Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
File: vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft (raw, json)
Hash identifier: IPGcJTbrI3ykWYywPvmVd59UcbfYfkVlr5Akd7rR/0k=
Subject key identifier: 5E:59:1C:A6:AD:B3:04:06:4D:E8:CD:DC:BC:C3:87:29:AF:E2:1F:82
Authority key identifier: BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF
Certificate issuer: /CN=bc55836ecd655313dea19716ff6b96bd0e6991af
Certificate serial: 019D38662F7F9DD7532FFEE250D83C0D3093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
Manifest number: 0978
Signing time: Sun 29 Mar 2026 07:01:53 +0000
Manifest this update: Sun 29 Mar 2026 07:01:53 +0000
Manifest next update: Mon 30 Mar 2026 07:01:53 +0000
Files and hashes: 1: vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl (hash: 1erwakVFqXBMNx3z2zDtKBulYBLXoIGs+5Y0NOadx9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2f:7f:9d:d7:53:2f:fe:e2:50:d8:3c:0d:30:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55836ecd655313dea19716ff6b96bd0e6991af
Validity
Not Before: Mar 29 07:01:53 2026 GMT
Not After : Mar 30 07:01:53 2026 GMT
Subject: CN=5e591ca6adb304064de8cddcbcc38729afe21f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:4b:f2:17:93:7a:f9:69:8c:1d:ec:e3:6a:
a6:51:a3:9b:4d:38:00:e0:b9:42:e3:25:9a:ed:68:
e7:b5:e3:0c:8d:36:66:b7:07:49:6a:bd:25:9d:9a:
6b:85:b5:5e:61:7b:60:c2:60:d4:f5:57:c7:d9:f0:
e1:b9:c0:34:cc:08:7a:8d:6d:53:34:59:bb:38:48:
ef:62:a9:9e:c4:3a:55:9b:8e:06:6e:72:12:4f:1d:
60:1d:e2:5d:18:f8:7f:78:b4:dd:4b:15:47:67:34:
49:4c:d1:4c:fa:37:ee:27:23:38:45:61:1a:f2:a9:
08:09:ad:b2:63:23:cb:77:b7:89:a4:7d:43:a7:c8:
fd:18:c4:e9:29:d0:09:65:8b:e8:17:41:a8:89:ed:
ab:56:eb:f1:93:6d:ab:40:e7:93:68:82:19:b3:4e:
84:01:a5:f1:21:75:46:fe:90:f1:f9:5e:2b:ce:04:
78:32:3a:be:51:21:56:a9:2f:e4:27:d2:01:f2:74:
5f:0c:72:8a:fa:2e:ab:a1:f9:d5:e4:27:94:3f:5c:
3d:45:96:54:23:49:a5:c8:10:0a:49:b9:f8:09:e8:
ef:a8:6d:3d:ab:60:7c:39:91:b2:3f:dc:4f:23:21:
37:e7:be:e1:ad:27:6f:8d:d8:f4:e2:57:19:ad:88:
a8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:59:1C:A6:AD:B3:04:06:4D:E8:CD:DC:BC:C3:87:29:AF:E2:1F:82
X509v3 Authority Key Identifier:
keyid:BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:65:f3:d4:73:9e:6c:46:78:54:44:60:2e:7d:11:61:f6:13:
c2:dc:c2:31:48:9d:08:99:eb:7d:6a:9d:e5:5e:00:64:79:19:
32:52:6f:10:34:4f:b5:69:d3:a7:9c:61:3e:f4:05:8c:45:38:
c0:27:d9:0c:45:bf:19:a0:ee:80:5f:50:87:7f:a7:8c:15:2a:
06:ef:b8:a4:e8:6b:70:14:34:33:84:90:5d:0c:23:cd:65:26:
13:29:bb:63:e7:5b:27:74:2a:23:31:f6:e0:9b:93:f0:79:1f:
af:ba:b8:f8:d1:cf:be:c0:4f:27:fa:5d:9d:72:7b:be:c9:bc:
93:0a:f9:cb:ad:00:9d:10:97:17:52:b8:17:92:2e:a3:22:50:
14:95:23:c7:cb:33:a6:17:c7:fc:bf:32:fb:dc:d2:f3:54:55:
7e:03:99:7e:1e:3d:3b:1f:e2:43:44:ff:b2:10:5b:5f:3b:72:
27:a0:fe:02:2f:49:3b:72:28:08:06:ed:ea:8e:95:7d:12:9e:
e8:92:8b:34:14:f8:d0:09:65:8e:ae:7e:ae:dc:6c:c3:82:0f:
82:3d:28:ca:b6:d1:03:2e:6a:ff:6e:6a:36:43:e6:24:35:18:
ee:5f:54:60:41:57:ca:3c:6d:da:d0:1f:6a:7b:42:25:29:de:
04:87:36:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zi9/nddTL/7iUNg8DTCTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNTU4MzZlY2Q2NTUzMTNkZWExOTcxNmZmNmI5NmJkMGU2
OTkxYWYwHhcNMjYwMzI5MDcwMTUzWhcNMjYwMzMwMDcwMTUzWjAzMTEwLwYDVQQD
Eyg1ZTU5MWNhNmFkYjMwNDA2NGRlOGNkZGNiY2MzODcyOWFmZTIxZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQpL8heTevlpjB3s42qmUaObTTgA
4LlC4yWa7WjnteMMjTZmtwdJar0lnZprhbVeYXtgwmDU9VfH2fDhucA0zAh6jW1T
NFm7OEjvYqmexDpVm44GbnISTx1gHeJdGPh/eLTdSxVHZzRJTNFM+jfuJyM4RWEa
8qkICa2yYyPLd7eJpH1Dp8j9GMTpKdAJZYvoF0Goie2rVuvxk22rQOeTaIIZs06E
AaXxIXVG/pDx+V4rzgR4Mjq+USFWqS/kJ9IB8nRfDHKK+i6rofnV5CeUP1w9RZZU
I0mlyBAKSbn4CejvqG09q2B8OZGyP9xPIyE3577hrSdvjdj04lcZrYio0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5ZHKatswQGTejN3LzDhymv4h+CMB8GA1UdIwQY
MBaAFLxVg27NZVMT3qGXFv9rlr0OaZGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkZXRGJzMWxVeFBlb1pjV18ydVd2UTVwa2E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kNzI1ZjgtOWQwYS00OWFkLWIzMmYt
ZjMwMmUyYWU5ZDNjLzEvdkZXRGJzMWxVeFBlb1pjV18ydVd2UTVwa2E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9kNzI1ZjgtOWQwYS00OWFkLWIzMmYtZjMwMmUyYWU5ZDNj
LzEvdkZXRGJzMWxVeFBlb1pjV18ydVd2UTVwa2E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2Xz1HOe
bEZ4VERgLn0RYfYTwtzCMUidCJnrfWqd5V4AZHkZMlJvEDRPtWnTp5xhPvQFjEU4
wCfZDEW/GaDugF9Qh3+njBUqBu+4pOhrcBQ0M4SQXQwjzWUmEym7Y+dbJ3QqIzH2
4JuT8Hkfr7q4+NHPvsBPJ/pdnXJ7vsm8kwr5y60AnRCXF1K4F5IuoyJQFJUjx8sz
phfH/L8y+9zS81RVfgOZfh49Ox/iQ0T/shBbXztyJ6D+Ai9JO3IoCAbt6o6VfRKe
6JKLNBT40Alljq5+rtxsw4IPgj0oyrbRAy5q/25qNkPmJDUY7l9UYEFXyjxt2tAf
antCJSneBIc2VQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:33 2026 by rpki-client