Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
File: vPVGNoDRS2RYax1bRlZjvLV35pM.mft (raw, json)
Hash identifier: YLdGjWJEKV5W0VZaPRnEcSGjiZmo8InV4C1OOyDp3sk=
Subject key identifier: 01:D1:77:4B:CE:25:96:00:FA:FD:15:1E:6D:79:06:96:12:1E:2C:39
Authority key identifier: BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
Certificate issuer: /CN=bcf5463680d14b64586b1d5b465663bcb577e693
Certificate serial: 01A176CC4F71C4F355C2C55B0DD79825BAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
Manifest number: 1AC4
Signing time: Mon 26 Oct 2026 06:01:03 +0000
Manifest this update: Mon 26 Oct 2026 06:01:03 +0000
Manifest next update: Tue 27 Oct 2026 06:01:03 +0000
Files and hashes: 1: 473COPKd9olJMqE4kR25XOWDFnY.roa (hash: monMcaQ2KeRWOvX/C8J08SlGKpHbfXIEgRkLvwPSBPI=)
2: vPVGNoDRS2RYax1bRlZjvLV35pM.crl (hash: tt5uWG+ae6D9MCXdl0cbc1hPTNLh2DhL32wIE4JL/l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:cc:4f:71:c4:f3:55:c2:c5:5b:0d:d7:98:25:ba:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf5463680d14b64586b1d5b465663bcb577e693
Validity
Not Before: Oct 26 06:01:03 2026 GMT
Not After : Oct 27 06:01:03 2026 GMT
Subject: CN=01d1774bce259600fafd151e6d790696121e2c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:3b:45:3d:23:29:a3:ca:9f:6e:0c:e5:ef:
85:ed:bf:50:03:c9:2a:36:7f:e2:7e:9a:32:db:e4:
dc:3a:2c:f5:90:de:a7:04:27:15:61:cd:8e:72:e6:
cf:2b:05:28:f3:2e:29:79:24:06:8b:ab:f0:0d:ad:
19:d9:0a:9e:30:06:f6:4f:57:9f:82:eb:0f:ed:09:
70:6c:2c:b3:58:02:b6:67:50:6d:f9:9d:9e:13:3a:
3d:8e:5c:4f:0e:f3:29:7c:b2:01:db:dd:cc:57:42:
1b:2a:6d:6b:78:fe:aa:04:86:76:ae:d5:60:db:0d:
e8:03:32:c3:29:8e:a7:93:73:7a:3a:41:49:85:d3:
dc:32:38:26:d4:77:6a:e4:db:a8:1d:30:33:fd:12:
5a:dd:a0:0e:2e:48:8a:61:b8:d7:71:a2:6e:49:c0:
ea:cc:9d:bd:62:8a:97:d6:a7:ce:3d:ba:cd:da:b0:
d9:35:74:ea:68:de:62:33:1d:92:49:39:50:cd:d4:
f9:c9:b5:d6:75:af:e1:ce:fa:81:3e:80:3d:94:33:
1c:61:35:d9:e0:ee:eb:b6:7a:69:c3:86:c5:c6:3e:
61:ab:3e:0b:f3:5f:1a:78:e1:af:b5:8f:ee:9a:20:
f1:fb:45:ec:0d:69:fe:7f:12:69:c1:0c:1f:8b:e5:
5a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D1:77:4B:CE:25:96:00:FA:FD:15:1E:6D:79:06:96:12:1E:2C:39
X509v3 Authority Key Identifier:
keyid:BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:05:da:b2:1e:b2:5e:e1:ba:ad:a7:08:3e:88:11:03:4c:8c:
aa:4c:b7:3f:0d:78:06:dd:eb:6f:42:61:bc:04:a2:82:8d:84:
f0:0e:94:a4:fd:35:09:76:8c:17:65:84:48:98:f0:09:b9:be:
b0:d8:00:a1:04:78:e6:b9:6c:04:bd:06:af:e6:13:37:78:05:
cc:3d:59:f9:65:e2:28:69:54:94:21:29:91:c6:07:8b:f6:fc:
5c:0a:71:b0:8f:b7:fb:b2:71:71:4d:4e:ef:e6:30:3d:fc:89:
41:81:dc:ea:3f:2f:a5:22:87:e4:d8:7b:c8:10:64:8e:2d:cb:
b6:8a:cf:28:c5:91:36:5f:44:c1:ec:e6:a0:bb:a6:eb:66:67:
9a:39:f9:2f:6d:8b:86:5c:71:fe:35:61:e8:9d:14:eb:e1:11:
05:6b:8c:c3:c8:00:b4:f6:c4:04:88:16:85:5f:ed:39:67:c1:
9e:de:68:ce:65:ef:70:28:85:62:9c:5f:72:30:54:ee:16:54:
28:db:47:a7:e9:59:e1:2d:88:2f:12:3f:46:8d:e6:e8:c2:fb:
78:96:6a:00:55:ee:2c:d6:ff:cf:2e:1c:47:7d:d9:70:9b:0e:
b1:21:e8:70:25:92:65:85:50:44:92:9e:ab:5b:b3:bf:7c:75:
2a:fb:14:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF2zE9xxPNVwsVbDdeYJbr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZjU0NjM2ODBkMTRiNjQ1ODZiMWQ1YjQ2NTY2M2JjYjU3
N2U2OTMwHhcNMjYxMDI2MDYwMTAzWhcNMjYxMDI3MDYwMTAzWjAzMTEwLwYDVQQD
EygwMWQxNzc0YmNlMjU5NjAwZmFmZDE1MWU2ZDc5MDY5NjEyMWUyYzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroE7RT0jKaPKn24M5e+F7b9QA8kq
Nn/ifpoy2+TcOiz1kN6nBCcVYc2OcubPKwUo8y4peSQGi6vwDa0Z2QqeMAb2T1ef
gusP7QlwbCyzWAK2Z1Bt+Z2eEzo9jlxPDvMpfLIB293MV0IbKm1reP6qBIZ2rtVg
2w3oAzLDKY6nk3N6OkFJhdPcMjgm1Hdq5NuoHTAz/RJa3aAOLkiKYbjXcaJuScDq
zJ29YoqX1qfOPbrN2rDZNXTqaN5iMx2SSTlQzdT5ybXWda/hzvqBPoA9lDMcYTXZ
4O7rtnppw4bFxj5hqz4L818aeOGvtY/umiDx+0XsDWn+fxJpwQwfi+VaBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHRd0vOJZYA+v0VHm15BpYSHiw5MB8GA1UdIwQY
MBaAFLz1RjaA0UtkWGsdW0ZWY7y1d+aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlBWR05vRFJTMlJZYXgxYlJsWmp2TFYzNXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mNWZjNzYtNTAxNi00OTY4LTgyOWIt
NDczMDQ1YTkzYTA1LzEvdlBWR05vRFJTMlJZYXgxYlJsWmp2TFYzNXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9mNWZjNzYtNTAxNi00OTY4LTgyOWItNDczMDQ1YTkzYTA1
LzEvdlBWR05vRFJTMlJZYXgxYlJsWmp2TFYzNXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwXash6y
XuG6racIPogRA0yMqky3Pw14Bt3rb0JhvASigo2E8A6UpP01CXaMF2WESJjwCbm+
sNgAoQR45rlsBL0Gr+YTN3gFzD1Z+WXiKGlUlCEpkcYHi/b8XApxsI+3+7JxcU1O
7+YwPfyJQYHc6j8vpSKH5Nh7yBBkji3LtorPKMWRNl9EwezmoLum62Znmjn5L22L
hlxx/jVh6J0U6+ERBWuMw8gAtPbEBIgWhV/tOWfBnt5ozmXvcCiFYpxfcjBU7hZU
KNtHp+lZ4S2ILxI/Ro3m6ML7eJZqAFXuLNb/zy4cR33ZcJsOsSHocCWSZYVQRJKe
q1uzv3x1KvsUqw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 16:57:55 2026 by rpki-client