Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
File: vKDsWVZDJCN0INUGubSY11LuIWg.mft (raw, json)
Hash identifier: ML+8cpt9pnd/6zyYypTCPWORW8Us1xPp6aWiyEAlfAY=
Subject key identifier: 40:79:85:D2:10:5A:9D:09:D8:09:F6:78:B5:05:6B:7E:C2:D7:12:55
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Certificate issuer: /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial: 01A137B61D591FF9CD961A8A28B4549AB085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
Manifest number: 1AA8
Signing time: Wed 14 Oct 2026 00:00:44 +0000
Manifest this update: Wed 14 Oct 2026 00:00:44 +0000
Manifest next update: Thu 15 Oct 2026 00:00:44 +0000
Files and hashes: 1: j-l6LKHSFBzRUC4zI3RrMzCHJGg.roa (hash: TldycA22tY7EvqsLvcs1YaipegGydJ+DMucdg1RkrFY=)
2: m6r9o3EuSXJct7DbkrfCUu4fQnA.roa (hash: 0qwKGFMutfPG5lJWTCMJbkMgVvm8/EpA/jxVo+nSsVU=)
3: sq38IYtkwvLbxoqDW_7wpbQZMOY.roa (hash: 9FNCpi3tI2psX/axIbavUXntYIPjv5HbB/DRF/Sxvrg=)
4: vKDsWVZDJCN0INUGubSY11LuIWg.crl (hash: blileuav34PDHtznUrp77/ATROImHF7s0OxHWzzSxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:b6:1d:59:1f:f9:cd:96:1a:8a:28:b4:54:9a:b0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
Validity
Not Before: Oct 14 00:00:44 2026 GMT
Not After : Oct 15 00:00:44 2026 GMT
Subject: CN=407985d2105a9d09d809f678b5056b7ec2d71255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:7e:78:f0:9e:6c:d1:29:48:5f:08:bd:87:
3e:35:8f:3a:81:a6:ff:de:ab:16:5e:64:dd:cf:b2:
e1:d0:60:89:ee:f7:cc:9d:5c:5e:d6:e9:3d:78:a2:
49:d4:f3:8f:03:14:69:88:1e:ba:a6:d7:5d:58:4f:
b5:a3:a1:65:37:e0:37:27:9e:f1:69:fc:96:71:1f:
a4:a6:ca:82:4b:d8:5c:cd:25:4b:94:c6:15:6b:e9:
48:85:0c:6a:c6:cd:e7:e7:0a:0b:55:33:e8:74:72:
86:9a:7c:5d:f3:ab:7f:ea:1a:ba:35:61:71:8e:75:
b9:14:23:18:b4:ed:f3:33:ae:ad:20:33:a4:46:f7:
e9:05:e0:31:ae:81:57:36:cc:64:c3:8f:ea:ed:f3:
a5:ea:3e:7a:d1:19:5c:60:98:8d:97:4c:9b:f5:8b:
f9:7a:57:d5:99:bd:6d:5d:24:20:27:90:3a:ae:e9:
78:47:40:63:a2:fb:5a:a8:10:b7:80:ab:4d:da:6f:
0c:4d:fc:99:6b:d4:6c:9c:3b:d3:52:3f:de:49:de:
4b:8d:30:28:d3:74:70:5c:dc:fd:de:d5:83:c1:06:
fe:16:1d:40:b2:d3:24:ba:c9:0b:d5:00:75:d8:2f:
8c:96:cf:8f:fd:a2:95:f2:ee:cc:f8:f6:e6:e4:7d:
e7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:79:85:D2:10:5A:9D:09:D8:09:F6:78:B5:05:6B:7E:C2:D7:12:55
X509v3 Authority Key Identifier:
keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:29:61:a7:a4:91:a9:59:0d:d6:28:9e:bf:44:b8:37:68:24:
54:ed:e7:50:5d:3d:eb:56:b8:b6:c2:7b:b6:c0:d9:db:52:72:
aa:5a:a4:3a:2a:95:fa:e7:94:f3:d9:6d:13:a1:cd:a4:fd:61:
f3:3a:ba:e2:6d:99:18:c8:1d:d9:bc:15:5b:f7:bc:af:ba:07:
ed:76:c1:1f:5e:ea:dd:8f:d2:c2:73:86:21:dc:00:aa:a9:c3:
5c:f2:1c:b8:f7:83:11:eb:5f:70:d8:69:e6:d9:5f:2c:11:76:
e6:27:13:82:9e:de:d8:8b:ff:2d:99:46:2f:af:2b:ac:a1:91:
6c:e5:21:ca:c6:0f:b8:df:01:4f:d9:0e:18:85:ca:d6:6f:17:
31:fd:a4:58:47:0d:97:94:c5:85:5d:ae:1a:fa:8d:79:60:ec:
a1:07:16:a8:84:28:d8:44:4d:64:e6:bc:f7:85:eb:e0:de:bb:
ff:be:dd:bb:c7:df:b8:17:b4:c8:cb:98:90:15:1d:7d:9a:73:
14:53:e3:3c:18:2d:38:0c:16:3a:09:c6:ff:87:52:9d:ba:61:
d8:ae:cb:ed:cf:6e:30:63:d2:12:17:44:4b:44:24:7e:04:fe:
a0:c8:f7:72:4a:ef:da:d7:d5:6c:8c:0b:43:1d:d9:ca:1c:fb:
5e:6b:b1:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE3th1ZH/nNlhqKKLRUmrCFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYTBlYzU5NTY0MzI0MjM3NDIwZDUwNmI5YjQ5OGQ3NTJl
ZTIxNjgwHhcNMjYxMDE0MDAwMDQ0WhcNMjYxMDE1MDAwMDQ0WjAzMTEwLwYDVQQD
Eyg0MDc5ODVkMjEwNWE5ZDA5ZDgwOWY2NzhiNTA1NmI3ZWMyZDcxMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/J+ePCebNEpSF8IvYc+NY86gab/
3qsWXmTdz7Lh0GCJ7vfMnVxe1uk9eKJJ1POPAxRpiB66ptddWE+1o6FlN+A3J57x
afyWcR+kpsqCS9hczSVLlMYVa+lIhQxqxs3n5woLVTPodHKGmnxd86t/6hq6NWFx
jnW5FCMYtO3zM66tIDOkRvfpBeAxroFXNsxkw4/q7fOl6j560RlcYJiNl0yb9Yv5
elfVmb1tXSQgJ5A6rul4R0BjovtaqBC3gKtN2m8MTfyZa9RsnDvTUj/eSd5LjTAo
03RwXNz93tWDwQb+Fh1AstMkuskL1QB12C+Mls+P/aKV8u7M+Pbm5H3n9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEB5hdIQWp0J2An2eLUFa37C1xJVMB8GA1UdIwQY
MBaAFLyg7FlWQyQjdCDVBrm0mNdS7iFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdktEc1dWWkRKQ04wSU5VR3ViU1kxMUx1SVdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yNDNiNTMtNGI5NC00MjQ0LWE4ZWMt
N2M1NDlmMWVkMTZjLzEvdktEc1dWWkRKQ04wSU5VR3ViU1kxMUx1SVdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yNDNiNTMtNGI5NC00MjQ0LWE4ZWMtN2M1NDlmMWVkMTZj
LzEvdktEc1dWWkRKQ04wSU5VR3ViU1kxMUx1SVdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoClhp6SR
qVkN1iiev0S4N2gkVO3nUF0961a4tsJ7tsDZ21JyqlqkOiqV+ueU89ltE6HNpP1h
8zq64m2ZGMgd2bwVW/e8r7oH7XbBH17q3Y/SwnOGIdwAqqnDXPIcuPeDEetfcNhp
5tlfLBF25icTgp7e2Iv/LZlGL68rrKGRbOUhysYPuN8BT9kOGIXK1m8XMf2kWEcN
l5TFhV2uGvqNeWDsoQcWqIQo2ERNZOa894Xr4N67/77du8ffuBe0yMuYkBUdfZpz
FFPjPBgtOAwWOgnG/4dSnbph2K7L7c9uMGPSEhdES0QkfgT+oMj3ckrv2tfVbIwL
Qx3Zyhz7XmuxLA==
-----END CERTIFICATE-----
Generated at Wed Oct 14 07:55:10 2026 by rpki-client