Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
File: vfW3EvLkkywcAwMS0ZSll4g_PV4.mft (raw, json)
Hash identifier: lv28pRegQDmVAbSDHuxWF69DDWBU5pQAOADb8yxCIoI=
Subject key identifier: 69:57:E6:F3:A4:71:C3:CF:99:B6:A2:7B:8D:76:4E:C5:A8:94:5F:C0
Authority key identifier: BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
Certificate issuer: /CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Certificate serial: 01A17EF39690A13D1B9D64EC33F1A0D48613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 20:00:55 +0000
Manifest this update: Tue 27 Oct 2026 20:00:55 +0000
Manifest next update: Wed 28 Oct 2026 20:00:55 +0000
Files and hashes: 1: CzohGtSLcmDpSrKXCjf2wQpuklI.roa (hash: oSgq7hJ4clz8JZa9p9/cu2QQ6c0SU2FQe0lIPhhVo4k=)
2: MCBjLeIbX3O5HTvShautKhz-FtY.asa (hash: BCCcq5YxV8mIaSr5yq810yZ+7NbSDQZa8OD5V47sB80=)
3: vfW3EvLkkywcAwMS0ZSll4g_PV4.crl (hash: QW0E/KmLcXY/Yzgx235QqpC1nz5+Rl3/TnIFdwYeluA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f3:96:90:a1:3d:1b:9d:64:ec:33:f1:a0:d4:86:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Validity
Not Before: Oct 27 20:00:55 2026 GMT
Not After : Oct 28 20:00:55 2026 GMT
Subject: CN=6957e6f3a471c3cf99b6a27b8d764ec5a8945fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:83:d6:07:a5:d6:bc:46:68:42:3e:a5:2f:
2f:89:74:e5:2d:b2:d5:e0:39:87:82:50:0a:c0:4d:
ad:04:a9:c7:a7:84:9d:70:63:60:49:e4:8b:05:0d:
2f:75:e8:f7:42:5c:ff:60:4d:1b:5c:16:12:9b:40:
51:e0:07:33:b4:b5:25:a2:33:fe:b0:ce:34:b2:a6:
5f:f3:16:13:a3:d9:b1:7f:50:84:de:96:c7:ac:8c:
23:48:30:d2:76:b2:14:0f:89:ac:e5:e5:56:21:ac:
08:32:6c:9c:e9:5a:6f:0e:14:4e:b7:70:3b:c0:5f:
88:e7:bc:0f:cf:e7:b6:41:0f:91:3c:11:e1:84:b6:
e1:3d:86:f3:46:00:25:2a:f8:23:f4:fb:c3:20:69:
1b:8c:7e:46:dc:28:1c:51:32:90:ac:1f:d5:63:58:
e3:c3:ab:36:a1:92:90:b0:73:0b:66:bc:2c:df:eb:
9a:0d:9e:9f:76:ea:64:ae:9e:ca:12:e9:e3:00:6d:
ba:38:ac:89:60:c0:37:82:27:df:18:44:35:f5:1e:
c5:84:4b:0b:b8:ac:05:a6:14:7c:cf:5c:0f:91:03:
3e:a2:4d:fc:73:24:f7:33:3d:c8:f4:97:3a:ce:f9:
34:30:dc:21:87:c4:03:2a:39:c9:1b:df:cf:f2:b7:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:57:E6:F3:A4:71:C3:CF:99:B6:A2:7B:8D:76:4E:C5:A8:94:5F:C0
X509v3 Authority Key Identifier:
keyid:BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4c:21:c1:a3:2d:31:e3:2d:dd:91:91:59:c3:a8:f0:54:fd:
5b:69:13:c4:03:65:31:9b:8d:85:a4:b3:d0:fd:dd:7f:4f:c6:
32:05:c3:e8:b2:d5:3e:e0:86:ed:50:2f:6d:f8:a2:af:5a:68:
da:9f:9a:85:4b:b5:6a:7d:9c:a6:9c:ec:63:35:99:0c:53:f3:
ff:60:15:31:ee:b5:8d:00:66:14:9c:5a:de:9a:79:af:e3:e2:
cc:9e:3d:b9:a7:e2:4f:af:90:a2:d4:ae:86:cd:b0:6b:20:4f:
84:a2:f1:7e:df:47:8b:07:1b:d2:2e:02:35:71:21:3f:a2:0b:
f4:8a:30:a8:74:fc:18:59:be:f6:94:09:a9:75:8f:80:14:3b:
21:bc:b9:0f:19:38:ed:00:c3:01:3c:d0:31:a0:05:88:88:8f:
55:1e:df:eb:54:04:b1:9a:e1:23:cd:da:27:f7:eb:eb:f7:43:
c4:99:99:39:99:b4:60:2a:eb:e3:55:d7:8d:ef:63:f3:74:28:
15:00:ef:5e:f9:f4:ae:07:eb:64:33:cc:51:45:5a:09:7b:73:
97:7f:8c:b2:20:4a:a5:ca:c8:ca:78:45:0b:4e:b7:2e:c2:df:
e5:67:cc:3e:1f:24:62:ea:75:8a:4f:75:04:ea:05:dd:77:38:
35:a0:37:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+85aQoT0bnWTsM/Gg1IYTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZjViNzEyZjJlNDkzMmMxYzAzMDMxMmQxOTRhNTk3ODgz
ZjNkNWUwHhcNMjYxMDI3MjAwMDU1WhcNMjYxMDI4MjAwMDU1WjAzMTEwLwYDVQQD
Eyg2OTU3ZTZmM2E0NzFjM2NmOTliNmEyN2I4ZDc2NGVjNWE4OTQ1ZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEiD1gel1rxGaEI+pS8viXTlLbLV
4DmHglAKwE2tBKnHp4SdcGNgSeSLBQ0vdej3Qlz/YE0bXBYSm0BR4AcztLUlojP+
sM40sqZf8xYTo9mxf1CE3pbHrIwjSDDSdrIUD4ms5eVWIawIMmyc6VpvDhROt3A7
wF+I57wPz+e2QQ+RPBHhhLbhPYbzRgAlKvgj9PvDIGkbjH5G3CgcUTKQrB/VY1jj
w6s2oZKQsHMLZrws3+uaDZ6fdupkrp7KEunjAG26OKyJYMA3giffGEQ19R7FhEsL
uKwFphR8z1wPkQM+ok38cyT3Mz3I9Jc6zvk0MNwhh8QDKjnJG9/P8reSZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlX5vOkccPPmbaie412TsWolF/AMB8GA1UdIwQY
MBaAFL31txLy5JMsHAMDEtGUpZeIPz1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZXM0V2TGtreXdjQXdNUzBaU2xsNGdfUFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jZTAwNzctYzcwMS00Y2VkLTlkNTMt
NmM1YzM0NTg2ZjZlLzEvdmZXM0V2TGtreXdjQXdNUzBaU2xsNGdfUFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9jZTAwNzctYzcwMS00Y2VkLTlkNTMtNmM1YzM0NTg2ZjZl
LzEvdmZXM0V2TGtreXdjQXdNUzBaU2xsNGdfUFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUwhwaMt
MeMt3ZGRWcOo8FT9W2kTxANlMZuNhaSz0P3df0/GMgXD6LLVPuCG7VAvbfiir1po
2p+ahUu1an2cppzsYzWZDFPz/2AVMe61jQBmFJxa3pp5r+PizJ49uafiT6+QotSu
hs2wayBPhKLxft9Hiwcb0i4CNXEhP6IL9IowqHT8GFm+9pQJqXWPgBQ7Iby5Dxk4
7QDDATzQMaAFiIiPVR7f61QEsZrhI83aJ/fr6/dDxJmZOZm0YCrr41XXje9j83Qo
FQDvXvn0rgfrZDPMUUVaCXtzl3+MsiBKpcrIynhFC063LsLf5WfMPh8kYup1ik91
BOoF3Xc4NaA3pw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:29:16 2026 by rpki-client