Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
File: vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json)
Hash identifier: jjZiQoNHy+9HqYFhMszYdubeN73lNg5nhe7e9Y4OMFA=
Subject key identifier: 7A:42:2B:01:F7:D3:EF:41:36:B4:C2:90:D1:8C:0E:9A:78:AD:75:8C
Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
Certificate issuer: /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Certificate serial: 01A17C2942180E873FF375ED6CC72B91D679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
Manifest number: 1AC3
Signing time: Tue 27 Oct 2026 07:00:41 +0000
Manifest this update: Tue 27 Oct 2026 07:00:41 +0000
Manifest next update: Wed 28 Oct 2026 07:00:41 +0000
Files and hashes: 1: DnP6GcDKWF77PKsQ6HasKB8i_K0.roa (hash: 5rS9bW+Cd7FZhz3igcUd9hkUorfrY7/8Znu4PQmJGxs=)
2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: g1LDtv2i8v28HkOZfaxL1FlZyE+dzZRiCz8YRwq4pqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:42:18:0e:87:3f:f3:75:ed:6c:c7:2b:91:d6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Validity
Not Before: Oct 27 07:00:41 2026 GMT
Not After : Oct 28 07:00:41 2026 GMT
Subject: CN=7a422b01f7d3ef4136b4c290d18c0e9a78ad758c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:f1:3b:a0:18:c1:63:5f:28:2b:0a:27:4a:
4b:1c:67:9f:18:7d:16:88:a1:58:3c:ce:4a:4f:29:
87:68:c4:1d:af:d9:04:78:cc:4e:aa:d3:88:c1:85:
b3:89:17:df:92:23:09:49:33:8c:ec:f5:17:97:71:
0e:7c:e9:f0:31:6c:7b:f0:b8:d5:16:18:ce:6a:27:
cb:20:a3:de:78:6e:cd:44:4f:76:98:4d:06:71:da:
c0:e0:59:2c:8d:49:c7:ef:be:24:0f:71:1c:06:40:
ce:9b:ef:cf:b0:db:be:c8:71:96:f0:9d:a1:34:62:
a4:84:36:0d:39:5b:6d:dc:f8:ce:14:eb:ad:ee:f7:
19:07:2e:5e:28:23:73:1d:1e:42:5d:b6:af:61:9b:
83:fa:2e:c1:c4:7a:5b:b8:94:b9:25:ce:65:68:0a:
f3:c9:1f:c3:b0:e4:84:ae:f2:f3:f4:e0:40:35:11:
fe:ad:7f:e0:91:0e:e7:ba:f3:96:38:47:c5:70:f8:
4b:d7:8b:b4:76:59:2e:e4:ff:ce:b8:58:f9:f5:22:
86:9a:27:3f:4c:8f:4e:47:e2:77:d4:c8:e4:9a:8d:
a4:f9:57:4d:6c:53:11:f4:e5:a5:de:b3:e8:2e:0d:
a5:21:15:7a:cb:0e:ef:bc:36:1b:93:f7:16:17:8d:
e9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:42:2B:01:F7:D3:EF:41:36:B4:C2:90:D1:8C:0E:9A:78:AD:75:8C
X509v3 Authority Key Identifier:
keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:54:f4:9d:7d:14:89:24:20:80:f9:83:86:b2:e3:a1:ab:7e:
29:cd:ae:9f:44:1a:fc:f5:ca:66:45:55:a9:03:04:e1:6a:66:
ca:6b:a8:7e:c2:21:b5:6a:5d:38:5a:65:59:a1:26:36:d0:89:
56:93:50:1e:31:58:93:dd:2e:f3:94:e1:a1:18:45:a3:0a:9c:
3f:05:9a:6e:8e:63:b4:b9:89:c8:b6:d7:33:5c:27:9a:05:23:
a3:90:6a:5f:ae:bb:7e:ac:01:c4:34:ae:23:b4:2a:1b:b3:73:
d7:ec:0d:9a:e7:47:8a:0a:e9:26:36:e2:c2:ed:2d:3b:3c:3b:
e4:d2:25:e5:96:00:9a:60:06:a3:1c:09:27:a6:a4:31:b0:24:
ae:1b:70:9a:ca:74:b8:0d:5c:a4:9e:00:18:fa:17:f1:ae:94:
a2:5a:62:79:8f:e1:61:44:cc:fd:1a:cc:1a:48:54:63:1a:19:
7f:8e:b7:2d:c7:21:f4:e6:7a:bb:77:3c:1f:dd:98:ca:b6:50:
2d:60:23:a7:22:e2:c0:d0:28:d9:7c:5c:60:97:03:3f:37:36:
31:b6:c6:36:6b:a8:49:0e:be:1a:5d:b4:d3:3e:60:44:ad:2b:
f1:ec:6f:26:a4:60:e1:3d:5d:15:1c:5e:07:85:46:88:09:96:
2c:aa:33:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8KUIYDoc/83XtbMcrkdZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNmQyZWQ3Nzk0ZDMyMTdjZmFhZmUxY2FkNTNmNzU1Yjgy
Y2UzYTkwHhcNMjYxMDI3MDcwMDQxWhcNMjYxMDI4MDcwMDQxWjAzMTEwLwYDVQQD
Eyg3YTQyMmIwMWY3ZDNlZjQxMzZiNGMyOTBkMThjMGU5YTc4YWQ3NThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE7xO6AYwWNfKCsKJ0pLHGefGH0W
iKFYPM5KTymHaMQdr9kEeMxOqtOIwYWziRffkiMJSTOM7PUXl3EOfOnwMWx78LjV
FhjOaifLIKPeeG7NRE92mE0GcdrA4FksjUnH774kD3EcBkDOm+/PsNu+yHGW8J2h
NGKkhDYNOVtt3PjOFOut7vcZBy5eKCNzHR5CXbavYZuD+i7BxHpbuJS5Jc5laArz
yR/DsOSErvLz9OBANRH+rX/gkQ7nuvOWOEfFcPhL14u0dlku5P/OuFj59SKGmic/
TI9OR+J31Mjkmo2k+VdNbFMR9OWl3rPoLg2lIRV6yw7vvDYbk/cWF43plwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpCKwH30+9BNrTCkNGMDpp4rXWMMB8GA1UdIwQY
MBaAFLxtLtd5TTIXz6r+HK1T91W4LOOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZDI5NDQtMWVkNi00ZmNkLThjNWMt
NzdiNGJiZTM1YTllLzEvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83ZDI5NDQtMWVkNi00ZmNkLThjNWMtNzdiNGJiZTM1YTll
LzEvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1T0nX0U
iSQggPmDhrLjoat+Kc2un0Qa/PXKZkVVqQME4WpmymuofsIhtWpdOFplWaEmNtCJ
VpNQHjFYk90u85ThoRhFowqcPwWabo5jtLmJyLbXM1wnmgUjo5BqX667fqwBxDSu
I7QqG7Nz1+wNmudHigrpJjbiwu0tOzw75NIl5ZYAmmAGoxwJJ6akMbAkrhtwmsp0
uA1cpJ4AGPoX8a6UolpieY/hYUTM/RrMGkhUYxoZf463Lcch9OZ6u3c8H92YyrZQ
LWAjpyLiwNAo2XxcYJcDPzc2MbbGNmuoSQ6+Gl200z5gRK0r8exvJqRg4T1dFRxe
B4VGiAmWLKozyA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 11:18:53 2026 by rpki-client