Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
File: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft (raw, json)
Hash identifier: WxHcScwNPj3uO/nZaAqfazh+hadm/ptTMWtlzfk9U40=
Subject key identifier: DD:14:3F:FA:3B:05:C9:29:10:84:20:55:58:4F:FC:06:56:A5:F1:CA
Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
Certificate issuer: /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Certificate serial: 019D3941A1D82DA2810052C85F3C6BB8D6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 11:01:35 +0000
Manifest this update: Sun 29 Mar 2026 11:01:35 +0000
Manifest next update: Mon 30 Mar 2026 11:01:35 +0000
Files and hashes: 1: J_AqbRRwbv9N6VWFHOb5S7w5E84.roa (hash: qnOkRGeYiVK7GUYOu7VW19sEbzCZQZR5A+RT6PLbwi0=)
2: nQN4cLKNegYOd-usKrALjYrvoiE.asa (hash: E5UzlVG/AYUsYDcEZ2bwekYc5ZlCnWcJiociB8390vE=)
3: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl (hash: ZlbmwKZCjpvm7yegDJebOwBNaLp8nP4r10eawGQVMss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:a1:d8:2d:a2:81:00:52:c8:5f:3c:6b:b8:d6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Validity
Not Before: Mar 29 11:01:35 2026 GMT
Not After : Mar 30 11:01:35 2026 GMT
Subject: CN=dd143ffa3b05c92910842055584ffc0656a5f1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f6:b3:ed:99:82:80:ab:e9:f6:fc:dc:c8:13:
02:4f:e5:56:33:a1:45:34:ea:b6:ef:fb:6f:8f:a0:
84:38:2f:67:25:b1:58:35:75:a0:01:25:5f:13:c2:
c4:26:71:18:a1:df:fd:f7:1f:1d:aa:df:e5:cc:07:
eb:c9:10:40:1b:4e:a7:0c:35:2e:93:58:0a:ac:c3:
7b:cc:3a:d9:06:7b:0b:98:e2:06:8d:68:29:a8:4b:
06:d9:f3:68:ee:80:2a:90:0e:17:5d:a4:d2:42:90:
ba:22:b0:69:b6:6b:c0:fb:2e:d2:e6:a8:7e:2e:5a:
c9:fd:f1:d9:4f:bd:28:98:e1:ab:31:5b:22:0c:ec:
d4:80:f9:71:70:78:08:ae:57:67:30:35:70:b0:9c:
75:a3:c2:ea:e1:a5:58:74:cc:88:38:16:6e:2d:ad:
fa:93:49:7a:9e:b2:fc:55:ba:8e:e1:64:0a:1a:a3:
b1:22:53:95:86:a7:72:d4:3e:f4:aa:0d:c0:72:50:
c5:f6:17:db:89:b3:7d:e6:81:88:a6:0d:d9:91:cb:
79:c2:b6:35:8b:74:82:9e:47:bb:07:1e:7b:79:78:
f1:b8:42:15:21:a5:03:3f:b5:f7:52:7b:89:05:ad:
3a:41:7c:b7:95:e5:d5:08:c5:b4:b1:d8:60:03:be:
29:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:14:3F:FA:3B:05:C9:29:10:84:20:55:58:4F:FC:06:56:A5:F1:CA
X509v3 Authority Key Identifier:
keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a3:7d:9f:3d:86:b3:64:c9:e0:71:16:af:ff:42:34:e1:9d:
31:f5:77:7c:a5:a2:24:20:be:49:f7:d0:eb:7f:15:75:0a:35:
bc:c0:fc:88:f1:30:dd:e3:22:5a:34:c1:0e:da:de:c9:ab:86:
85:87:90:c4:f7:b8:d5:59:66:41:c9:0a:9d:4b:98:37:3c:98:
cb:e8:e5:dd:26:4e:83:4d:b7:88:9e:94:0b:a5:40:45:67:30:
18:81:f9:a3:6d:e0:10:8a:36:b8:0c:4a:bb:a2:9e:da:bb:b8:
c1:c9:2f:3d:9e:1a:dd:51:e3:6f:0f:07:2b:45:0f:fd:6a:e8:
ab:8a:9e:b1:a2:41:38:96:32:df:6f:34:f3:2f:2c:bd:ad:5d:
09:77:df:8c:d3:8b:92:c3:e4:6a:eb:03:65:0a:36:6d:47:2e:
a7:e4:8e:3c:d0:b6:aa:ca:8f:b5:45:c0:5c:cd:30:7e:a7:56:
2e:f4:64:92:68:5e:95:22:11:8a:8a:fe:42:1d:16:a5:e2:dc:
12:7a:20:c3:d9:d4:2e:8f:76:bf:39:c6:90:73:ba:8f:b3:a5:
b1:e7:cc:ed:4f:f6:bb:b7:a5:f1:ad:1a:fb:a4:16:bb:d2:77:
ca:32:5a:2a:e7:2e:08:3e:78:3f:14:af:a8:4f:27:8d:48:a3:
8d:43:cc:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QaHYLaKBAFLIXzxruNb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjBlNjRiMTg4MzFiYzk4NTI3Y2JlMGUxMDY3YzFhOTVk
MTY4N2QwHhcNMjYwMzI5MTEwMTM1WhcNMjYwMzMwMTEwMTM1WjAzMTEwLwYDVQQD
EyhkZDE0M2ZmYTNiMDVjOTI5MTA4NDIwNTU1ODRmZmMwNjU2YTVmMWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/az7ZmCgKvp9vzcyBMCT+VWM6FF
NOq27/tvj6CEOC9nJbFYNXWgASVfE8LEJnEYod/99x8dqt/lzAfryRBAG06nDDUu
k1gKrMN7zDrZBnsLmOIGjWgpqEsG2fNo7oAqkA4XXaTSQpC6IrBptmvA+y7S5qh+
LlrJ/fHZT70omOGrMVsiDOzUgPlxcHgIrldnMDVwsJx1o8Lq4aVYdMyIOBZuLa36
k0l6nrL8VbqO4WQKGqOxIlOVhqdy1D70qg3AclDF9hfbibN95oGIpg3Zkct5wrY1
i3SCnke7Bx57eXjxuEIVIaUDP7X3UnuJBa06QXy3leXVCMW0sdhgA74p5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0UP/o7BckpEIQgVVhP/AZWpfHKMB8GA1UdIwQY
MBaAFL8g5ksYgxvJhSfL4OEGfBqV0Wh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlEbVN4aURHOG1GSjh2ZzRRWjhHcFhSYUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lYjM0MGYtODA1My00ZjVmLWEzYTUt
MjI5YjY0MDlmMmEwLzEvdnlEbVN4aURHOG1GSjh2ZzRRWjhHcFhSYUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9lYjM0MGYtODA1My00ZjVmLWEzYTUtMjI5YjY0MDlmMmEw
LzEvdnlEbVN4aURHOG1GSjh2ZzRRWjhHcFhSYUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6N9nz2G
s2TJ4HEWr/9CNOGdMfV3fKWiJCC+SffQ638VdQo1vMD8iPEw3eMiWjTBDtreyauG
hYeQxPe41VlmQckKnUuYNzyYy+jl3SZOg023iJ6UC6VARWcwGIH5o23gEIo2uAxK
u6Ke2ru4wckvPZ4a3VHjbw8HK0UP/Wroq4qesaJBOJYy32808y8sva1dCXffjNOL
ksPkausDZQo2bUcup+SOPNC2qsqPtUXAXM0wfqdWLvRkkmhelSIRior+Qh0WpeLc
Enogw9nULo92vznGkHO6j7OlsefM7U/2u7el8a0a+6QWu9J3yjJaKucuCD54PxSv
qE8njUijjUPMqg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:04:35 2026 by rpki-client