Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
File: vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json)
Hash identifier: 2Z54eqcGJT8vuXKo/WarBHQT89sDMmHBITmwEH0pwP0=
Subject key identifier: E8:D5:EE:01:64:33:39:68:4A:94:EC:7C:EA:4F:2B:EA:AE:FA:53:BC
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Certificate issuer: /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial: 019D37F6F0826AEE9477334F894DADD9AADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:23 +0000
Manifest this update: Sun 29 Mar 2026 05:00:23 +0000
Manifest next update: Mon 30 Mar 2026 05:00:23 +0000
Files and hashes: 1: owpSV77jbxZ9VhY5GoPY3SzakH4.roa (hash: bIn4GPl6r1y0htBGN921xbLzQeP4Y7NtdCfbY0WeOD8=)
2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: nBPOkGKpkPIFNgI2OljSk9vx8PEd1QL3cALVECvLxmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f0:82:6a:ee:94:77:33:4f:89:4d:ad:d9:aa:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Validity
Not Before: Mar 29 05:00:23 2026 GMT
Not After : Mar 30 05:00:23 2026 GMT
Subject: CN=e8d5ee01643339684a94ec7cea4f2beaaefa53bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4c:dc:f1:0e:a3:fa:90:7e:2c:9f:06:97:87:
2c:87:9e:3b:05:62:af:89:4b:92:45:e8:1e:24:26:
9b:a0:a7:9f:a4:c8:c1:f0:6f:a8:e6:f3:1c:f8:a6:
20:0e:78:1f:a4:ba:2b:05:7f:ac:d0:7d:4b:2e:57:
84:ab:13:f7:c1:85:3d:bc:31:89:d4:f7:b3:70:1a:
db:bb:08:c4:ff:8b:08:f0:f8:d2:21:63:08:e7:4b:
4c:96:2f:89:d3:2a:bc:ca:a7:db:2a:9c:06:82:bb:
1e:cd:e3:b9:99:e5:5d:a8:97:97:1e:d3:ff:9b:3c:
a4:48:a7:18:e7:57:d2:fc:3a:c6:c9:0c:b3:2c:15:
44:e0:b2:ab:26:f9:1a:c1:fe:c6:e1:10:8f:63:51:
57:d1:ef:40:f8:21:53:3b:5b:94:6c:0c:90:6a:70:
73:0b:b4:ff:ff:71:d0:f8:9b:fb:06:44:9b:8d:af:
0f:64:6f:72:6a:51:36:c2:64:fc:e6:2e:4c:f7:0a:
a5:44:b8:d0:3b:66:67:dd:6e:5a:4e:5b:71:3d:8c:
0b:32:43:a0:a0:a1:30:00:91:ae:81:70:aa:96:f4:
7d:cd:8e:8f:2e:9c:72:8f:1f:3e:d0:78:f5:54:87:
d1:86:c4:b5:60:cf:e6:3c:8d:05:b5:fa:02:fe:57:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D5:EE:01:64:33:39:68:4A:94:EC:7C:EA:4F:2B:EA:AE:FA:53:BC
X509v3 Authority Key Identifier:
keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2b:5a:ce:48:c0:cf:72:b2:fb:26:41:52:5a:8d:47:54:39:
e5:84:25:51:34:0c:21:51:2c:fc:65:f7:49:aa:87:92:ae:c6:
0b:33:75:7d:a1:d1:47:c0:f3:69:ec:4b:29:c1:1a:b7:e0:da:
d2:73:4b:de:c6:37:4d:e2:73:a2:59:2f:90:0d:7d:0d:3c:b0:
f6:c9:38:4f:66:97:45:65:bc:32:50:d7:74:df:35:e8:7d:de:
f8:d1:a4:ea:11:9f:5d:d7:97:3d:c5:0a:ee:1f:9a:48:fe:cb:
c5:56:d3:36:16:2c:ad:b4:83:71:53:b9:cb:2c:91:40:4a:3d:
85:31:90:f4:64:2c:b6:76:50:62:23:92:a7:fb:e8:31:e6:b8:
ae:87:83:ca:5c:4c:b6:14:40:e0:44:00:b2:c1:1a:8e:14:16:
46:be:b9:8b:cb:de:f2:39:85:a1:60:e5:88:24:e7:57:f3:e8:
ea:cc:70:01:ed:ae:46:3f:20:42:e6:04:85:08:b5:66:9c:f8:
f1:5d:8c:50:26:c3:8a:6f:d0:b9:a5:e2:5b:62:f8:79:21:0e:
b4:95:d0:36:3c:70:d9:76:69:40:8a:f1:dd:76:64:15:9a:a3:
d1:a8:54:8a:db:5a:dd:64:aa:a5:b6:ba:47:b4:eb:65:82:bf:
10:47:64:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039vCCau6UdzNPiU2t2arfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYjdhYWM3YzQ5M2JjOGFhN2VjNzA1OWQzZWM3NmJiZmMy
ZjIzZDgwHhcNMjYwMzI5MDUwMDIzWhcNMjYwMzMwMDUwMDIzWjAzMTEwLwYDVQQD
EyhlOGQ1ZWUwMTY0MzMzOTY4NGE5NGVjN2NlYTRmMmJlYWFlZmE1M2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUzc8Q6j+pB+LJ8Gl4csh547BWKv
iUuSRegeJCaboKefpMjB8G+o5vMc+KYgDngfpLorBX+s0H1LLleEqxP3wYU9vDGJ
1PezcBrbuwjE/4sI8PjSIWMI50tMli+J0yq8yqfbKpwGgrsezeO5meVdqJeXHtP/
mzykSKcY51fS/DrGyQyzLBVE4LKrJvkawf7G4RCPY1FX0e9A+CFTO1uUbAyQanBz
C7T//3HQ+Jv7BkSbja8PZG9yalE2wmT85i5M9wqlRLjQO2Zn3W5aTltxPYwLMkOg
oKEwAJGugXCqlvR9zY6PLpxyjx8+0Hj1VIfRhsS1YM/mPI0FtfoC/ldAvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjV7gFkMzloSpTsfOpPK+qu+lO8MB8GA1UdIwQY
MBaAFL23qsfEk7yKp+xwWdPsdrv8LyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDkt
Njk3YzBlMmMzZDM1LzEvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDktNjk3YzBlMmMzZDM1
LzEvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbitazkjA
z3Ky+yZBUlqNR1Q55YQlUTQMIVEs/GX3SaqHkq7GCzN1faHRR8DzaexLKcEat+Da
0nNL3sY3TeJzolkvkA19DTyw9sk4T2aXRWW8MlDXdN816H3e+NGk6hGfXdeXPcUK
7h+aSP7LxVbTNhYsrbSDcVO5yyyRQEo9hTGQ9GQstnZQYiOSp/voMea4roeDylxM
thRA4EQAssEajhQWRr65i8ve8jmFoWDliCTnV/Po6sxwAe2uRj8gQuYEhQi1Zpz4
8V2MUCbDim/QuaXiW2L4eSEOtJXQNjxw2XZpQIrx3XZkFZqj0ahUitta3WSqpba6
R7TrZYK/EEdkWg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:26 2026 by rpki-client