Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
File: vUWuywYtm0RuBUIbwfqvWLsHaew.mft (raw, json)
Hash identifier: cKxix0nmGUGRiJ7j9J/DrFYJIdsYQ+w+KSL6u2xA/Go=
Subject key identifier: 9B:E7:7C:8C:77:FC:CF:2A:5F:C6:C8:47:06:17:E4:9C:7A:25:3C:9E
Authority key identifier: BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC
Certificate issuer: /CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
Certificate serial: 01A0404E471AEEE7F0DEBAC960F5BA4EDBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
Manifest number: 1152
Signing time: Wed 26 Aug 2026 23:01:06 +0000
Manifest this update: Wed 26 Aug 2026 23:01:06 +0000
Manifest next update: Thu 27 Aug 2026 23:01:06 +0000
Files and hashes: 1: JJCO1QTq-AOaUbrA-MkUpfdC1cE.roa (hash: fVzsbnVjjWl2LyjA+I2JSODFF87TDP7Iwxo6m2pjCvM=)
2: vUWuywYtm0RuBUIbwfqvWLsHaew.crl (hash: WZz4VIsm8c1IVC+QcdyVeaKlOjycHrxkMDmVCuYkUvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:47:1a:ee:e7:f0:de:ba:c9:60:f5:ba:4e:db:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
Validity
Not Before: Aug 26 23:01:06 2026 GMT
Not After : Aug 27 23:01:06 2026 GMT
Subject: CN=9be77c8c77fccf2a5fc6c8470617e49c7a253c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4a:c3:1f:3a:d1:8d:95:30:a7:50:e8:57:b6:
fd:73:17:45:83:57:ee:aa:29:62:86:d0:c8:3e:d3:
70:51:46:8f:0f:6e:b7:39:a4:3a:85:af:38:69:13:
71:33:90:61:aa:b5:3a:d3:94:e0:0c:f0:28:ac:4d:
e0:6c:69:13:5d:ad:ed:af:04:3a:62:10:0b:fd:af:
b1:21:e4:47:60:97:51:8f:7f:29:d9:d8:79:c5:09:
2a:53:54:bd:23:9f:dd:ae:9d:54:18:a0:2e:19:e9:
14:fd:b6:52:79:ea:e0:a4:89:df:f9:93:7c:e8:d6:
13:82:69:ea:5a:a6:bf:37:f7:b0:57:e4:61:1f:85:
40:cc:c6:1f:30:a9:ee:59:75:ce:92:32:4e:fa:0f:
9b:9b:87:98:a0:b3:e1:62:6e:e0:ec:81:4e:b6:26:
df:a8:9a:17:94:81:b6:0f:30:77:ee:29:19:1a:75:
84:a5:bf:12:14:39:ff:02:90:0a:55:73:2d:71:aa:
79:8b:84:8f:a2:82:8a:f2:34:1e:ed:cc:1f:96:5b:
0f:83:ad:1e:15:e8:d5:81:66:f0:83:82:51:93:37:
1a:45:1e:47:ad:74:e7:86:2c:68:cb:05:99:b2:0f:
bf:f2:6d:c0:ee:83:7a:fe:4b:5a:83:72:db:48:fd:
68:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E7:7C:8C:77:FC:CF:2A:5F:C6:C8:47:06:17:E4:9C:7A:25:3C:9E
X509v3 Authority Key Identifier:
keyid:BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6e:94:50:20:cd:e4:a6:c5:d7:fe:18:cb:9f:81:7e:14:9b:
a2:05:e4:61:a9:0a:51:55:10:38:17:81:3d:66:0a:ac:b6:38:
fd:8c:1b:17:fb:c7:92:7c:62:77:ec:b8:55:2b:d9:bc:28:f0:
2f:84:e3:ae:c2:61:7b:4c:7f:60:25:32:2f:ef:8e:35:fe:bf:
9b:59:97:81:f8:af:f1:2f:58:7c:92:d6:41:69:11:cf:48:72:
1f:77:71:80:dd:f1:6b:1e:9a:90:04:fc:4c:8a:81:ae:3a:a9:
54:6c:57:80:09:bc:c6:b5:2b:b6:7a:96:12:f1:28:95:02:ac:
a6:8d:be:55:55:b1:be:ef:5e:73:34:2e:e3:a0:35:22:37:01:
25:c4:b5:1f:06:4d:fd:d7:f9:d4:91:ba:e2:76:a7:3e:07:0f:
ff:6d:1e:fa:20:eb:4a:a1:79:17:e6:76:d2:83:40:b0:5b:68:
c8:0a:da:21:1b:46:af:90:87:b2:84:2e:9b:0e:c7:fd:35:12:
7a:cd:1c:28:e7:54:78:6e:39:c2:2d:96:c0:eb:89:df:30:d0:
83:6a:73:a2:39:8a:f1:1a:f7:dc:51:8d:ef:77:10:8a:8f:c9:
75:98:2a:f8:b6:4b:f0:5c:41:21:b4:61:26:2f:0d:4d:79:ca:
3f:90:0e:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATkca7ufw3rrJYPW6TtvsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNDVhZWNiMDYyZDliNDQ2ZTA1NDIxYmMxZmFhZjU4YmIw
NzY5ZWMwHhcNMjYwODI2MjMwMTA2WhcNMjYwODI3MjMwMTA2WjAzMTEwLwYDVQQD
Eyg5YmU3N2M4Yzc3ZmNjZjJhNWZjNmM4NDcwNjE3ZTQ5YzdhMjUzYzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UrDHzrRjZUwp1DoV7b9cxdFg1fu
qilihtDIPtNwUUaPD263OaQ6ha84aRNxM5BhqrU605TgDPAorE3gbGkTXa3trwQ6
YhAL/a+xIeRHYJdRj38p2dh5xQkqU1S9I5/drp1UGKAuGekU/bZSeergpInf+ZN8
6NYTgmnqWqa/N/ewV+RhH4VAzMYfMKnuWXXOkjJO+g+bm4eYoLPhYm7g7IFOtibf
qJoXlIG2DzB37ikZGnWEpb8SFDn/ApAKVXMtcap5i4SPooKK8jQe7cwfllsPg60e
FejVgWbwg4JRkzcaRR5HrXTnhixoywWZsg+/8m3A7oN6/ktag3LbSP1o8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvnfIx3/M8qX8bIRwYX5Jx6JTyeMB8GA1UdIwQY
MBaAFL1FrssGLZtEbgVCG8H6r1i7B2nsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlVXdXl3WXRtMFJ1QlVJYndmcXZXTHNIYWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84YTZhZTEtNzE0OC00ZTU3LWFhYTkt
M2I4MWFhMjZmN2M2LzEvdlVXdXl3WXRtMFJ1QlVJYndmcXZXTHNIYWV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84YTZhZTEtNzE0OC00ZTU3LWFhYTktM2I4MWFhMjZmN2M2
LzEvdlVXdXl3WXRtMFJ1QlVJYndmcXZXTHNIYWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlW6UUCDN
5KbF1/4Yy5+BfhSbogXkYakKUVUQOBeBPWYKrLY4/YwbF/vHknxid+y4VSvZvCjw
L4TjrsJhe0x/YCUyL++ONf6/m1mXgfiv8S9YfJLWQWkRz0hyH3dxgN3xax6akAT8
TIqBrjqpVGxXgAm8xrUrtnqWEvEolQKspo2+VVWxvu9eczQu46A1IjcBJcS1HwZN
/df51JG64nanPgcP/20e+iDrSqF5F+Z20oNAsFtoyAraIRtGr5CHsoQumw7H/TUS
es0cKOdUeG45wi2WwOuJ3zDQg2pzojmK8Rr33FGN73cQio/JdZgq+LZL8FxBIbRh
Ji8NTXnKP5AOoA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 09:33:06 2026 by rpki-client