Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8ceaf0-27f6-456c-bc7e-08538b0424eb/1/vyWD8y8GMvH9ot4x1NVi7qoH07U.mft
File: vyWD8y8GMvH9ot4x1NVi7qoH07U.mft (raw, json)
Hash identifier: d1JmENgWGqgnn9mKieTuXZrMWjdgm4gReSVe6yDawLY=
Subject key identifier: 97:0B:06:E7:3C:4E:E6:BA:E0:61:42:68:EA:B5:09:6B:83:56:8C:3A
Authority key identifier: BF:25:83:F3:2F:06:32:F1:FD:A2:DE:31:D4:D5:62:EE:AA:07:D3:B5
Certificate issuer: /CN=bf2583f32f0632f1fda2de31d4d562eeaa07d3b5
Certificate serial: 019D3865C2105BD4E6F21A346D1DCF16066D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyWD8y8GMvH9ot4x1NVi7qoH07U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8ceaf0-27f6-456c-bc7e-08538b0424eb/1/vyWD8y8GMvH9ot4x1NVi7qoH07U.mft
Manifest number: 58
Signing time: Sun 29 Mar 2026 07:01:26 +0000
Manifest this update: Sun 29 Mar 2026 07:01:26 +0000
Manifest next update: Mon 30 Mar 2026 07:01:26 +0000
Files and hashes: 1: vZv3FN2tJ8gWjI_-FLI812Ef6ns.roa (hash: QctpTFOBnHUk9XOzbJs42Weo4R/GK1yQVquh8DaiaL4=)
2: vyWD8y8GMvH9ot4x1NVi7qoH07U.crl (hash: 5YWCcE13vHnU5trOA11pRvcCEl0p232PGjTKaO6Lnso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8ceaf0-27f6-456c-bc7e-08538b0424eb/1/vyWD8y8GMvH9ot4x1NVi7qoH07U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8ceaf0-27f6-456c-bc7e-08538b0424eb/1/vyWD8y8GMvH9ot4x1NVi7qoH07U.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyWD8y8GMvH9ot4x1NVi7qoH07U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c2:10:5b:d4:e6:f2:1a:34:6d:1d:cf:16:06:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2583f32f0632f1fda2de31d4d562eeaa07d3b5
Validity
Not Before: Mar 29 07:01:26 2026 GMT
Not After : Mar 30 07:01:26 2026 GMT
Subject: CN=970b06e73c4ee6bae0614268eab5096b83568c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:a8:f4:67:ce:43:b1:38:5f:09:33:4b:2d:
07:f8:98:14:95:9f:96:35:97:c7:85:8f:c3:48:0c:
f9:c1:3f:04:70:57:28:1b:2b:8a:32:a1:3a:7a:04:
23:f4:63:60:fd:61:e0:40:96:c9:b4:1a:d6:53:78:
e2:94:b7:1c:c7:8b:51:39:95:77:2a:fe:90:1e:ee:
5f:1a:04:37:97:c2:d8:23:42:f4:34:52:4a:d8:e2:
6a:03:5e:63:64:0a:be:5e:4e:f0:6d:e2:c8:e8:18:
43:d0:03:28:71:95:c6:f0:54:87:ca:b0:2a:f2:e5:
d4:30:59:87:47:ad:71:4c:8e:20:ea:90:d4:ee:40:
68:83:10:40:f7:82:e7:aa:64:f6:d5:6b:9d:58:fe:
e1:6a:a3:7f:9b:bf:25:2c:c9:74:e9:86:4b:3b:2e:
db:73:66:28:8e:a0:96:3c:3f:2f:66:8d:71:b1:18:
37:63:e3:c5:a7:cc:2e:12:43:03:7b:e4:35:83:a3:
82:98:0a:d4:47:f9:00:84:32:a0:f0:b6:2b:4d:02:
6a:8f:8a:a3:69:bb:4e:90:40:9d:bc:e6:5e:3b:86:
29:31:47:d1:bb:a5:e3:3c:ae:b1:54:92:34:13:6a:
d4:15:ff:ce:d2:bf:65:6a:88:48:5e:2b:9b:b2:a6:
28:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0B:06:E7:3C:4E:E6:BA:E0:61:42:68:EA:B5:09:6B:83:56:8C:3A
X509v3 Authority Key Identifier:
keyid:BF:25:83:F3:2F:06:32:F1:FD:A2:DE:31:D4:D5:62:EE:AA:07:D3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyWD8y8GMvH9ot4x1NVi7qoH07U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8ceaf0-27f6-456c-bc7e-08538b0424eb/1/vyWD8y8GMvH9ot4x1NVi7qoH07U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8ceaf0-27f6-456c-bc7e-08538b0424eb/1/vyWD8y8GMvH9ot4x1NVi7qoH07U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:62:f0:3f:82:8c:f8:4f:e9:2c:e4:fc:35:b9:4b:db:cc:0e:
eb:03:38:1a:ca:16:ff:cc:79:9d:43:c4:fa:a4:0a:01:46:3d:
4a:25:7f:40:4a:8d:8c:be:56:87:eb:c7:7e:fc:65:d1:4a:ba:
90:f9:f6:f2:74:36:3e:49:57:1f:94:72:af:c7:09:70:e8:79:
a8:b2:df:43:0c:cd:56:31:1e:4b:25:67:d5:5b:de:b0:a4:e8:
aa:26:57:84:3c:2b:89:c0:4b:87:3b:cb:f0:64:75:0f:5b:19:
ed:0c:ed:96:a8:02:4e:17:c6:95:36:00:72:16:e5:af:e9:cf:
35:6b:2e:f7:46:58:9f:5f:22:28:cd:30:a6:d2:56:47:df:9c:
c6:cb:c0:c6:ad:2b:45:bd:a8:41:3c:56:8b:ca:59:8d:5e:bf:
79:2e:e9:c1:0c:ff:cf:d9:96:ce:94:87:1f:59:f4:27:bd:e3:
3b:39:b7:f0:dd:34:a6:7f:e6:b4:22:f0:cb:07:91:33:94:4b:
72:85:5b:74:f2:ab:54:b7:c7:35:83:18:d4:12:ec:63:86:72:
d4:c0:bc:8e:a1:0c:da:43:03:36:a5:87:dd:bc:b8:ee:c1:9d:
2a:32:42:fe:d9:2b:67:5c:a1:1b:af:c5:6c:25:df:5d:34:28:
bb:43:3a:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZcIQW9Tm8ho0bR3PFgZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjU4M2YzMmYwNjMyZjFmZGEyZGUzMWQ0ZDU2MmVlYWEw
N2QzYjUwHhcNMjYwMzI5MDcwMTI2WhcNMjYwMzMwMDcwMTI2WjAzMTEwLwYDVQQD
Eyg5NzBiMDZlNzNjNGVlNmJhZTA2MTQyNjhlYWI1MDk2YjgzNTY4YzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus6o9GfOQ7E4XwkzSy0H+JgUlZ+W
NZfHhY/DSAz5wT8EcFcoGyuKMqE6egQj9GNg/WHgQJbJtBrWU3jilLccx4tROZV3
Kv6QHu5fGgQ3l8LYI0L0NFJK2OJqA15jZAq+Xk7wbeLI6BhD0AMocZXG8FSHyrAq
8uXUMFmHR61xTI4g6pDU7kBogxBA94LnqmT21WudWP7haqN/m78lLMl06YZLOy7b
c2YojqCWPD8vZo1xsRg3Y+PFp8wuEkMDe+Q1g6OCmArUR/kAhDKg8LYrTQJqj4qj
abtOkECdvOZeO4YpMUfRu6XjPK6xVJI0E2rUFf/O0r9laohIXiubsqYoywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcLBuc8Tua64GFCaOq1CWuDVow6MB8GA1UdIwQY
MBaAFL8lg/MvBjLx/aLeMdTVYu6qB9O1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlXRDh5OEdNdkg5b3Q0eDFOVmk3cW9IMDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84Y2VhZjAtMjdmNi00NTZjLWJjN2Ut
MDg1MzhiMDQyNGViLzEvdnlXRDh5OEdNdkg5b3Q0eDFOVmk3cW9IMDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC84Y2VhZjAtMjdmNi00NTZjLWJjN2UtMDg1MzhiMDQyNGVi
LzEvdnlXRDh5OEdNdkg5b3Q0eDFOVmk3cW9IMDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImLwP4KM
+E/pLOT8NblL28wO6wM4GsoW/8x5nUPE+qQKAUY9SiV/QEqNjL5Wh+vHfvxl0Uq6
kPn28nQ2PklXH5Ryr8cJcOh5qLLfQwzNVjEeSyVn1VvesKToqiZXhDwricBLhzvL
8GR1D1sZ7QztlqgCThfGlTYAchblr+nPNWsu90ZYn18iKM0wptJWR9+cxsvAxq0r
Rb2oQTxWi8pZjV6/eS7pwQz/z9mWzpSHH1n0J73jOzm38N00pn/mtCLwyweRM5RL
coVbdPKrVLfHNYMY1BLsY4Zy1MC8jqEM2kMDNqWH3by47sGdKjJC/tkrZ1yhG6/F
bCXfXTQou0M6eA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:13 2026 by rpki-client