Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
File: vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft (raw, json)
Hash identifier: xX9p69Rmvv99OHECXLvyfvwFVJHX16Rk7uTE5Kvm3JQ=
Subject key identifier: A7:A6:D6:2D:E1:E6:40:5D:2E:77:E4:9B:96:AC:B0:1E:F9:C9:08:54
Authority key identifier: BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
Certificate issuer: /CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Certificate serial: 019D382E022D04B1FAEF6723057BFFA21A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
Manifest number: 055D
Signing time: Sun 29 Mar 2026 06:00:32 +0000
Manifest this update: Sun 29 Mar 2026 06:00:32 +0000
Manifest next update: Mon 30 Mar 2026 06:00:32 +0000
Files and hashes: 1: rnLM_a8LAjwiWtEqOy7Mhls5gy0.roa (hash: jMUOUB5MPfYCum5RcFFu1kpq8F6mGqOp/XYY8NGS/KY=)
2: vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl (hash: H1Zfg6JITQc02wPuntAYnH6mSGTX+338TyFFeBoEpZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:02:2d:04:b1:fa:ef:67:23:05:7b:ff:a2:1a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Validity
Not Before: Mar 29 06:00:32 2026 GMT
Not After : Mar 30 06:00:32 2026 GMT
Subject: CN=a7a6d62de1e6405d2e77e49b96acb01ef9c90854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c1:73:0d:f8:34:da:79:49:f0:97:3d:ec:4e:
39:f8:83:57:20:ff:a5:c3:4c:98:5d:a8:f8:19:cc:
ec:1a:ea:17:18:d7:99:fb:90:9a:2e:07:f8:c5:3b:
b8:c7:7a:56:03:2a:cd:d0:13:15:83:a4:ef:b2:51:
d8:7b:88:04:1d:7a:ba:c1:4c:8d:2a:b6:a6:96:f9:
8e:d7:12:51:08:29:87:b3:f1:74:67:11:4d:8e:c6:
4c:f8:5c:29:f5:df:f3:27:d3:5d:d3:8f:0b:b0:20:
c5:04:1f:8c:be:8e:0f:fd:98:c1:c2:42:0c:8b:33:
01:2a:12:9d:83:65:14:e4:aa:f8:80:9b:ca:1c:ed:
8f:5d:66:71:5a:21:41:70:f8:72:3a:1f:ba:cd:5e:
ac:d1:23:12:84:78:33:a7:b7:c0:4e:3f:52:4b:14:
61:7f:42:67:00:85:59:6d:e1:e0:92:80:c9:06:46:
5a:87:59:74:c5:15:f3:80:5e:cf:78:70:69:5c:05:
20:a1:a3:a2:63:74:3e:fb:b1:a8:7b:ae:58:34:79:
4a:22:17:ec:ef:bb:8f:47:ee:1e:ca:5e:c7:36:15:
32:c2:e9:f8:b9:28:05:f0:62:b2:94:1e:35:b4:dd:
b1:2f:af:81:e4:6f:5e:5a:3b:8c:45:3c:12:7b:fa:
e1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A6:D6:2D:E1:E6:40:5D:2E:77:E4:9B:96:AC:B0:1E:F9:C9:08:54
X509v3 Authority Key Identifier:
keyid:BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ab:f1:11:e3:66:6c:ec:a8:1a:7a:01:92:b6:76:89:aa:25:
0a:2f:2f:3d:35:e2:dd:33:5d:6d:b0:f8:87:cf:98:ff:65:ef:
f2:f3:20:43:fa:92:7c:8b:84:11:be:4b:7f:77:17:70:62:63:
89:84:f2:ec:0f:29:ef:1b:c8:51:48:2a:a6:47:5e:cb:61:f5:
dd:56:85:e1:11:91:4c:e9:fc:b8:27:92:b9:d4:dd:fa:21:f9:
27:a7:ce:29:84:52:f7:c1:27:4a:51:9f:1a:5b:db:e4:70:dc:
5f:2b:7f:14:e6:c5:a7:8b:cc:2b:f2:9a:5e:d1:b3:92:1d:6d:
10:90:13:f9:21:2d:e7:af:24:b6:6f:6c:3f:82:37:3e:bb:2a:
79:ce:40:a0:07:62:4a:49:11:9e:a0:34:90:94:89:ef:2f:c4:
ce:a7:30:95:49:1c:2b:01:e2:9b:74:0b:0a:e6:7e:bc:67:b7:
08:51:db:53:9c:a5:bf:32:bc:81:e6:ca:69:c1:38:df:92:c1:
b9:1a:28:b1:0e:3e:e3:98:b9:bc:3e:8d:89:c1:7c:a3:d5:6b:
4a:91:56:93:a5:38:c1:eb:64:86:a3:69:2d:c5:c1:5f:69:f1:
a1:bc:e3:39:92:bf:9d:b3:20:5b:72:50:c8:04:51:e2:f2:b4:
c2:20:78:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LgItBLH672cjBXv/ohqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYjI0ZGY0YTdjOWFhMjEzMWQ4NTc1MDNiOTNkNjBmN2Zi
NTFiZDkwHhcNMjYwMzI5MDYwMDMyWhcNMjYwMzMwMDYwMDMyWjAzMTEwLwYDVQQD
EyhhN2E2ZDYyZGUxZTY0MDVkMmU3N2U0OWI5NmFjYjAxZWY5YzkwODU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sFzDfg02nlJ8Jc97E45+INXIP+l
w0yYXaj4GczsGuoXGNeZ+5CaLgf4xTu4x3pWAyrN0BMVg6TvslHYe4gEHXq6wUyN
KramlvmO1xJRCCmHs/F0ZxFNjsZM+Fwp9d/zJ9Nd048LsCDFBB+Mvo4P/ZjBwkIM
izMBKhKdg2UU5Kr4gJvKHO2PXWZxWiFBcPhyOh+6zV6s0SMShHgzp7fATj9SSxRh
f0JnAIVZbeHgkoDJBkZah1l0xRXzgF7PeHBpXAUgoaOiY3Q++7Goe65YNHlKIhfs
77uPR+4eyl7HNhUywun4uSgF8GKylB41tN2xL6+B5G9eWjuMRTwSe/rhoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKem1i3h5kBdLnfkm5assB75yQhUMB8GA1UdIwQY
MBaAFL2yTfSnyaohMdhXUDuT1g9/tRvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wMTAyYzctYjRlYS00YmFiLWI3NzAt
ZDMwYWViMWMyMGNhLzEvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wMTAyYzctYjRlYS00YmFiLWI3NzAtZDMwYWViMWMyMGNh
LzEvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqvxEeNm
bOyoGnoBkrZ2iaolCi8vPTXi3TNdbbD4h8+Y/2Xv8vMgQ/qSfIuEEb5Lf3cXcGJj
iYTy7A8p7xvIUUgqpkdey2H13VaF4RGRTOn8uCeSudTd+iH5J6fOKYRS98EnSlGf
Glvb5HDcXyt/FObFp4vMK/KaXtGzkh1tEJAT+SEt568ktm9sP4I3Prsqec5AoAdi
SkkRnqA0kJSJ7y/EzqcwlUkcKwHim3QLCuZ+vGe3CFHbU5ylvzK8gebKacE435LB
uRoosQ4+45i5vD6NicF8o9VrSpFWk6U4wetkhqNpLcXBX2nxobzjOZK/nbMgW3JQ
yARR4vK0wiB4Ag==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:00 2026 by rpki-client