Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
File: vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft (raw, json)
Hash identifier: u2CQRoNrLU9UIOhck0SS8L8MWfgF8LzBkUCjHYfkE8w=
Subject key identifier: DC:2C:7A:E9:05:91:65:30:F8:DC:DA:F7:81:9A:A9:61:E5:BD:F8:33
Authority key identifier: BE:DD:C5:BB:A2:00:CF:D1:9B:25:DC:E1:3C:1E:2E:1A:2A:19:88:A7
Certificate issuer: /CN=beddc5bba200cfd19b25dce13c1e2e1a2a1988a7
Certificate serial: 01A0EF9D6EA9DBD8D5CE169B181FCADF9873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
Manifest number: 01EA
Signing time: Wed 30 Sep 2026 00:01:07 +0000
Manifest this update: Wed 30 Sep 2026 00:01:07 +0000
Manifest next update: Thu 01 Oct 2026 00:01:07 +0000
Files and hashes: 1: QjlLqXwrKuX4WWijKXyWQlrwzSI.roa (hash: RrqtKaSOGqQ6cVJgOKK900pw+4nXE4aG5H706/A/L7s=)
2: dBuZbSPKal6c4zm6YNTPS1fr3GQ.asa (hash: ogSY4EAD3D6IaYFiG2filgxMUAq2W39XeRjlBqtFTic=)
3: vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl (hash: oOO/lsyiZAObAy273/XCPaIa1td7dFXLGfKpfCVeBnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:9d:6e:a9:db:d8:d5:ce:16:9b:18:1f:ca:df:98:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beddc5bba200cfd19b25dce13c1e2e1a2a1988a7
Validity
Not Before: Sep 30 00:01:07 2026 GMT
Not After : Oct 1 00:01:07 2026 GMT
Subject: CN=dc2c7ae905916530f8dcdaf7819aa961e5bdf833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:d7:39:f8:a4:5a:41:7e:9e:07:e8:74:69:
7d:b8:2c:c2:18:8e:f3:d6:ab:d6:fb:b3:fc:19:bf:
3d:c5:0b:fd:c1:9c:dd:26:38:5e:3c:42:b5:50:b0:
32:62:c7:c4:2a:f4:f5:55:1f:22:23:e8:2f:b3:bb:
99:fb:a3:0d:ac:90:1e:f3:af:0a:cb:08:99:81:c7:
59:4d:e9:ce:41:9a:d2:c5:3a:55:46:cd:3c:04:dd:
ea:a8:30:7f:e9:20:40:db:73:de:54:58:4b:13:a8:
a6:59:a0:9e:8c:a6:81:b8:2f:e3:6a:45:51:fa:59:
ae:34:eb:66:c0:de:4e:07:c8:c7:79:8a:26:bf:63:
f1:9c:00:e7:53:a2:15:58:ff:b0:11:a2:67:6e:a2:
5c:2f:d6:22:ab:3d:67:48:0f:a0:77:cc:ee:5c:67:
75:36:95:26:e7:3a:1d:16:53:35:0e:9d:fc:26:8c:
2b:b4:bc:66:de:47:b3:f5:57:df:2b:e0:e9:95:f7:
86:c4:f1:11:a1:dc:80:68:58:95:5d:22:88:25:89:
21:81:d1:8a:a7:4e:eb:6c:ca:69:98:b9:ef:7b:aa:
4f:31:88:ca:5a:b0:d0:ea:82:bc:bf:61:12:b3:aa:
40:e6:95:dc:7e:2f:44:bb:43:39:bc:26:68:1f:ff:
db:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2C:7A:E9:05:91:65:30:F8:DC:DA:F7:81:9A:A9:61:E5:BD:F8:33
X509v3 Authority Key Identifier:
keyid:BE:DD:C5:BB:A2:00:CF:D1:9B:25:DC:E1:3C:1E:2E:1A:2A:19:88:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b3:d7:0e:64:13:75:82:70:af:36:a8:61:a5:11:7c:7c:29:
d2:87:aa:10:8c:64:6c:5a:28:1e:07:72:69:95:28:93:49:96:
c7:f1:44:97:25:6a:62:a0:71:12:c4:71:d9:df:5e:7a:74:1d:
e7:5f:41:50:3b:27:29:e7:2e:40:64:81:b5:11:5f:89:29:ea:
c4:3d:bf:8d:9d:de:26:b6:e3:1e:b5:92:de:0b:69:0e:2a:b6:
cc:a0:e8:c5:9e:5a:6a:f4:5c:9b:8c:0e:73:66:0f:cb:c8:b9:
b9:19:da:26:b9:cf:e5:cb:94:5c:9c:f1:97:5e:b7:08:6e:ed:
2a:26:57:be:a5:3e:6a:fe:20:80:24:d4:8c:2a:95:e8:d1:8e:
20:4c:f9:b3:64:6b:0f:83:f3:b7:0c:55:f5:25:d5:e2:1f:fe:
92:c3:13:42:c6:ad:56:a6:d6:44:d3:61:2d:84:e5:8b:8a:3d:
ae:b3:90:76:10:a0:1d:43:5a:48:58:16:2a:41:32:50:b8:cf:
5a:a8:81:22:95:1e:b0:2c:0a:76:a9:f9:3d:d1:05:ba:70:2d:
97:b0:56:88:e6:bc:f4:a5:07:b8:04:a7:5b:4c:53:65:26:fb:
4e:e5:1d:0f:30:0b:6a:68:61:d7:7d:1d:8a:2a:05:87:68:49:
cb:1a:85:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDvnW6p29jVzhabGB/K35hzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZGRjNWJiYTIwMGNmZDE5YjI1ZGNlMTNjMWUyZTFhMmEx
OTg4YTcwHhcNMjYwOTMwMDAwMTA3WhcNMjYxMDAxMDAwMTA3WjAzMTEwLwYDVQQD
EyhkYzJjN2FlOTA1OTE2NTMwZjhkY2RhZjc4MTlhYTk2MWU1YmRmODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9vXOfikWkF+ngfodGl9uCzCGI7z
1qvW+7P8Gb89xQv9wZzdJjhePEK1ULAyYsfEKvT1VR8iI+gvs7uZ+6MNrJAe868K
ywiZgcdZTenOQZrSxTpVRs08BN3qqDB/6SBA23PeVFhLE6imWaCejKaBuC/jakVR
+lmuNOtmwN5OB8jHeYomv2PxnADnU6IVWP+wEaJnbqJcL9Yiqz1nSA+gd8zuXGd1
NpUm5zodFlM1Dp38JowrtLxm3kez9VffK+DplfeGxPERodyAaFiVXSKIJYkhgdGK
p07rbMppmLnve6pPMYjKWrDQ6oK8v2ESs6pA5pXcfi9Eu0M5vCZoH//bMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwseukFkWUw+Nza94GaqWHlvfgzMB8GA1UdIwQY
MBaAFL7dxbuiAM/RmyXc4TweLhoqGYinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnQzRnU2SUF6OUdiSmR6aFBCNHVHaW9aaUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iODNjYWEtOGRkMC00MzM3LWJmYzkt
Njg0NjJmYjQwNDk0LzEvdnQzRnU2SUF6OUdiSmR6aFBCNHVHaW9aaUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iODNjYWEtOGRkMC00MzM3LWJmYzktNjg0NjJmYjQwNDk0
LzEvdnQzRnU2SUF6OUdiSmR6aFBCNHVHaW9aaUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbPXDmQT
dYJwrzaoYaURfHwp0oeqEIxkbFooHgdyaZUok0mWx/FElyVqYqBxEsRx2d9eenQd
519BUDsnKecuQGSBtRFfiSnqxD2/jZ3eJrbjHrWS3gtpDiq2zKDoxZ5aavRcm4wO
c2YPy8i5uRnaJrnP5cuUXJzxl163CG7tKiZXvqU+av4ggCTUjCqV6NGOIEz5s2Rr
D4PztwxV9SXV4h/+ksMTQsatVqbWRNNhLYTli4o9rrOQdhCgHUNaSFgWKkEyULjP
WqiBIpUesCwKdqn5PdEFunAtl7BWiOa89KUHuASnW0xTZSb7TuUdDzALamhh130d
iioFh2hJyxqFTg==
-----END CERTIFICATE-----
Generated at Wed Sep 30 11:24:58 2026 by rpki-client