Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/467d54-5050-49db-9154-35928683f67b/1/vJlZuRyVadjFra0awLYTmZq-2ck.mft
File: vJlZuRyVadjFra0awLYTmZq-2ck.mft (raw, json)
Hash identifier: vS9EuMOlzw6HqAJ1ha0FEpqrA6vFvcp+3XHgGFamyQM=
Subject key identifier: 2A:43:F3:0C:21:14:87:E0:10:BC:10:B4:E8:F6:16:16:51:E3:E1:29
Authority key identifier: BC:99:59:B9:1C:95:69:D8:C5:AD:AD:1A:C0:B6:13:99:9A:BE:D9:C9
Certificate issuer: /CN=bc9959b91c9569d8c5adad1ac0b613999abed9c9
Certificate serial: 01A040BB8E8FA8769CF6293732A0B84EE8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJlZuRyVadjFra0awLYTmZq-2ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/467d54-5050-49db-9154-35928683f67b/1/vJlZuRyVadjFra0awLYTmZq-2ck.mft
Manifest number: 1E
Signing time: Thu 27 Aug 2026 01:00:28 +0000
Manifest this update: Thu 27 Aug 2026 01:00:28 +0000
Manifest next update: Fri 28 Aug 2026 01:00:28 +0000
Files and hashes: 1: 7o-LAygpPsH8kjhW0FQceQY9tWg.roa (hash: BBD6wZRfYwRF5hVYqF35L5OLVJ+7UEg6AKmLxvRoNiw=)
2: vJlZuRyVadjFra0awLYTmZq-2ck.crl (hash: g9ojlZlmUnby+SFquuRtxgg2c+k4J/rwURHqaDP8h9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/467d54-5050-49db-9154-35928683f67b/1/vJlZuRyVadjFra0awLYTmZq-2ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/467d54-5050-49db-9154-35928683f67b/1/vJlZuRyVadjFra0awLYTmZq-2ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJlZuRyVadjFra0awLYTmZq-2ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bb:8e:8f:a8:76:9c:f6:29:37:32:a0:b8:4e:e8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9959b91c9569d8c5adad1ac0b613999abed9c9
Validity
Not Before: Aug 27 01:00:28 2026 GMT
Not After : Aug 28 01:00:28 2026 GMT
Subject: CN=2a43f30c211487e010bc10b4e8f6161651e3e129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:17:0e:8e:62:a0:61:1d:37:c5:ae:8d:6e:68:
88:09:1d:f6:26:f2:b7:0c:5a:77:85:61:b5:d6:57:
5f:0f:29:a6:b4:d3:07:c2:a8:ca:15:70:d4:f4:a9:
eb:99:cb:31:78:90:d2:56:0b:8d:03:bf:fb:27:d0:
de:f3:92:49:d1:32:12:0c:3b:62:8a:2f:99:14:63:
94:36:71:de:df:1f:a9:a2:d2:83:f0:cc:e7:fe:52:
44:85:d3:08:14:5e:06:46:28:8e:02:c9:12:85:bd:
1b:42:be:9a:89:b5:fe:9d:4c:ef:8e:72:7b:fb:ca:
fb:9c:b2:dd:ee:84:00:93:56:1f:8a:e6:05:a6:23:
71:2e:7f:65:e3:6f:19:f8:c8:d7:f8:ca:c7:01:b3:
70:7a:e4:90:52:71:36:c5:b5:2a:4e:de:1b:7d:cf:
45:c5:ab:fa:2c:67:d8:72:2b:a3:19:e4:4e:a3:6a:
58:ff:8f:5b:4d:0b:46:6c:ac:7f:50:fd:07:21:fc:
f5:ba:0f:31:72:78:41:ac:2e:49:eb:56:29:f1:ac:
a3:5b:88:e6:dd:69:8f:ca:dd:b9:50:0a:1e:39:c0:
fd:7a:42:e6:7c:99:35:4a:ba:bc:66:f0:c6:10:5e:
65:8d:6e:89:79:f9:ea:22:8f:3a:8b:8b:01:70:84:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:43:F3:0C:21:14:87:E0:10:BC:10:B4:E8:F6:16:16:51:E3:E1:29
X509v3 Authority Key Identifier:
keyid:BC:99:59:B9:1C:95:69:D8:C5:AD:AD:1A:C0:B6:13:99:9A:BE:D9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJlZuRyVadjFra0awLYTmZq-2ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/467d54-5050-49db-9154-35928683f67b/1/vJlZuRyVadjFra0awLYTmZq-2ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/467d54-5050-49db-9154-35928683f67b/1/vJlZuRyVadjFra0awLYTmZq-2ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:74:3c:c6:78:e6:ed:7a:74:b8:3d:98:99:ff:ae:f8:70:87:
98:11:dc:47:5a:b7:d6:54:e3:c9:c9:42:10:32:72:28:94:d7:
e3:ed:fb:10:78:aa:2a:e0:3b:db:81:0c:68:75:95:71:b4:c7:
60:63:4f:6c:d2:87:6c:af:cb:c8:28:e0:11:67:c1:28:c6:c5:
f3:7b:31:9f:d2:2d:81:8e:71:5c:81:22:42:f2:56:9e:b4:fb:
5d:e9:85:be:a9:93:52:f7:fa:47:fd:b2:d4:be:0c:67:b6:7f:
83:19:32:7e:db:34:b8:2a:ea:97:1a:e6:54:ee:43:81:29:c4:
2f:c7:dc:42:26:7a:ba:45:45:43:6c:b3:c5:95:fc:08:32:1d:
24:10:25:f7:30:e8:70:52:a0:2c:2b:aa:52:89:c0:ac:8e:dc:
c9:59:61:fc:99:48:4f:a9:b1:7d:f9:b9:3d:f6:a5:a8:ed:a6:
df:3d:c3:84:f1:75:e1:de:a2:12:8e:05:12:a5:c5:dc:50:7e:
6a:76:2d:2d:ec:9a:76:24:e8:f0:f4:2a:47:9a:af:72:c8:f8:
7f:e6:b0:7b:8a:34:e5:40:78:3c:3a:b4:2e:5c:7e:29:5c:e9:
eb:10:3c:d4:f2:d0:c3:95:ea:30:05:fb:7d:a0:10:e0:e4:95:
aa:fd:cc:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAu46PqHac9ik3MqC4Tui2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOTk1OWI5MWM5NTY5ZDhjNWFkYWQxYWMwYjYxMzk5OWFi
ZWQ5YzkwHhcNMjYwODI3MDEwMDI4WhcNMjYwODI4MDEwMDI4WjAzMTEwLwYDVQQD
EygyYTQzZjMwYzIxMTQ4N2UwMTBiYzEwYjRlOGY2MTYxNjUxZTNlMTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hcOjmKgYR03xa6NbmiICR32JvK3
DFp3hWG11ldfDymmtNMHwqjKFXDU9KnrmcsxeJDSVguNA7/7J9De85JJ0TISDDti
ii+ZFGOUNnHe3x+potKD8Mzn/lJEhdMIFF4GRiiOAskShb0bQr6aibX+nUzvjnJ7
+8r7nLLd7oQAk1YfiuYFpiNxLn9l428Z+MjX+MrHAbNweuSQUnE2xbUqTt4bfc9F
xav6LGfYciujGeROo2pY/49bTQtGbKx/UP0HIfz1ug8xcnhBrC5J61Yp8ayjW4jm
3WmPyt25UAoeOcD9ekLmfJk1Srq8ZvDGEF5ljW6JefnqIo86i4sBcITgcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpD8wwhFIfgELwQtOj2FhZR4+EpMB8GA1UdIwQY
MBaAFLyZWbkclWnYxa2tGsC2E5mavtnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkpsWnVSeVZhZGpGcmEwYXdMWVRtWnEtMmNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80NjdkNTQtNTA1MC00OWRiLTkxNTQt
MzU5Mjg2ODNmNjdiLzEvdkpsWnVSeVZhZGpGcmEwYXdMWVRtWnEtMmNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy80NjdkNTQtNTA1MC00OWRiLTkxNTQtMzU5Mjg2ODNmNjdi
LzEvdkpsWnVSeVZhZGpGcmEwYXdMWVRtWnEtMmNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHQ8xnjm
7Xp0uD2Ymf+u+HCHmBHcR1q31lTjyclCEDJyKJTX4+37EHiqKuA724EMaHWVcbTH
YGNPbNKHbK/LyCjgEWfBKMbF83sxn9ItgY5xXIEiQvJWnrT7XemFvqmTUvf6R/2y
1L4MZ7Z/gxkyfts0uCrqlxrmVO5DgSnEL8fcQiZ6ukVFQ2yzxZX8CDIdJBAl9zDo
cFKgLCuqUonArI7cyVlh/JlIT6mxffm5PfalqO2m3z3DhPF14d6iEo4FEqXF3FB+
anYtLeyadiTo8PQqR5qvcsj4f+awe4o05UB4PDq0Llx+KVzp6xA81PLQw5XqMAX7
faAQ4OSVqv3Mig==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:31:45 2026 by rpki-client