Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
File: vB5m76AFpt5TsdDJHzdVS99Gdr0.mft (raw, json)
Hash identifier: fFCXDBX5wWe67kg/3vwg1WXe+k1j1Uu7P2MhTXqUN60=
Subject key identifier: 53:C7:C6:07:53:EA:2B:16:2C:5F:62:2C:B9:7B:FC:C1:74:75:DB:BF
Authority key identifier: BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
Certificate issuer: /CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Certificate serial: 019D37894577F127040E270418A82A58377F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
Manifest number: 108F
Signing time: Sun 29 Mar 2026 03:00:36 +0000
Manifest this update: Sun 29 Mar 2026 03:00:36 +0000
Manifest next update: Mon 30 Mar 2026 03:00:36 +0000
Files and hashes: 1: R1-sQ-aIXEFJT-93CGHyULWdzGI.roa (hash: wTAnQ3p13dmuTH6bJb6Zb4Pwzwq21wLmg4ze6Go9HJA=)
2: vB5m76AFpt5TsdDJHzdVS99Gdr0.crl (hash: Q/IkwuGuAsHSh6W4GrCwjbhhaYGM7hbQoMrrw3aqr6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:45:77:f1:27:04:0e:27:04:18:a8:2a:58:37:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Validity
Not Before: Mar 29 03:00:36 2026 GMT
Not After : Mar 30 03:00:36 2026 GMT
Subject: CN=53c7c60753ea2b162c5f622cb97bfcc17475dbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:0c:01:28:c6:b5:42:8a:bd:af:4a:6d:fe:
03:d1:1c:43:b9:3c:e4:0d:21:a3:d6:a8:a8:9b:c6:
9e:7e:4e:65:ac:dc:2d:14:65:70:4a:66:5e:7a:c5:
bd:3d:70:b4:8e:d5:83:2a:a9:cd:67:83:ca:e8:7d:
db:39:05:61:a8:c8:47:2c:28:c2:bb:ce:cd:95:89:
f1:5c:e5:0b:dd:f6:89:64:ab:47:a3:1e:d3:e8:e6:
7c:9f:fe:c9:cb:6c:62:7b:fb:47:64:f6:f8:d0:ec:
52:18:5d:ee:a6:44:2e:dd:b0:8a:fd:46:5f:79:8a:
d8:a7:da:0a:29:ac:e8:e4:d6:68:25:73:60:1a:ab:
a9:5a:88:08:f4:62:1e:bf:55:ba:80:7d:86:ac:32:
58:e9:7d:8b:8e:5e:79:c1:f1:18:44:11:ea:1b:75:
89:58:18:fa:38:3b:ee:b5:10:ad:b4:6c:09:e4:45:
db:55:df:93:90:30:6e:76:a8:e4:5b:a1:ef:d1:f8:
f5:93:fb:49:1e:e9:db:97:da:4b:eb:40:d3:0a:d5:
b0:ed:d1:88:be:52:09:95:62:99:a6:3a:69:51:cf:
f4:67:9b:d6:cd:0a:36:3e:00:88:0f:4d:ca:e5:4f:
56:bc:d0:e1:ac:8e:7d:a6:4d:07:5f:69:4f:fc:84:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C7:C6:07:53:EA:2B:16:2C:5F:62:2C:B9:7B:FC:C1:74:75:DB:BF
X509v3 Authority Key Identifier:
keyid:BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c6:f6:8c:0e:00:98:2a:fc:64:18:cf:e1:07:c5:ba:c8:e7:
2e:f0:5b:85:a4:4a:9e:71:18:23:8a:da:56:1b:b0:1a:d6:ff:
a6:22:c2:2f:9d:60:80:df:44:2b:10:d8:87:41:5c:f0:dd:0a:
a2:f0:59:c6:60:87:40:1d:8f:0a:a6:79:46:5e:ab:3f:52:28:
2e:b5:ed:65:88:a4:6b:16:ed:18:c5:d2:ae:86:c7:b0:7f:2a:
f4:70:18:29:0a:20:18:80:fa:5c:9d:16:d6:fc:49:fa:99:1a:
a6:32:c6:69:42:d0:e6:2b:81:37:42:bf:2f:4d:22:d9:16:6e:
4d:90:6d:53:a5:80:e0:63:62:c9:97:db:16:ef:3a:dc:62:0d:
d4:72:ee:6a:8f:f7:a7:f0:21:e6:d6:71:9e:ba:dd:26:06:f7:
c4:87:86:f7:0e:e7:3a:81:49:d7:63:cf:e4:10:44:1f:5b:32:
e1:21:a2:cc:d9:c6:14:ae:83:30:f5:4d:8a:0d:f3:86:62:a8:
2f:9f:e9:1e:1d:75:79:a6:a7:09:18:cc:15:69:71:ea:cb:d1:
cc:b9:5b:f3:50:4a:f0:bb:32:bb:b9:03:7c:99:e6:54:8d:96:
d9:33:a1:0c:9d:d4:0f:97:07:81:e4:de:65:11:70:27:05:60:
c9:0a:40:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iUV38ScEDicEGKgqWDd/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMWU2NmVmYTAwNWE2ZGU1M2IxZDBjOTFmMzc1NTRiZGY0
Njc2YmQwHhcNMjYwMzI5MDMwMDM2WhcNMjYwMzMwMDMwMDM2WjAzMTEwLwYDVQQD
Eyg1M2M3YzYwNzUzZWEyYjE2MmM1ZjYyMmNiOTdiZmNjMTc0NzVkYmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcsMASjGtUKKva9Kbf4D0RxDuTzk
DSGj1qiom8aefk5lrNwtFGVwSmZeesW9PXC0jtWDKqnNZ4PK6H3bOQVhqMhHLCjC
u87NlYnxXOUL3faJZKtHox7T6OZ8n/7Jy2xie/tHZPb40OxSGF3upkQu3bCK/UZf
eYrYp9oKKazo5NZoJXNgGqupWogI9GIev1W6gH2GrDJY6X2Ljl55wfEYRBHqG3WJ
WBj6ODvutRCttGwJ5EXbVd+TkDBudqjkW6Hv0fj1k/tJHunbl9pL60DTCtWw7dGI
vlIJlWKZpjppUc/0Z5vWzQo2PgCID03K5U9WvNDhrI59pk0HX2lP/IS7NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPHxgdT6isWLF9iLLl7/MF0ddu/MB8GA1UdIwQY
MBaAFLweZu+gBabeU7HQyR83VUvfRna9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkI1bTc2QUZwdDVUc2RESkh6ZFZTOTlHZHIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iYjJiZGItNzQ3ZC00ODU1LTg5NDUt
N2Y5YTNlNDUyNTZlLzEvdkI1bTc2QUZwdDVUc2RESkh6ZFZTOTlHZHIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iYjJiZGItNzQ3ZC00ODU1LTg5NDUtN2Y5YTNlNDUyNTZl
LzEvdkI1bTc2QUZwdDVUc2RESkh6ZFZTOTlHZHIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8b2jA4A
mCr8ZBjP4QfFusjnLvBbhaRKnnEYI4raVhuwGtb/piLCL51ggN9EKxDYh0Fc8N0K
ovBZxmCHQB2PCqZ5Rl6rP1IoLrXtZYikaxbtGMXSrobHsH8q9HAYKQogGID6XJ0W
1vxJ+pkapjLGaULQ5iuBN0K/L00i2RZuTZBtU6WA4GNiyZfbFu863GIN1HLuao/3
p/Ah5tZxnrrdJgb3xIeG9w7nOoFJ12PP5BBEH1sy4SGizNnGFK6DMPVNig3zhmKo
L5/pHh11eaanCRjMFWlx6svRzLlb81BK8Lsyu7kDfJnmVI2W2TOhDJ3UD5cHgeTe
ZRFwJwVgyQpA9g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:56 2026 by rpki-client