Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
File: vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft (raw, json)
Hash identifier: wDfwNlVIg/0CtrkjPi9L1LwQwuzD+YaQ7s+IB6YKieQ=
Subject key identifier: B0:2C:0B:CB:05:95:DB:EC:1F:8B:8E:F0:F8:2D:1C:ED:8C:9C:0D:4D
Authority key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
Certificate issuer: /CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Certificate serial: 01A161FB5FAB9EC02D146DF49E7231DFE86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
Manifest number: 1ABA
Signing time: Thu 22 Oct 2026 05:00:26 +0000
Manifest this update: Thu 22 Oct 2026 05:00:26 +0000
Manifest next update: Fri 23 Oct 2026 05:00:26 +0000
Files and hashes: 1: vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl (hash: QJsSnQhL18u31o3NSI6CgYtENJ4IXNh6Wo11RX7T2d4=)
2: zzDkvJaiRpsmi6O7kaXorv8G2lo.roa (hash: U4Wz/U8KhaG7QlShrJHjPRkbJ49L12u0oJF2UhXulFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:fb:5f:ab:9e:c0:2d:14:6d:f4:9e:72:31:df:e8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Validity
Not Before: Oct 22 05:00:26 2026 GMT
Not After : Oct 23 05:00:26 2026 GMT
Subject: CN=b02c0bcb0595dbec1f8b8ef0f82d1ced8c9c0d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:b1:b1:2c:98:c2:51:3b:d2:d7:a5:bc:02:
9e:51:95:31:4d:3c:53:47:a1:cf:c7:9d:c0:c6:f0:
76:e1:2f:d1:2b:79:b4:18:4b:b6:6e:be:da:f8:2c:
e4:0d:31:de:88:ce:f8:1d:dc:87:1e:f2:5b:30:eb:
97:b1:f2:01:08:c7:c2:90:38:2a:1f:7c:6f:6e:8c:
95:67:d0:66:a5:78:d1:39:ea:74:48:73:89:51:19:
16:44:8d:99:b7:49:6f:68:d7:55:11:98:08:f9:4f:
16:fe:e4:02:1d:62:b0:6c:c1:52:41:73:b8:2c:ee:
0b:3e:16:6b:6e:75:98:9f:4d:62:87:cd:36:93:b8:
15:95:dc:82:79:a3:3c:1b:c2:8a:93:38:97:eb:f7:
4f:c4:d5:e4:64:cb:b8:d5:43:12:e3:ba:f6:3e:eb:
01:41:8f:a1:b7:05:79:7d:18:d8:51:9c:0a:7e:1d:
37:a6:e3:af:b1:af:59:12:2c:6e:a6:cd:20:da:90:
92:30:5e:48:d0:d2:8c:4b:06:72:2a:04:33:2c:ee:
93:4b:41:4b:6b:07:bf:43:4e:df:77:4c:5a:96:ec:
d2:56:fc:16:7b:a9:08:cc:79:e9:b5:27:17:d6:a0:
54:f0:ed:33:c8:a6:13:6d:bb:98:55:30:3d:ab:4a:
58:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2C:0B:CB:05:95:DB:EC:1F:8B:8E:F0:F8:2D:1C:ED:8C:9C:0D:4D
X509v3 Authority Key Identifier:
keyid:BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:38:13:86:1c:14:2c:50:74:98:41:c8:8d:54:47:05:30:26:
48:5e:41:70:6d:5f:63:41:b9:6d:eb:21:0a:4d:2d:aa:f7:75:
49:1a:2c:ee:26:4b:ca:ae:d9:28:7b:aa:58:b5:2c:dd:a2:99:
f5:6e:c0:a2:38:b1:e4:6f:8a:24:9b:c6:d2:e9:40:e5:1e:b2:
db:90:96:e4:72:40:61:45:d3:4a:ce:97:44:7d:17:ab:f3:be:
df:83:d8:f1:85:e8:fc:ad:c8:4e:e6:59:b7:f9:34:13:85:e0:
9b:22:31:02:3d:85:be:4b:f5:f4:cf:9d:ed:fd:63:71:ec:2a:
e8:6e:91:b8:8a:3c:e6:f2:f7:c6:8a:e7:eb:7b:ef:ef:3c:7a:
3d:b3:5c:12:05:52:7b:80:cd:54:db:23:a8:e7:17:86:d0:1a:
24:7c:6a:4f:23:e8:9c:73:d6:24:15:7a:8a:c3:92:34:f2:4b:
79:46:f1:c0:22:a7:4d:22:f8:42:92:4c:df:d6:31:54:e3:ec:
80:3f:6b:a5:4a:5d:4d:ed:8c:7e:cf:52:29:87:29:8c:e9:ba:
31:b2:6e:d2:fc:0d:f6:7b:50:aa:d1:e2:d2:dc:7a:4c:0d:c8:
ea:c5:cb:f1:cb:37:83:c5:e7:83:95:44:4e:8d:6d:ef:97:cc:
ee:4f:eb:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFh+1+rnsAtFG30nnIx3+hrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWQ3YzQyZTkxNzg0NGNiYzJkZTRhOTFjNmMxNzAxZGU1
OTcxYjUwHhcNMjYxMDIyMDUwMDI2WhcNMjYxMDIzMDUwMDI2WjAzMTEwLwYDVQQD
EyhiMDJjMGJjYjA1OTVkYmVjMWY4YjhlZjBmODJkMWNlZDhjOWMwZDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBSxsSyYwlE70telvAKeUZUxTTxT
R6HPx53AxvB24S/RK3m0GEu2br7a+CzkDTHeiM74HdyHHvJbMOuXsfIBCMfCkDgq
H3xvboyVZ9BmpXjROep0SHOJURkWRI2Zt0lvaNdVEZgI+U8W/uQCHWKwbMFSQXO4
LO4LPhZrbnWYn01ih802k7gVldyCeaM8G8KKkziX6/dPxNXkZMu41UMS47r2PusB
QY+htwV5fRjYUZwKfh03puOvsa9ZEixups0g2pCSMF5I0NKMSwZyKgQzLO6TS0FL
awe/Q07fd0xaluzSVvwWe6kIzHnptScX1qBU8O0zyKYTbbuYVTA9q0pYKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAsC8sFldvsH4uO8PgtHO2MnA1NMB8GA1UdIwQY
MBaAFLydfELpF4RMvC3kqRxsFwHeWXG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOWFlYTItYjZjOC00YWY5LWFkODQt
MDNmYjU0MTg3ZWUyLzEvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yOWFlYTItYjZjOC00YWY5LWFkODQtMDNmYjU0MTg3ZWUy
LzEvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzgThhwU
LFB0mEHIjVRHBTAmSF5BcG1fY0G5beshCk0tqvd1SRos7iZLyq7ZKHuqWLUs3aKZ
9W7Aojix5G+KJJvG0ulA5R6y25CW5HJAYUXTSs6XRH0Xq/O+34PY8YXo/K3ITuZZ
t/k0E4XgmyIxAj2Fvkv19M+d7f1jcewq6G6RuIo85vL3xorn63vv7zx6PbNcEgVS
e4DNVNsjqOcXhtAaJHxqTyPonHPWJBV6isOSNPJLeUbxwCKnTSL4QpJM39YxVOPs
gD9rpUpdTe2Mfs9SKYcpjOm6MbJu0vwN9ntQqtHi0tx6TA3I6sXL8cs3g8Xng5VE
To1t75fM7k/rjg==
-----END CERTIFICATE-----
Generated at Thu Oct 22 13:54:45 2026 by rpki-client