Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
File: vddoJJ1zZYBx-TRWA5OaudYgw1s.mft (raw, json)
Hash identifier: Q/R776zojCrhRiZvLj51PUllu1d9ormXyUINAsV7iBQ=
Subject key identifier: 2B:4D:48:07:3A:94:CF:9E:A4:A4:9D:A5:7D:4A:DC:3F:F7:21:D6:00
Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b
Certificate serial: 019CE25930A6632A3F237255E5E0EE3CA482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
Manifest number: 013D
Signing time: Thu 12 Mar 2026 14:00:21 +0000
Manifest this update: Thu 12 Mar 2026 14:00:21 +0000
Manifest next update: Fri 13 Mar 2026 14:00:21 +0000
Files and hashes: 1: PDxQWyYqgaGOkX5GZzt20B-Uems.roa (hash: B+Ao0KhpwV0cvFRAJ4KyvfBL5J8+ktllkURKL/vgcAg=)
2: vddoJJ1zZYBx-TRWA5OaudYgw1s.crl (hash: TO7efTjQs8yBhr0Fqh56saRKqNAwCatEhDR22Ajb6X0=)
3: yFX62ci1qBUDucLwJ8wtZh6slII.roa (hash: jSh0LUqy7JqqicLthv+W+VrwTZt3JtqwoMS9ylaeVMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:59:30:a6:63:2a:3f:23:72:55:e5:e0:ee:3c:a4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b
Validity
Not Before: Mar 12 14:00:21 2026 GMT
Not After : Mar 13 14:00:21 2026 GMT
Subject: CN=2b4d48073a94cf9ea4a49da57d4adc3ff721d600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:21:5f:92:cb:13:61:79:17:a4:18:f7:08:
36:dc:60:d7:42:ef:07:ef:b5:0e:9a:63:86:f8:bf:
6f:5f:18:0b:f2:72:d0:ec:f3:a7:bf:17:69:4e:e6:
21:bf:70:5e:2c:2b:27:7a:58:c5:2d:11:09:17:c4:
92:24:3d:24:a5:28:0d:6f:4f:7d:a9:11:05:04:00:
b4:df:f7:e2:99:c1:fe:d4:75:60:b1:aa:9b:0e:ad:
0d:6b:8c:f2:9b:b6:a8:b0:cc:dd:1e:c1:06:22:c9:
d4:b2:7b:50:61:31:e4:ea:fd:29:06:e2:fa:06:f2:
3e:a5:06:b7:ee:41:ac:c6:f2:47:8f:94:69:0a:c9:
b3:9f:9b:17:3e:ae:46:e3:ef:5f:e5:7b:d5:3c:73:
a9:26:7d:74:60:0e:67:de:5c:5e:c0:38:e1:9c:7f:
7e:ac:8f:c2:0d:90:54:1e:bb:1b:a6:ce:49:09:5a:
5d:92:5b:f6:18:d3:8c:9f:a6:ff:34:35:ae:76:a6:
eb:e8:9f:c8:9a:84:86:15:dd:69:e0:01:5c:d8:ec:
30:29:e3:fd:fd:f4:d4:4f:24:e8:f2:96:f2:63:c1:
da:6d:af:b6:36:96:55:52:3b:58:27:dd:3d:bf:ec:
11:9f:66:36:89:b7:a9:50:79:4b:a9:6d:ed:b3:3b:
4a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4D:48:07:3A:94:CF:9E:A4:A4:9D:A5:7D:4A:DC:3F:F7:21:D6:00
X509v3 Authority Key Identifier:
keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:fa:ba:cf:c8:57:8b:cd:c2:4e:c0:e0:14:e9:0d:5a:55:69:
57:3b:fc:2c:6e:2c:98:75:9c:23:84:75:7b:af:87:ec:2b:b0:
0e:73:93:11:71:2b:cd:15:e9:01:30:c9:8e:c6:92:75:30:fb:
6b:e7:b8:21:06:c9:b0:56:f7:74:ad:c4:fc:2c:bb:30:37:cd:
6e:70:da:49:4c:79:23:c3:8b:1b:da:d3:99:90:cd:da:c5:fc:
91:d8:5c:be:c8:c2:3c:9b:49:6b:d4:ef:24:9d:41:6b:57:73:
d1:44:0f:ef:98:7a:b8:90:8f:39:f3:e4:69:cb:e1:14:d7:8f:
c5:91:95:2e:e6:d0:4e:b9:95:88:f9:ed:a0:f5:7f:05:18:d3:
fb:58:cd:5d:e3:c3:5a:87:d9:1a:d7:6c:37:45:af:7e:69:93:
9d:dd:3f:a8:2f:06:b3:26:b5:ba:3c:19:f0:3c:6f:a1:cd:fd:
65:fc:70:27:f1:ee:07:0b:df:3e:01:19:28:77:83:78:e0:e9:
29:cb:27:35:55:87:da:a1:2a:77:80:30:54:14:bb:6b:65:7b:
85:20:0e:cc:7f:7a:04:ca:7b:29:28:7d:65:62:61:b6:79:68:
0c:2a:5c:81:9e:8b:f7:7a:e6:39:9d:01:e8:b1:84:a2:31:ad:
3b:eb:3a:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZziWTCmYyo/I3JV5eDuPKSCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDc2ODI0OWQ3MzY1ODA3MWY5MzQ1NjAzOTM5YWI5ZDYy
MGMzNWIwHhcNMjYwMzEyMTQwMDIxWhcNMjYwMzEzMTQwMDIxWjAzMTEwLwYDVQQD
EygyYjRkNDgwNzNhOTRjZjllYTRhNDlkYTU3ZDRhZGMzZmY3MjFkNjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/whX5LLE2F5F6QY9wg23GDXQu8H
77UOmmOG+L9vXxgL8nLQ7POnvxdpTuYhv3BeLCsneljFLREJF8SSJD0kpSgNb099
qREFBAC03/fimcH+1HVgsaqbDq0Na4zym7aosMzdHsEGIsnUsntQYTHk6v0pBuL6
BvI+pQa37kGsxvJHj5RpCsmzn5sXPq5G4+9f5XvVPHOpJn10YA5n3lxewDjhnH9+
rI/CDZBUHrsbps5JCVpdklv2GNOMn6b/NDWudqbr6J/ImoSGFd1p4AFc2OwwKeP9
/fTUTyTo8pbyY8Haba+2NpZVUjtYJ909v+wRn2Y2ibepUHlLqW3tsztK7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtNSAc6lM+epKSdpX1K3D/3IdYAMB8GA1UdIwQY
MBaAFL3XaCSdc2WAcfk0VgOTmrnWIMNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzct
MDY5NjA2NDQxNTE0LzEvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzctMDY5NjA2NDQxNTE0
LzEvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyfq6z8hX
i83CTsDgFOkNWlVpVzv8LG4smHWcI4R1e6+H7CuwDnOTEXErzRXpATDJjsaSdTD7
a+e4IQbJsFb3dK3E/Cy7MDfNbnDaSUx5I8OLG9rTmZDN2sX8kdhcvsjCPJtJa9Tv
JJ1Ba1dz0UQP75h6uJCPOfPkacvhFNePxZGVLubQTrmViPntoPV/BRjT+1jNXePD
WofZGtdsN0WvfmmTnd0/qC8Gsya1ujwZ8Dxvoc39ZfxwJ/HuBwvfPgEZKHeDeODp
KcsnNVWH2qEqd4AwVBS7a2V7hSAOzH96BMp7KSh9ZWJhtnloDCpcgZ6L93rmOZ0B
6LGEojGtO+s6Aw==
-----END CERTIFICATE-----
Generated at Thu Mar 12 18:41:46 2026 by rpki-client