Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: kGTyNKCPUMEU81RToGercB/BOc32sUIJ6xLkgrwHCi8=
Subject key identifier: 60:E3:D1:5C:27:63:AB:D3:02:2B:BE:9D:5D:DC:2F:7D:2F:EA:05:EC
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 01A17DE11193F9B24363C7834D0A4B7FAA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 1AC9
Signing time: Tue 27 Oct 2026 15:01:04 +0000
Manifest this update: Tue 27 Oct 2026 15:01:04 +0000
Manifest next update: Wed 28 Oct 2026 15:01:04 +0000
Files and hashes: 1: 00NnGOjb0Kliq8h03PUkoF2V-mQ.roa (hash: VSJr4YxEOTSjkg/Ic9pjW8DLPur6HW+mqH3Z3+8+mfg=)
2: 7b8ozyWTjDv0dhZ7ua-y_cjPuyI.roa (hash: 38AuHkgBMFf7/nuVWCNssWlQtSQh16b1R73OJQ2+6XU=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: 5dxfoONmhXMav+sVs4UwCtLby+i8Z761ZEkCfevT614=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:11:93:f9:b2:43:63:c7:83:4d:0a:4b:7f:aa:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Oct 27 15:01:04 2026 GMT
Not After : Oct 28 15:01:04 2026 GMT
Subject: CN=60e3d15c2763abd3022bbe9d5ddc2f7d2fea05ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ae:6d:3a:c5:9f:d9:99:78:b3:a4:af:8b:69:
6f:72:5e:8e:87:75:3a:13:d8:3e:a0:d8:9b:87:6d:
85:75:f5:eb:24:b0:de:66:93:66:3f:d0:e5:03:96:
6e:7a:2d:b7:60:72:05:94:97:fd:b6:3e:ae:d4:cf:
61:b3:3b:a8:e7:0f:10:61:67:aa:01:55:0a:e2:66:
b0:f6:2c:d7:3e:27:70:70:a5:e3:32:d8:a1:49:d1:
c1:66:37:b1:ae:de:6c:af:1c:cc:97:4f:f2:2c:78:
05:37:ce:99:03:da:26:2b:5d:5c:bb:0c:03:fa:a2:
fa:d8:88:df:d4:d3:42:8b:98:1a:c0:dc:1a:f5:31:
3e:80:14:97:c5:ee:a2:7e:cb:65:73:44:ce:c3:71:
40:41:a8:fe:bd:04:17:3e:c6:27:5b:ac:96:5a:be:
0a:c8:0c:a0:43:e0:0a:6c:f2:66:aa:ec:e7:76:0d:
22:03:e7:3d:0c:65:58:8b:b3:cd:d1:83:54:ff:c7:
1a:fa:24:26:84:66:0b:43:e9:1a:73:94:56:9e:4f:
83:94:3a:3b:a0:af:9d:a9:f8:dd:6a:6d:20:8a:36:
2c:b3:1a:f8:35:f8:31:21:41:79:ff:60:a9:13:36:
df:b0:51:89:27:b8:af:8d:8d:1c:d2:1e:ab:6e:44:
46:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E3:D1:5C:27:63:AB:D3:02:2B:BE:9D:5D:DC:2F:7D:2F:EA:05:EC
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:48:cf:e0:3d:fd:be:8e:28:fa:02:50:6a:f0:f2:a8:50:fc:
06:12:75:67:81:8a:e6:09:9b:ca:f1:74:83:ea:3e:4a:4c:d1:
0f:56:00:b9:82:30:c3:f6:11:cf:ac:d6:40:4d:11:5a:12:3a:
41:84:ac:2c:1c:89:6e:cb:14:b7:25:e4:c5:5f:ce:e9:39:6a:
1d:a1:fd:d1:5a:a5:a7:36:8f:18:a5:6a:c8:02:fd:2d:6f:ee:
ad:aa:18:8b:7e:ab:bd:aa:d5:74:f3:d9:2c:80:70:ee:75:85:
c5:e9:34:b3:d0:b7:48:fb:1f:d9:65:39:27:aa:53:95:fe:2a:
7b:0d:ad:f5:0a:cc:cf:df:a2:54:36:c5:97:6d:62:a4:34:8a:
02:05:7f:5b:c6:27:e2:d1:b0:a6:be:0b:eb:a5:22:84:2f:7e:
55:59:ed:32:e8:71:2d:0e:b2:d0:f4:2a:9e:76:a0:5c:b7:80:
18:f8:ce:03:f0:f5:83:78:be:b1:58:b2:d1:80:9b:10:33:0d:
fc:48:75:6c:50:98:17:4c:ea:12:3f:46:d8:e5:ef:c0:aa:f1:
63:6a:0f:21:54:24:cf:ff:a1:4a:10:63:ba:cc:24:57:3b:10:
a7:18:c5:7c:c2:4b:67:d8:36:0d:02:20:39:61:07:31:75:ee:
ca:b6:d5:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF94RGT+bJDY8eDTQpLf6onMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNzQxMGY0ZTYyYzc3NzJjNzhkNTc1MGIyMWZjMjE0MzM5
ZTk0YTIwHhcNMjYxMDI3MTUwMTA0WhcNMjYxMDI4MTUwMTA0WjAzMTEwLwYDVQQD
Eyg2MGUzZDE1YzI3NjNhYmQzMDIyYmJlOWQ1ZGRjMmY3ZDJmZWEwNWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK5tOsWf2Zl4s6Svi2lvcl6Oh3U6
E9g+oNibh22FdfXrJLDeZpNmP9DlA5Zuei23YHIFlJf9tj6u1M9hszuo5w8QYWeq
AVUK4maw9izXPidwcKXjMtihSdHBZjexrt5srxzMl0/yLHgFN86ZA9omK11cuwwD
+qL62Ijf1NNCi5gawNwa9TE+gBSXxe6ifstlc0TOw3FAQaj+vQQXPsYnW6yWWr4K
yAygQ+AKbPJmquzndg0iA+c9DGVYi7PN0YNU/8ca+iQmhGYLQ+kac5RWnk+DlDo7
oK+dqfjdam0gijYssxr4NfgxIUF5/2CpEzbfsFGJJ7ivjY0c0h6rbkRGBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDj0VwnY6vTAiu+nV3cL30v6gXsMB8GA1UdIwQY
MBaAFL10EPTmLHdyx41XULIfwhQznpSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMt
MjY4NDhmZmVlNzY1LzEvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMtMjY4NDhmZmVlNzY1
LzEvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEjP4D39
vo4o+gJQavDyqFD8BhJ1Z4GK5gmbyvF0g+o+SkzRD1YAuYIww/YRz6zWQE0RWhI6
QYSsLByJbssUtyXkxV/O6TlqHaH90VqlpzaPGKVqyAL9LW/uraoYi36rvarVdPPZ
LIBw7nWFxek0s9C3SPsf2WU5J6pTlf4qew2t9QrMz9+iVDbFl21ipDSKAgV/W8Yn
4tGwpr4L66UihC9+VVntMuhxLQ6y0PQqnnagXLeAGPjOA/D1g3i+sViy0YCbEDMN
/Eh1bFCYF0zqEj9G2OXvwKrxY2oPIVQkz/+hShBjuswkVzsQpxjFfMJLZ9g2DQIg
OWEHMXXuyrbVHg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:27:48 2026 by rpki-client