Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: uOHMAuzsUT8Du4iIDE3TRq2DilL3Fq78svj8mTOKKFI=
Subject key identifier: 18:86:9A:14:39:6A:48:8B:00:61:82:A6:84:8B:9E:88:79:EB:B2:CE
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 01A0024AD3563EE6D61312D9CF046498274B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 22:00:53 +0000
Manifest this update: Fri 14 Aug 2026 22:00:53 +0000
Manifest next update: Sat 15 Aug 2026 22:00:53 +0000
Files and hashes: 1: 1-cSechBeG_43VlV3W2mEZPKzYGE.roa (hash: 9e/rHvRg0gRAUAYkVXIF5QXnGheb2t+lp0PsH5x3v20=)
2: M8hdjmtzd8hrW3Y8l4qmpPKkDK0.roa (hash: J/z8EzYcLAwxjC5JuidTonZF1YMKXrRg2Bt2mDC3F7U=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: I4N3r+b9d/4libq6Pg6PHU/0IxPwEVGCe7zOy1IAQnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:d3:56:3e:e6:d6:13:12:d9:cf:04:64:98:27:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Aug 14 22:00:53 2026 GMT
Not After : Aug 15 22:00:53 2026 GMT
Subject: CN=18869a14396a488b006182a6848b9e8879ebb2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ba:78:05:78:40:64:f4:d8:7f:9c:fc:b2:17:
9f:ee:36:64:a1:4b:67:14:79:c8:63:36:d4:63:de:
a8:36:87:07:f6:b2:01:55:5c:65:20:42:8f:38:24:
79:e1:ab:c2:03:46:af:17:f0:d1:23:52:e6:6d:1e:
9a:fc:77:cb:97:d0:60:0a:bc:db:d4:a6:6c:2f:cb:
ff:e0:cf:8a:2f:3f:37:97:25:bd:39:06:60:76:21:
a1:74:0a:15:f1:54:3b:94:57:08:d8:8f:19:4c:32:
66:7a:08:8a:85:ef:51:39:95:72:68:32:0f:b3:72:
08:ee:10:67:dc:e6:2f:af:bf:1a:05:c6:0a:cb:13:
4f:33:21:4c:ab:12:10:ab:85:b4:80:98:cb:0f:4c:
aa:fb:73:e3:0a:a6:21:22:d2:1c:29:0a:75:2c:e5:
e6:05:67:d0:2c:0f:0e:55:15:08:2d:62:92:ba:ab:
34:54:6e:06:43:3a:fb:0e:fc:82:b2:cb:92:25:3a:
96:a2:40:34:96:c4:27:61:33:f0:20:fc:9b:2c:2f:
19:ef:03:58:3c:eb:50:eb:9e:35:43:63:b1:4d:b0:
37:30:88:df:f7:86:bd:e5:09:e7:46:17:86:3e:f2:
b9:10:d1:e6:ce:b7:b8:34:91:70:35:9c:c8:7e:e1:
66:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:86:9A:14:39:6A:48:8B:00:61:82:A6:84:8B:9E:88:79:EB:B2:CE
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:da:b3:ae:b7:b5:01:35:f2:2b:ea:88:0c:d2:e1:31:70:d7:
44:e9:91:73:84:1c:f1:35:d7:bf:7d:3e:52:67:bd:43:b0:7b:
7e:d9:57:c1:6a:88:07:d8:ed:fd:07:31:07:01:0b:ad:3f:15:
3c:84:fc:e4:9b:7e:fa:29:61:6d:6e:06:34:76:a8:6e:14:b0:
29:66:35:74:9d:27:66:bb:b8:3a:97:00:b4:23:72:14:2e:22:
6f:82:af:c7:96:56:0a:da:1b:da:da:7f:9b:76:fd:28:73:73:
73:fb:9a:03:dc:9a:03:b1:b2:48:bd:fb:91:7b:59:8c:a8:64:
a9:89:e4:a7:83:fe:33:af:2a:e9:26:a8:d6:e6:7e:87:40:66:
3e:12:7d:38:d6:e1:96:6e:62:53:42:4d:28:f5:22:a6:3c:9b:
0d:da:ca:b3:54:8e:3e:7a:70:05:10:31:a1:eb:1c:bd:63:2f:
e7:9f:73:d4:06:04:b8:36:f2:81:6b:29:11:b2:16:8e:51:51:
f4:45:5e:f8:b8:d0:39:a5:61:2a:80:52:f6:ca:2d:2d:ca:0d:
d4:f1:ca:ab:2b:70:a9:7b:db:58:1d:7c:6d:48:89:b5:d8:a0:
89:4e:31:71:08:18:bb:9e:d4:23:d2:43:0e:c9:6a:92:da:7b:
8e:1e:1a:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACStNWPubWExLZzwRkmCdLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjgwNTk5MmU2NTMxZDNkYTMxZWUxYWY2YmNkNWMwNmQw
MmI2Y2EwHhcNMjYwODE0MjIwMDUzWhcNMjYwODE1MjIwMDUzWjAzMTEwLwYDVQQD
EygxODg2OWExNDM5NmE0ODhiMDA2MTgyYTY4NDhiOWU4ODc5ZWJiMmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLp4BXhAZPTYf5z8shef7jZkoUtn
FHnIYzbUY96oNocH9rIBVVxlIEKPOCR54avCA0avF/DRI1LmbR6a/HfLl9BgCrzb
1KZsL8v/4M+KLz83lyW9OQZgdiGhdAoV8VQ7lFcI2I8ZTDJmegiKhe9ROZVyaDIP
s3II7hBn3OYvr78aBcYKyxNPMyFMqxIQq4W0gJjLD0yq+3PjCqYhItIcKQp1LOXm
BWfQLA8OVRUILWKSuqs0VG4GQzr7DvyCssuSJTqWokA0lsQnYTPwIPybLC8Z7wNY
POtQ6541Q2OxTbA3MIjf94a95QnnRheGPvK5ENHmzre4NJFwNZzIfuFmrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiGmhQ5akiLAGGCpoSLnoh567LOMB8GA1UdIwQY
MBaAFL8oBZkuZTHT2jHuGva81cBtArbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83NTg0NjctNjgxOC00ZTg0LTg3YmEt
NWQ4Mzg2NjhiZWJlLzEvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi83NTg0NjctNjgxOC00ZTg0LTg3YmEtNWQ4Mzg2NjhiZWJl
LzEvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9qzrre1
ATXyK+qIDNLhMXDXROmRc4Qc8TXXv30+Ume9Q7B7ftlXwWqIB9jt/QcxBwELrT8V
PIT85Jt++ilhbW4GNHaobhSwKWY1dJ0nZru4OpcAtCNyFC4ib4Kvx5ZWCtob2tp/
m3b9KHNzc/uaA9yaA7GySL37kXtZjKhkqYnkp4P+M68q6Sao1uZ+h0BmPhJ9ONbh
lm5iU0JNKPUipjybDdrKs1SOPnpwBRAxoescvWMv559z1AYEuDbygWspEbIWjlFR
9EVe+LjQOaVhKoBS9sotLcoN1PHKqytwqXvbWB18bUiJtdigiU4xcQgYu57UI9JD
Dslqktp7jh4awA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:28:14 2026 by rpki-client