
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier: lIdEhgZmoO55kb9kDjQEbthb12VBRr5mZkcJBcj/sSM=
Subject key identifier: FE:A5:E7:51:A5:07:2B:55:54:F2:20:CD:9A:EC:56:8B:D4:81:4C:48
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial: 01A18299452EE235D058192E284B591CF02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number: 109B
Signing time: Wed 28 Oct 2026 13:00:45 +0000
Manifest this update: Wed 28 Oct 2026 13:00:45 +0000
Manifest next update: Thu 29 Oct 2026 13:00:45 +0000
Files and hashes: 1: NMgthEWSDkhf_cRJefWOwwwKa-w.roa (hash: VQXO+94YOu0/0F/wMTO4bq00aYkrqkoxk+yxuAK1KCo=)
2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: 6OZ98DxSYvNExuJ1EdnRZLIs3saSrRGTo9jjR9tfkCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:45:2e:e2:35:d0:58:19:2e:28:4b:59:1c:f0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Validity
Not Before: Oct 28 13:00:45 2026 GMT
Not After : Oct 29 13:00:45 2026 GMT
Subject: CN=fea5e751a5072b5554f220cd9aec568bd4814c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:90:9f:31:d7:40:5d:bf:9d:2b:1a:f2:33:
94:fd:e3:ce:3a:e3:e0:de:83:d9:6c:c5:48:3c:c0:
00:f9:a1:92:94:bb:ba:ce:75:b3:d6:97:91:31:fc:
b2:cd:84:0f:37:90:49:f3:8f:9a:f5:66:54:42:56:
ad:ea:d3:7f:12:78:e6:12:28:86:77:56:d9:93:37:
64:a0:2d:b0:3e:09:a4:be:71:6f:11:42:46:b3:9e:
5d:5f:35:91:55:84:9e:af:4f:45:4a:bc:b1:19:dd:
2c:df:58:3f:3f:6a:92:7e:74:f8:74:a1:fe:39:2d:
d8:73:b6:ea:87:58:58:24:78:c2:7f:98:b3:d5:0d:
f7:e2:38:b4:53:fc:c0:f9:4f:e8:7f:97:1d:b2:39:
26:36:69:f8:ad:58:a9:98:7e:d1:20:8e:d1:46:bb:
a5:05:97:01:10:cc:a9:c0:80:3e:d3:77:c3:5b:17:
20:47:0e:e5:f2:f2:70:fb:71:29:70:d1:ed:83:1c:
fa:97:e6:43:5a:8b:2c:08:32:26:35:b4:35:81:85:
da:53:ab:a9:e6:be:8e:36:a6:3e:70:61:48:83:7d:
0f:ce:1d:e9:c5:8a:38:85:8e:a9:ae:3e:f8:5d:0a:
a9:3f:0e:b3:26:7c:e5:95:39:ae:54:52:8c:88:b1:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A5:E7:51:A5:07:2B:55:54:F2:20:CD:9A:EC:56:8B:D4:81:4C:48
X509v3 Authority Key Identifier:
keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:90:78:70:b9:1f:ff:c2:d3:ef:1b:4c:3c:f0:e6:23:b4:e0:
3d:57:3d:80:5d:ea:6e:1a:56:28:01:8e:cd:13:4f:2c:ad:28:
42:ba:e6:8b:11:6a:2e:c2:17:cb:2f:0c:38:de:ec:c3:a0:52:
3d:fe:49:c9:e3:e3:60:6b:d4:6c:b9:35:4f:c4:f1:f1:5e:ff:
ca:a0:97:37:87:43:06:75:54:e0:96:a5:d3:27:e3:3f:51:05:
e0:07:92:3c:6c:a4:ea:c7:16:4e:71:b7:15:24:cd:3a:ce:49:
3e:d9:07:61:c7:fb:8a:31:7e:fd:9b:00:7b:0a:7f:04:d8:d9:
e6:4d:3f:03:f3:d6:0b:6d:70:1e:85:c5:6e:ea:fd:f2:8d:98:
c3:57:24:26:6e:6e:b0:37:17:81:f6:43:55:36:a2:42:fa:93:
c0:63:9d:1a:4b:13:e2:c6:70:c7:59:54:97:d4:ac:58:07:92:
20:2a:f5:5b:cc:8a:30:ae:27:3c:21:41:b8:6d:21:c9:50:06:
d1:c0:23:af:c2:da:c0:91:af:6f:61:19:ab:76:2f:c4:9f:2d:
a5:78:64:59:ce:2a:d6:de:e8:fc:69:eb:30:7e:c0:d4:75:eb:
e4:bf:84:00:ad:ba:c9:17:95:9d:e2:a2:42:f2:d7:ae:86:27:
3c:b4:31:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCmUUu4jXQWBkuKEtZHPAqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOGIxNWMyMzdmMzRjNWM1YzUzNDRiNDA3OWViYjNhNTg5
ZDAxNDgwHhcNMjYxMDI4MTMwMDQ1WhcNMjYxMDI5MTMwMDQ1WjAzMTEwLwYDVQQD
EyhmZWE1ZTc1MWE1MDcyYjU1NTRmMjIwY2Q5YWVjNTY4YmQ0ODE0YzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMOQnzHXQF2/nSsa8jOU/ePOOuPg
3oPZbMVIPMAA+aGSlLu6znWz1peRMfyyzYQPN5BJ84+a9WZUQlat6tN/EnjmEiiG
d1bZkzdkoC2wPgmkvnFvEUJGs55dXzWRVYSer09FSryxGd0s31g/P2qSfnT4dKH+
OS3Yc7bqh1hYJHjCf5iz1Q334ji0U/zA+U/of5cdsjkmNmn4rVipmH7RII7RRrul
BZcBEMypwIA+03fDWxcgRw7l8vJw+3EpcNHtgxz6l+ZDWossCDImNbQ1gYXaU6up
5r6ONqY+cGFIg30Pzh3pxYo4hY6prj74XQqpPw6zJnzllTmuVFKMiLGHOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6l51GlBytVVPIgzZrsVovUgUxIMB8GA1UdIwQY
MBaAFL6LFcI380xcXFNEtAeeuzpYnQFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQt
MzFkZTE3NjlmZDhhLzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQtMzFkZTE3NjlmZDhh
LzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJB4cLkf
/8LT7xtMPPDmI7TgPVc9gF3qbhpWKAGOzRNPLK0oQrrmixFqLsIXyy8MON7sw6BS
Pf5JyePjYGvUbLk1T8Tx8V7/yqCXN4dDBnVU4Jal0yfjP1EF4AeSPGyk6scWTnG3
FSTNOs5JPtkHYcf7ijF+/ZsAewp/BNjZ5k0/A/PWC21wHoXFbur98o2Yw1ckJm5u
sDcXgfZDVTaiQvqTwGOdGksT4sZwx1lUl9SsWAeSICr1W8yKMK4nPCFBuG0hyVAG
0cAjr8LawJGvb2EZq3YvxJ8tpXhkWc4q1t7o/GnrMH7A1HXr5L+EAK26yReVneKi
QvLXroYnPLQxQg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 16:34:09 2026 by rpki-client