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:36:04 2026 by rpki-client