Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: m9dMCf7/DpLSEMSKFt9OGCNNlTR1T7MmVckvW6pP66U=
Subject key identifier: 85:F4:47:64:18:2E:FB:B8:94:40:62:5D:89:A2:4F:93:2A:D0:A3:C8
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 019D37C092BD9B560F366E34017FFD89C666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:01:00 +0000
Manifest this update: Sun 29 Mar 2026 04:01:00 +0000
Manifest next update: Mon 30 Mar 2026 04:01:00 +0000
Files and hashes: 1: 1-cSechBeG_43VlV3W2mEZPKzYGE.roa (hash: 9e/rHvRg0gRAUAYkVXIF5QXnGheb2t+lp0PsH5x3v20=)
2: M8hdjmtzd8hrW3Y8l4qmpPKkDK0.roa (hash: J/z8EzYcLAwxjC5JuidTonZF1YMKXrRg2Bt2mDC3F7U=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: lr1rUCRRh6V6hNO0pH9xxH3BQJgz8EhcD4CYH+GuLYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:92:bd:9b:56:0f:36:6e:34:01:7f:fd:89:c6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Mar 29 04:01:00 2026 GMT
Not After : Mar 30 04:01:00 2026 GMT
Subject: CN=85f44764182efbb89440625d89a24f932ad0a3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c5:b8:7d:e1:86:4e:88:67:fe:3a:ce:b4:0c:
78:c6:3b:4f:9a:9d:8d:db:97:46:7f:e9:16:3b:cc:
15:9f:37:fb:55:01:f1:eb:66:c1:e6:52:3b:d1:85:
98:9d:66:7e:bb:dc:3e:0b:a0:b9:aa:39:e8:69:50:
18:fc:c8:6c:82:0b:eb:b5:1d:35:07:d1:60:db:d8:
7d:66:ca:89:d3:7f:f6:fd:b8:21:38:db:90:f2:88:
0f:31:8a:eb:50:8b:ca:45:bb:bc:9d:4a:4d:ef:48:
22:f9:bb:47:70:79:6a:a8:8d:e1:87:19:ca:1f:85:
f5:f0:7f:23:9f:0c:6a:4f:1c:c5:45:da:da:d0:5c:
e1:c4:6a:58:2e:f3:a1:39:21:5c:46:74:22:5d:41:
07:35:c7:07:41:b7:6b:92:d1:4b:be:e9:bd:ef:7e:
55:44:23:a3:49:bf:c2:06:05:eb:62:2b:c3:de:9f:
17:f3:90:7c:e7:e9:dd:72:a7:4c:51:46:c8:e0:90:
01:12:c7:34:b7:ec:92:79:92:9d:cf:62:96:76:85:
58:e6:e1:81:eb:b4:ba:f2:6d:88:7e:a5:a8:a0:90:
e9:4a:80:50:1b:86:01:20:85:43:cf:c9:9a:80:63:
44:94:56:2b:aa:58:7e:1e:2e:36:e6:24:b7:2a:d7:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F4:47:64:18:2E:FB:B8:94:40:62:5D:89:A2:4F:93:2A:D0:A3:C8
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:24:cb:6f:64:36:4e:ee:ec:51:53:b6:d6:b9:72:50:5e:d1:
15:2c:d6:ef:b8:0f:5e:f9:ed:7c:e7:c6:2f:0d:ec:fb:14:55:
4e:13:f9:61:b5:c8:5a:37:ec:ac:6d:03:c8:e6:49:14:db:08:
93:ad:19:f0:7b:c5:53:a9:17:cb:b5:02:c4:54:ec:e6:a7:d3:
55:e1:11:b9:ae:1c:e9:6d:ad:b2:7c:a4:ba:c1:1a:f9:6b:3c:
b1:9c:02:15:b3:0f:2d:7e:3a:d9:70:58:5a:a2:c8:87:f8:6a:
3f:09:4a:d1:e3:41:d3:9e:71:8e:4b:d2:04:5d:05:7f:d8:c5:
54:15:3f:d3:18:1c:86:cb:57:42:10:61:ab:a3:f1:71:c6:7a:
d9:29:4b:31:c8:7d:1a:0d:eb:34:9b:93:de:cb:ea:62:00:a6:
7e:a5:0b:0f:2b:a7:a6:5a:89:0b:36:cf:5c:40:8c:d1:90:c2:
04:a4:9f:5e:54:b6:2f:28:a6:6a:d3:5e:49:0d:81:9c:ea:86:
b8:ae:dc:30:e2:15:0b:36:7c:65:e6:36:74:d6:ee:9e:a3:c7:
56:0b:24:80:f3:e8:e3:16:50:b3:9d:b6:a3:f2:8b:0a:5b:c7:
4a:5d:a8:eb:b2:ab:aa:57:e0:6a:56:e6:fd:bb:f6:f3:0a:f3:
f9:ba:c8:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wJK9m1YPNm40AX/9icZmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjgwNTk5MmU2NTMxZDNkYTMxZWUxYWY2YmNkNWMwNmQw
MmI2Y2EwHhcNMjYwMzI5MDQwMTAwWhcNMjYwMzMwMDQwMTAwWjAzMTEwLwYDVQQD
Eyg4NWY0NDc2NDE4MmVmYmI4OTQ0MDYyNWQ4OWEyNGY5MzJhZDBhM2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicW4feGGTohn/jrOtAx4xjtPmp2N
25dGf+kWO8wVnzf7VQHx62bB5lI70YWYnWZ+u9w+C6C5qjnoaVAY/MhsggvrtR01
B9Fg29h9ZsqJ03/2/bghONuQ8ogPMYrrUIvKRbu8nUpN70gi+btHcHlqqI3hhxnK
H4X18H8jnwxqTxzFRdra0FzhxGpYLvOhOSFcRnQiXUEHNccHQbdrktFLvum9735V
RCOjSb/CBgXrYivD3p8X85B85+ndcqdMUUbI4JABEsc0t+ySeZKdz2KWdoVY5uGB
67S68m2IfqWooJDpSoBQG4YBIIVDz8magGNElFYrqlh+Hi425iS3KtdaMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIX0R2QYLvu4lEBiXYmiT5Mq0KPIMB8GA1UdIwQY
MBaAFL8oBZkuZTHT2jHuGva81cBtArbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83NTg0NjctNjgxOC00ZTg0LTg3YmEt
NWQ4Mzg2NjhiZWJlLzEvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi83NTg0NjctNjgxOC00ZTg0LTg3YmEtNWQ4Mzg2NjhiZWJl
LzEvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCTLb2Q2
Tu7sUVO21rlyUF7RFSzW77gPXvntfOfGLw3s+xRVThP5YbXIWjfsrG0DyOZJFNsI
k60Z8HvFU6kXy7UCxFTs5qfTVeERua4c6W2tsnykusEa+Ws8sZwCFbMPLX462XBY
WqLIh/hqPwlK0eNB055xjkvSBF0Ff9jFVBU/0xgchstXQhBhq6PxccZ62SlLMch9
Gg3rNJuT3svqYgCmfqULDyunplqJCzbPXECM0ZDCBKSfXlS2LyimatNeSQ2BnOqG
uK7cMOIVCzZ8ZeY2dNbunqPHVgskgPPo4xZQs522o/KLClvHSl2o67Krqlfgalbm
/bv28wrz+brISg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:56 2026 by rpki-client