Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier: CdM6jzCbwAOJDFPigfY2sFQ5DU/HAcADDuMeojIxnvs=
Subject key identifier: 86:33:7C:31:4C:40:28:D4:ED:E7:03:54:14:9D:0B:72:13:85:99:37
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 019DCDBDB49580EF0D9289694FDC89B4F3A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number: 1871
Signing time: Mon 27 Apr 2026 07:00:54 +0000
Manifest this update: Mon 27 Apr 2026 07:00:54 +0000
Manifest next update: Tue 28 Apr 2026 07:00:54 +0000
Files and hashes: 1: 7w9615nIUak6j9qKBSemLYUs4lE.roa (hash: UXmWoVxNa8W/M8yy0s9ag8l2H1J69QCKdRwDtmWIJD0=)
2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: UA+eJPtiZtlaz+XC4mDAMDSak+Vg0jEBICWNrYOdl9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:b4:95:80:ef:0d:92:89:69:4f:dc:89:b4:f3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: Apr 27 07:00:54 2026 GMT
Not After : Apr 28 07:00:54 2026 GMT
Subject: CN=86337c314c4028d4ede70354149d0b7213859937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:bc:4a:b3:d2:98:37:0e:ae:fb:71:da:df:
b6:38:0c:25:3b:ac:00:e4:bc:b8:9a:99:e5:70:7f:
4e:91:d5:36:7b:4b:d8:29:85:7a:b6:4d:a6:e4:97:
d9:9d:a1:c3:3c:2a:1d:9d:77:23:d4:e1:e2:b4:e5:
25:f5:be:24:e4:35:4f:f4:ad:7e:74:56:6f:89:fa:
4a:a8:cf:7f:ae:c1:9d:b8:47:af:73:ea:d5:01:b1:
53:61:89:97:63:74:83:8d:6e:d8:63:13:06:c9:91:
13:ab:78:1d:0d:ca:c1:4b:6e:2b:55:7d:f8:e0:d6:
5b:71:d8:a7:7e:b8:66:82:ce:85:ba:6c:84:6e:0b:
2d:00:0d:ac:55:dd:c8:52:1d:95:5c:92:71:35:f2:
bf:b0:da:50:85:e4:9f:bf:2e:1f:c1:b5:ca:c1:02:
3d:d5:6f:c3:e9:60:73:a3:2f:af:65:fb:cd:d4:36:
4d:21:35:60:83:91:cd:c8:7e:2b:0c:76:af:59:40:
36:1c:64:15:4d:d6:fc:38:99:65:66:6b:ee:08:7b:
1d:b6:db:a4:80:d8:5d:e2:3f:02:57:32:19:72:7b:
60:71:59:c5:1b:1d:a6:0c:6f:17:08:72:8a:13:9b:
47:a0:96:08:ba:e8:ac:14:99:f0:cc:8e:14:ea:7d:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:33:7C:31:4C:40:28:D4:ED:E7:03:54:14:9D:0B:72:13:85:99:37
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e3:5d:87:7f:28:c5:7a:82:fd:e2:0c:f2:96:59:55:a7:58:
f7:8b:ee:e3:c2:3d:02:8d:54:c1:9a:cc:46:64:2c:2c:3f:ba:
a2:8e:62:f4:e2:9b:97:f6:7b:fe:af:f3:6f:20:d9:28:d8:fc:
b3:45:78:f0:86:b8:63:94:9e:96:76:02:c7:67:7f:05:24:c7:
23:5e:e0:2b:8f:29:0b:8a:fb:3c:11:79:95:f7:07:91:b0:8a:
6c:0f:55:b2:f2:0f:bc:bd:b7:3a:c7:fb:79:f3:67:ba:ef:7d:
b0:47:c7:ff:6f:e3:e9:1b:ba:15:a4:23:cf:45:50:0a:15:eb:
49:02:3a:ae:57:76:18:ea:06:3f:ce:2e:6c:80:42:a8:5f:a0:
75:50:c3:18:b3:d9:f1:26:71:5f:e3:a2:84:b8:f5:28:4e:cd:
4d:82:f5:4c:4c:92:e4:96:3a:11:67:e6:35:fa:f8:1e:67:e6:
92:6b:bb:5c:4a:c0:c9:47:34:71:aa:cd:d3:d8:c9:8d:cf:9e:
e0:23:a4:2e:aa:1d:ab:45:56:c1:61:e7:31:4f:f3:b5:c1:4f:
91:a0:57:9a:52:c6:b7:0a:b8:8b:7d:c1:1c:8d:86:85:a5:d0:
19:e3:c1:19:a0:f5:68:d4:66:a7:3f:fd:9b:ee:7b:77:07:7a:
af:3a:2e:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NvbSVgO8NkolpT9yJtPOhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmYzZDk2ZThhYTE0MWQyMmM0MjQyYWVmZjc4YWY3MWVm
OGIyNDQwHhcNMjYwNDI3MDcwMDU0WhcNMjYwNDI4MDcwMDU0WjAzMTEwLwYDVQQD
Eyg4NjMzN2MzMTRjNDAyOGQ0ZWRlNzAzNTQxNDlkMGI3MjEzODU5OTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHW8SrPSmDcOrvtx2t+2OAwlO6wA
5Ly4mpnlcH9OkdU2e0vYKYV6tk2m5JfZnaHDPCodnXcj1OHitOUl9b4k5DVP9K1+
dFZvifpKqM9/rsGduEevc+rVAbFTYYmXY3SDjW7YYxMGyZETq3gdDcrBS24rVX34
4NZbcdinfrhmgs6FumyEbgstAA2sVd3IUh2VXJJxNfK/sNpQheSfvy4fwbXKwQI9
1W/D6WBzoy+vZfvN1DZNITVgg5HNyH4rDHavWUA2HGQVTdb8OJllZmvuCHsdttuk
gNhd4j8CVzIZcntgcVnFGx2mDG8XCHKKE5tHoJYIuuisFJnwzI4U6n3VUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYzfDFMQCjU7ecDVBSdC3IThZk3MB8GA1UdIwQY
MBaAFL3/PZboqhQdIsQkKu/3ivce+LJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjct
M2M3OTg3YzQyYzE2LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjctM2M3OTg3YzQyYzE2
LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVONdh38o
xXqC/eIM8pZZVadY94vu48I9Ao1UwZrMRmQsLD+6oo5i9OKbl/Z7/q/zbyDZKNj8
s0V48Ia4Y5SelnYCx2d/BSTHI17gK48pC4r7PBF5lfcHkbCKbA9VsvIPvL23Osf7
efNnuu99sEfH/2/j6Ru6FaQjz0VQChXrSQI6rld2GOoGP84ubIBCqF+gdVDDGLPZ
8SZxX+OihLj1KE7NTYL1TEyS5JY6EWfmNfr4Hmfmkmu7XErAyUc0carN09jJjc+e
4COkLqodq0VWwWHnMU/ztcFPkaBXmlLGtwq4i33BHI2GhaXQGePBGaD1aNRmpz/9
m+57dwd6rzouOw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:57:13 2026 by rpki-client