
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File: vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier: lS3XYQtPMcAvAIYjLR7vVABo7vhfAD1JUlz71VzaBJs=
Subject key identifier: 9C:32:8C:06:53:E6:98:86:F2:35:DB:3D:57:58:AB:49:3C:96:98:D3
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial: 01A1133BDC4286CFCADB437B9B0E49BD5924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number: 1A8A
Signing time: Tue 06 Oct 2026 22:00:52 +0000
Manifest this update: Tue 06 Oct 2026 22:00:52 +0000
Manifest next update: Wed 07 Oct 2026 22:00:52 +0000
Files and hashes: 1: Q2LlNZpjm7QSfpQ8SxDMKPen6fs.roa (hash: +LvudqksRpkI5ThHyJo6o0SESZrwUB4lFuLcKBfvGGo=)
2: lb9dWd03BfnM72HsEUOqMfSXM5c.roa (hash: RJsPG6DuVrowjWLhY1jcZaBG3s9HD98PpDetQPQtNn0=)
3: n8D_NKCQjks2jeuzf-VmDEGhJy0.roa (hash: BxlSKmYiJSjve5WPsQ9b002bw4r8+dfXErMK1Yu3iW0=)
4: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: XFWHYMi8UPIHdERYhos8F3US850EK88h7M+/2CMt1fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:3b:dc:42:86:cf:ca:db:43:7b:9b:0e:49:bd:59:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Validity
Not Before: Oct 6 22:00:52 2026 GMT
Not After : Oct 7 22:00:52 2026 GMT
Subject: CN=9c328c0653e69886f235db3d5758ab493c9698d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:8b:f1:5e:07:c9:45:e8:79:00:d1:b4:46:
44:5f:d4:23:44:9a:15:ad:06:5f:87:00:4b:91:a6:
ad:df:89:19:bd:09:79:bf:89:5c:af:36:dd:aa:86:
6a:eb:e1:30:6b:3e:d4:35:f4:22:55:a6:45:44:a4:
99:d0:03:a3:db:22:49:db:d5:dc:c7:7c:56:ac:e6:
ee:4b:00:83:e6:ac:c4:9a:3b:b7:67:a5:49:f4:7e:
74:cd:41:f0:a1:61:65:e8:c8:d0:cc:ee:c3:5a:d0:
42:db:a8:20:3d:02:74:c5:68:9a:a2:e7:de:9a:ec:
8c:59:a3:1c:62:28:b9:f8:b4:8f:81:17:a3:19:13:
bd:a7:7d:a1:85:f9:05:d5:d9:4d:a5:ad:b9:ad:cc:
f7:37:67:17:db:37:7d:3c:6f:ae:6e:c8:ee:b3:e4:
92:c0:9a:0b:05:0a:c2:67:5a:2a:cf:0b:cb:03:2d:
15:58:cd:6c:2c:80:73:1d:df:8a:77:b0:56:7b:e7:
86:33:f1:e8:e2:c2:67:68:0c:16:c3:83:c0:a6:cd:
df:83:db:75:41:c6:55:91:bb:c9:b4:19:a5:c6:93:
e3:98:38:14:70:c8:96:dd:9d:f9:fb:6f:1d:9a:a6:
3d:bd:3e:6c:34:2b:3a:9b:1d:28:bc:b5:79:e1:38:
12:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:32:8C:06:53:E6:98:86:F2:35:DB:3D:57:58:AB:49:3C:96:98:D3
X509v3 Authority Key Identifier:
keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e8:b2:50:ac:9b:4f:9e:04:f2:cc:2d:ed:93:11:97:17:58:
03:f4:5a:2f:86:c8:77:31:f2:6f:6b:36:f7:ca:6c:0b:1f:d3:
85:24:07:51:d5:3e:e5:42:73:68:f9:dd:95:54:be:b4:3d:dc:
68:76:d9:49:44:0f:bb:c2:08:ca:ef:3d:05:c2:6f:1f:ef:f3:
44:f5:27:77:f2:d4:cc:63:ac:65:32:cc:e9:81:2e:62:8b:78:
8e:ea:4e:aa:c2:f2:4c:dc:33:5e:c9:0f:94:a5:ef:8a:f6:fd:
f5:6b:81:f7:b6:93:11:fd:79:8c:25:49:f5:a3:c5:7b:10:80:
d9:bb:1e:ed:27:33:2c:47:6c:84:ca:0d:9c:c0:52:92:67:b1:
94:02:e0:c4:9f:64:ff:7b:17:41:bd:e9:19:b6:fd:0a:d7:98:
7b:72:05:8d:3e:f2:3d:5f:67:14:b4:69:b5:74:b2:c9:00:ed:
61:2c:9c:58:5f:cd:6d:24:d5:19:9b:b1:62:a8:60:5b:e3:04:
e6:1c:da:de:19:04:85:fe:20:e1:5e:ef:79:71:16:41:12:d2:
ff:ca:67:d0:df:a2:aa:62:0d:49:26:13:9c:4b:e1:6f:b6:1b:
68:b6:a9:b1:23:64:fe:ff:4a:21:63:18:ae:21:a5:f2:c9:fa:
56:47:37:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaETO9xChs/K20N7mw5JvVkkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjM5Yzc3OTBmYzNkNTc3NjI2ZDViYmYxODYxZTU5Yzli
NDcwYWUwHhcNMjYxMDA2MjIwMDUyWhcNMjYxMDA3MjIwMDUyWjAzMTEwLwYDVQQD
Eyg5YzMyOGMwNjUzZTY5ODg2ZjIzNWRiM2Q1NzU4YWI0OTNjOTY5OGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTCL8V4HyUXoeQDRtEZEX9QjRJoV
rQZfhwBLkaat34kZvQl5v4lcrzbdqoZq6+Ewaz7UNfQiVaZFRKSZ0AOj2yJJ29Xc
x3xWrObuSwCD5qzEmju3Z6VJ9H50zUHwoWFl6MjQzO7DWtBC26ggPQJ0xWiaoufe
muyMWaMcYii5+LSPgRejGRO9p32hhfkF1dlNpa25rcz3N2cX2zd9PG+ubsjus+SS
wJoLBQrCZ1oqzwvLAy0VWM1sLIBzHd+Kd7BWe+eGM/Ho4sJnaAwWw4PAps3fg9t1
QcZVkbvJtBmlxpPjmDgUcMiW3Z35+28dmqY9vT5sNCs6mx0ovLV54TgSawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwyjAZT5piG8jXbPVdYq0k8lpjTMB8GA1UdIwQY
MBaAFL8jnHeQ/D1XdibVu/GGHlnJtHCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMGRlZWMtNzIzMy00MmYzLTg3Njct
YjU1MDNhMzJlZGZlLzEvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9iMGRlZWMtNzIzMy00MmYzLTg3NjctYjU1MDNhMzJlZGZl
LzEvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGeiyUKyb
T54E8swt7ZMRlxdYA/RaL4bIdzHyb2s298psCx/ThSQHUdU+5UJzaPndlVS+tD3c
aHbZSUQPu8IIyu89BcJvH+/zRPUnd/LUzGOsZTLM6YEuYot4jupOqsLyTNwzXskP
lKXvivb99WuB97aTEf15jCVJ9aPFexCA2bse7SczLEdshMoNnMBSkmexlALgxJ9k
/3sXQb3pGbb9CteYe3IFjT7yPV9nFLRptXSyyQDtYSycWF/NbSTVGZuxYqhgW+ME
5hza3hkEhf4g4V7veXEWQRLS/8pn0N+iqmINSSYTnEvhb7YbaLapsSNk/v9KIWMY
riGl8sn6Vkc3/w==
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:49:32 2026 by rpki-client