Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
File: vddoJJ1zZYBx-TRWA5OaudYgw1s.mft (raw, json)
Hash identifier: A9Hqv8/Gnhm+tdgobMi+Zm2U9emySAcpMpK9armluvg=
Subject key identifier: 12:81:96:DE:98:90:02:64:27:29:4B:DC:20:E7:D2:0A:B9:ED:D1:8E
Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b
Certificate serial: 01A08AFAAF3A9E75D06F1DDEA7E3E1E754F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
Manifest number: 0322
Signing time: Thu 10 Sep 2026 11:01:19 +0000
Manifest this update: Thu 10 Sep 2026 11:01:19 +0000
Manifest next update: Fri 11 Sep 2026 11:01:19 +0000
Files and hashes: 1: PDxQWyYqgaGOkX5GZzt20B-Uems.roa (hash: B+Ao0KhpwV0cvFRAJ4KyvfBL5J8+ktllkURKL/vgcAg=)
2: vddoJJ1zZYBx-TRWA5OaudYgw1s.crl (hash: XMYexCu49Jf7NIAX/gwA5ehottGLtLfujSIRNNfTQN4=)
3: yFX62ci1qBUDucLwJ8wtZh6slII.roa (hash: jSh0LUqy7JqqicLthv+W+VrwTZt3JtqwoMS9ylaeVMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:af:3a:9e:75:d0:6f:1d:de:a7:e3:e1:e7:54:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b
Validity
Not Before: Sep 10 11:01:19 2026 GMT
Not After : Sep 11 11:01:19 2026 GMT
Subject: CN=128196de9890026427294bdc20e7d20ab9edd18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7f:79:b5:78:da:e5:57:70:a5:ca:1a:cd:b0:
12:c6:76:5e:f9:86:40:2b:dd:42:05:c4:7a:09:46:
4b:c3:4d:5e:bc:47:be:28:0b:59:89:2a:56:3e:7f:
77:f1:e2:14:c2:71:58:5d:f3:31:cb:64:e4:5e:7e:
ad:df:f8:71:1d:a2:7f:47:fe:2e:6c:ff:72:e4:0a:
b8:84:a1:16:a9:85:b9:3a:43:c0:81:91:39:79:70:
4d:83:24:80:ff:78:b6:41:7c:dd:ee:47:c4:3b:34:
3a:f0:f2:0a:1f:e2:9b:94:8a:7f:7e:96:b3:d5:92:
30:33:48:64:04:67:29:97:2d:57:ed:d9:04:ec:0e:
b8:26:d5:0a:0c:d0:ed:48:48:56:e3:9f:ae:2e:37:
07:09:15:02:35:da:08:27:a6:56:17:1c:50:08:81:
72:b7:9c:70:47:9a:47:ca:14:fc:bf:6a:30:d2:aa:
68:4f:36:75:ce:82:6e:c9:1a:e5:07:fd:3a:cb:c0:
1f:55:65:7e:f4:20:a3:e8:aa:e5:fa:56:14:d8:4c:
63:0c:5e:0a:5e:b6:d3:70:fd:20:6d:2e:ca:27:14:
c4:68:8f:03:74:5e:22:0a:b7:59:af:1a:03:f3:ed:
c2:ca:d8:3c:f2:e1:dc:58:a4:56:e0:32:ce:29:10:
99:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:81:96:DE:98:90:02:64:27:29:4B:DC:20:E7:D2:0A:B9:ED:D1:8E
X509v3 Authority Key Identifier:
keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:43:4b:22:79:97:70:a9:8b:26:0b:cb:c2:3c:14:1f:3e:a3:
09:4d:ad:93:08:f5:e7:9f:95:29:88:28:33:e0:12:c4:84:75:
ff:65:b7:65:fd:68:73:6e:fc:d7:67:7b:b1:1b:7c:da:b0:9b:
e4:7d:69:df:68:64:00:f2:44:39:c2:a0:c6:e9:d6:5d:cc:ec:
ed:26:5b:4d:fb:f1:62:b7:0d:a6:89:2e:ec:c1:e6:3b:04:1c:
b1:d8:fa:c4:82:45:27:78:22:c1:f3:0d:f4:e1:0a:19:cb:e2:
71:6f:70:0f:05:e5:55:71:7d:91:5e:e4:67:8c:7c:d3:08:43:
18:75:f1:96:97:f2:f8:06:d0:eb:47:ba:f3:0b:3c:04:21:a8:
6a:9b:f3:bc:52:48:96:cb:e7:6b:8e:ee:31:99:c4:07:6d:77:
8f:48:32:72:1a:93:24:a7:d7:b8:7c:0c:4f:f5:88:3f:30:9c:
06:e1:cc:18:7b:8b:5c:84:fa:a9:64:6e:26:03:32:67:a1:37:
32:c0:15:99:e5:f7:76:e1:80:a4:e5:14:a6:94:af:48:05:ea:
26:59:6a:d1:e8:6a:e6:a5:ef:c8:14:3e:6d:2c:35:c3:ef:db:
bf:bc:83:4c:76:07:cd:91:2f:2c:09:e5:9d:a2:c0:a9:9b:63:
61:16:61:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+q86nnXQbx3ep+Ph51TxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDc2ODI0OWQ3MzY1ODA3MWY5MzQ1NjAzOTM5YWI5ZDYy
MGMzNWIwHhcNMjYwOTEwMTEwMTE5WhcNMjYwOTExMTEwMTE5WjAzMTEwLwYDVQQD
EygxMjgxOTZkZTk4OTAwMjY0MjcyOTRiZGMyMGU3ZDIwYWI5ZWRkMThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X95tXja5VdwpcoazbASxnZe+YZA
K91CBcR6CUZLw01evEe+KAtZiSpWPn938eIUwnFYXfMxy2TkXn6t3/hxHaJ/R/4u
bP9y5Aq4hKEWqYW5OkPAgZE5eXBNgySA/3i2QXzd7kfEOzQ68PIKH+KblIp/fpaz
1ZIwM0hkBGcply1X7dkE7A64JtUKDNDtSEhW45+uLjcHCRUCNdoIJ6ZWFxxQCIFy
t5xwR5pHyhT8v2ow0qpoTzZ1zoJuyRrlB/06y8AfVWV+9CCj6Krl+lYU2ExjDF4K
XrbTcP0gbS7KJxTEaI8DdF4iCrdZrxoD8+3Cytg88uHcWKRW4DLOKRCZBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKBlt6YkAJkJylL3CDn0gq57dGOMB8GA1UdIwQY
MBaAFL3XaCSdc2WAcfk0VgOTmrnWIMNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzct
MDY5NjA2NDQxNTE0LzEvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzctMDY5NjA2NDQxNTE0
LzEvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0NLInmX
cKmLJgvLwjwUHz6jCU2tkwj155+VKYgoM+ASxIR1/2W3Zf1oc27812d7sRt82rCb
5H1p32hkAPJEOcKgxunWXczs7SZbTfvxYrcNpoku7MHmOwQcsdj6xIJFJ3giwfMN
9OEKGcvicW9wDwXlVXF9kV7kZ4x80whDGHXxlpfy+AbQ60e68ws8BCGoapvzvFJI
lsvna47uMZnEB213j0gychqTJKfXuHwMT/WIPzCcBuHMGHuLXIT6qWRuJgMyZ6E3
MsAVmeX3duGApOUUppSvSAXqJllq0ehq5qXvyBQ+bSw1w+/bv7yDTHYHzZEvLAnl
naLAqZtjYRZhEg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:43:22 2026 by rpki-client