Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
File: vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json)
Hash identifier: zITH7pN3mQux9kq8k2uhGvD6TOcKhZtO24nnUtXgfkk=
Subject key identifier: 7A:AD:5F:0C:7D:8E:38:E3:AE:91:6D:DD:DA:0D:0D:71:01:E0:AA:9E
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Certificate issuer: /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial: 01A168D9D23D03BE60114151A83B9470BFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
Manifest number: 1AC3
Signing time: Fri 23 Oct 2026 13:01:07 +0000
Manifest this update: Fri 23 Oct 2026 13:01:07 +0000
Manifest next update: Sat 24 Oct 2026 13:01:07 +0000
Files and hashes: 1: WkGPkEWxN0_RrfuPNQgO0N4MQhs.roa (hash: 5wVXqrPSrqKVdR+urmJOtFFrRQbB86e2gIJHUQXpeMs=)
2: ZpN0yijt2wpkL7emNcxN7NHQv5U.roa (hash: 7AKRTkBuGx4aBG5hgRCQdpg0LTN298O1FTG+c5mwI1w=)
3: cWZaLUMWOmPgq02bbhCxvURTndw.roa (hash: IUClisGJXyKB6S1qDFcis+t1z82FqIpdlgwLkdscpmo=)
4: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: qsQtzMq3xkipsY3kQFWoAE6Pmcg4xLvJ4kNhh6lIXCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:d9:d2:3d:03:be:60:11:41:51:a8:3b:94:70:bf:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Validity
Not Before: Oct 23 13:01:07 2026 GMT
Not After : Oct 24 13:01:07 2026 GMT
Subject: CN=7aad5f0c7d8e38e3ae916dddda0d0d7101e0aa9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d7:98:79:87:12:8f:e1:5f:df:66:e5:5a:40:
ba:04:d8:32:42:06:50:64:f0:33:65:e3:af:d0:e4:
a1:77:db:60:9d:d3:90:09:4c:2d:fd:ee:9f:a6:33:
bd:63:78:e7:f6:6e:86:ab:c4:6b:9b:6e:b5:2d:0f:
dd:bb:a1:a6:72:3a:70:36:ec:d3:af:a8:8c:81:62:
05:93:74:bb:11:18:85:f6:a0:5e:1c:64:22:b7:2d:
d3:20:0d:7a:9e:14:d4:bc:10:f0:ff:a1:92:b0:a9:
53:5f:68:a2:e8:46:23:81:f2:90:71:a0:7e:42:54:
f3:a3:fe:ff:3e:e9:de:9f:94:fc:65:0e:9a:46:05:
9e:64:58:96:1a:61:ee:32:a1:de:4e:fe:6e:74:02:
45:6e:4d:b7:eb:44:de:27:bc:82:f0:41:28:92:9e:
7e:e1:ae:ca:e3:83:95:a1:e0:b3:c3:6e:ff:63:41:
81:05:b2:3c:7c:72:8d:1c:ff:ba:44:5e:13:3e:57:
09:c4:e9:b4:fb:d5:c2:2d:01:65:27:df:be:e4:32:
e2:e1:b4:3c:ab:18:39:36:7e:53:eb:06:bb:ee:f7:
48:61:9a:02:84:b7:1b:58:65:c7:cd:e5:a6:42:db:
66:52:03:06:6f:ca:6e:0f:93:2a:fa:b4:1e:3d:44:
fe:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AD:5F:0C:7D:8E:38:E3:AE:91:6D:DD:DA:0D:0D:71:01:E0:AA:9E
X509v3 Authority Key Identifier:
keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6f:94:0b:57:8a:38:6e:66:ae:61:19:25:95:b5:ff:9c:84:
2d:40:e5:c8:e8:44:87:37:c9:e5:e2:4f:21:aa:63:30:57:91:
96:ec:26:9c:5c:cc:2c:95:a3:18:72:3b:80:c2:8b:a2:de:c1:
41:97:26:18:17:1d:c4:ca:df:ce:69:2a:a9:19:cd:d5:64:f5:
de:bb:63:7f:70:1a:98:55:43:cc:06:ca:2d:bd:f0:ff:8d:be:
2f:12:c9:1e:3c:ba:8b:54:62:ac:ce:47:a5:10:a9:7a:e9:94:
c2:76:13:a8:12:c0:41:fa:ad:58:ee:2f:fc:3f:5a:df:36:f9:
d3:18:3e:7d:d5:ce:2c:fd:8e:0c:8c:b4:69:69:40:fa:43:3c:
f0:71:3f:92:c9:e7:f2:f7:88:6a:22:9d:cb:ac:1a:d4:48:50:
6e:14:77:75:fd:7f:0e:67:81:81:5c:c6:b7:cd:67:c3:94:a7:
5e:48:db:e6:af:ca:f6:e3:7a:39:8e:7b:86:41:79:4c:99:42:
7b:9d:c7:79:cd:aa:57:0c:c7:b3:b5:59:0a:ae:e7:1b:6c:f4:
01:49:c6:84:17:af:b5:7e:e6:8a:48:da:0f:79:91:b4:7c:28:
aa:fb:bd:90:73:7a:82:7b:e8:56:84:ca:79:ef:bb:eb:c4:71:
78:90:8e:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFo2dI9A75gEUFRqDuUcL/PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTU5MjFmNWJhNmJkMTQ3ZmY0MDAxMTdhYTk3Mzg2MzNm
MTU4N2QwHhcNMjYxMDIzMTMwMTA3WhcNMjYxMDI0MTMwMTA3WjAzMTEwLwYDVQQD
Eyg3YWFkNWYwYzdkOGUzOGUzYWU5MTZkZGRkYTBkMGQ3MTAxZTBhYTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNeYeYcSj+Ff32blWkC6BNgyQgZQ
ZPAzZeOv0OShd9tgndOQCUwt/e6fpjO9Y3jn9m6Gq8Rrm261LQ/du6GmcjpwNuzT
r6iMgWIFk3S7ERiF9qBeHGQity3TIA16nhTUvBDw/6GSsKlTX2ii6EYjgfKQcaB+
QlTzo/7/Punen5T8ZQ6aRgWeZFiWGmHuMqHeTv5udAJFbk2360TeJ7yC8EEokp5+
4a7K44OVoeCzw27/Y0GBBbI8fHKNHP+6RF4TPlcJxOm0+9XCLQFlJ9++5DLi4bQ8
qxg5Nn5T6wa77vdIYZoChLcbWGXHzeWmQttmUgMGb8puD5Mq+rQePUT+HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqtXwx9jjjjrpFt3doNDXEB4KqeMB8GA1UdIwQY
MBaAFLwVkh9bpr0Uf/QAEXqpc4Yz8Vh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAt
MDk5MGNlNzQ4MWU3LzEvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAtMDk5MGNlNzQ4MWU3
LzEvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2+UC1eK
OG5mrmEZJZW1/5yELUDlyOhEhzfJ5eJPIapjMFeRluwmnFzMLJWjGHI7gMKLot7B
QZcmGBcdxMrfzmkqqRnN1WT13rtjf3AamFVDzAbKLb3w/42+LxLJHjy6i1RirM5H
pRCpeumUwnYTqBLAQfqtWO4v/D9a3zb50xg+fdXOLP2ODIy0aWlA+kM88HE/ksnn
8veIaiKdy6wa1EhQbhR3df1/DmeBgVzGt81nw5SnXkjb5q/K9uN6OY57hkF5TJlC
e53Hec2qVwzHs7VZCq7nG2z0AUnGhBevtX7mikjaD3mRtHwoqvu9kHN6gnvoVoTK
ee+768RxeJCOhQ==
-----END CERTIFICATE-----
Generated at Fri Oct 23 15:39:30 2026 by rpki-client