Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
File: vfSGpExRBdeBNXKUVhzMPROk1nE.mft (raw, json)
Hash identifier: EtGMeEYfhonfP0T55FeuceLZoRGow3tYqUwfEN4z2Gw=
Subject key identifier: 8C:42:1B:15:AF:19:B5:DC:DA:6D:D7:3F:0C:DC:60:C4:CE:0E:02:59
Authority key identifier: BD:F4:86:A4:4C:51:05:D7:81:35:72:94:56:1C:CC:3D:13:A4:D6:71
Certificate issuer: /CN=bdf486a44c5105d781357294561ccc3d13a4d671
Certificate serial: 019D38D346458F2F33F51B54BBB06625C971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
Manifest number: 0AFF
Signing time: Sun 29 Mar 2026 09:01:03 +0000
Manifest this update: Sun 29 Mar 2026 09:01:03 +0000
Manifest next update: Mon 30 Mar 2026 09:01:03 +0000
Files and hashes: 1: vfSGpExRBdeBNXKUVhzMPROk1nE.crl (hash: CQl7/XXszKxe4CQxDJYGFk1eUqEyu0XmjwY5SloIid0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:46:45:8f:2f:33:f5:1b:54:bb:b0:66:25:c9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf486a44c5105d781357294561ccc3d13a4d671
Validity
Not Before: Mar 29 09:01:03 2026 GMT
Not After : Mar 30 09:01:03 2026 GMT
Subject: CN=8c421b15af19b5dcda6dd73f0cdc60c4ce0e0259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8d:94:f8:b5:63:e6:a0:d6:82:15:b2:ed:93:
0a:4e:8c:2c:c6:6b:a5:a4:6a:f2:59:10:63:a7:ce:
c1:be:13:44:6a:19:e4:87:7e:c1:21:68:81:dd:51:
2c:1f:b5:82:1f:04:be:8c:34:ad:3b:64:e3:f3:b2:
61:67:25:c4:e3:ed:f7:55:2f:f7:f6:3c:e5:6c:ac:
c8:c9:65:10:67:b4:c0:28:37:4b:c6:f2:a2:79:52:
93:e7:b8:d5:ae:74:3b:22:90:e3:82:a3:a7:31:88:
df:59:52:cc:b9:04:3e:57:e3:e0:73:0c:00:a5:85:
2c:26:76:fd:e0:9f:37:2d:43:61:f5:55:c4:f3:34:
1e:30:36:93:11:5b:eb:68:0c:fe:6c:14:d0:01:15:
09:7e:9b:1f:d0:9c:83:42:90:28:41:56:c6:ab:f2:
4c:73:c7:9f:4e:0f:33:4c:9e:5c:3e:4f:e5:a8:a9:
42:b9:d3:fa:df:33:a1:25:fc:2d:d4:64:be:f7:06:
3d:79:7b:4b:f6:0d:43:4c:b6:fb:c0:33:4f:4c:79:
9a:c4:c3:8b:67:f5:8b:c0:14:e2:ba:b2:9f:7a:84:
0c:8f:b4:b4:b0:3d:48:f7:e1:3f:69:81:54:08:fe:
f7:ef:63:a2:8f:8d:da:27:19:d9:ba:4e:d9:e4:b4:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:42:1B:15:AF:19:B5:DC:DA:6D:D7:3F:0C:DC:60:C4:CE:0E:02:59
X509v3 Authority Key Identifier:
keyid:BD:F4:86:A4:4C:51:05:D7:81:35:72:94:56:1C:CC:3D:13:A4:D6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ac:f9:0f:e2:72:b8:18:ac:b9:a1:ee:6d:c2:d6:4d:d4:f0:
10:6d:89:2d:b1:3d:4b:da:a5:92:52:ef:7b:65:3c:45:11:d1:
a0:4b:bf:87:85:ad:e6:b3:51:84:db:e2:23:11:fb:46:fa:0d:
10:52:a6:51:1b:ce:41:b8:af:e3:05:5f:cf:e5:f6:07:2e:2b:
0e:64:9e:0f:fa:fa:f4:99:e9:85:ec:74:08:06:8b:4d:f1:c6:
43:0d:fe:60:ca:05:84:25:e7:3d:49:58:35:6d:f9:6b:a7:3f:
8c:be:01:fe:49:e3:32:ac:4f:5c:3c:36:fe:ef:fa:18:a6:98:
c4:5c:73:39:d5:56:24:ee:fc:ab:12:42:17:28:ed:59:4e:4d:
92:6f:54:41:54:ea:89:67:0a:2a:26:c8:83:0d:14:dc:a5:1a:
e2:da:23:51:3a:02:59:42:d0:63:bf:38:24:69:8b:3a:00:6b:
c1:36:04:94:91:18:e7:42:27:2f:a8:a8:53:56:2d:22:a0:e7:
c7:bd:ab:c6:c6:75:c7:04:88:f3:dc:c9:d6:88:35:ee:1a:6b:
5e:e7:71:17:d0:a7:33:3e:18:50:bb:3f:aa:66:d7:79:f5:c2:
98:1c:68:17:ed:d9:3c:00:34:cf:ec:0e:8f:99:2a:13:49:ad:
02:91:02:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0400ZFjy8z9RtUu7BmJclxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZjQ4NmE0NGM1MTA1ZDc4MTM1NzI5NDU2MWNjYzNkMTNh
NGQ2NzEwHhcNMjYwMzI5MDkwMTAzWhcNMjYwMzMwMDkwMTAzWjAzMTEwLwYDVQQD
Eyg4YzQyMWIxNWFmMTliNWRjZGE2ZGQ3M2YwY2RjNjBjNGNlMGUwMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4o2U+LVj5qDWghWy7ZMKTowsxmul
pGryWRBjp87BvhNEahnkh37BIWiB3VEsH7WCHwS+jDStO2Tj87JhZyXE4+33VS/3
9jzlbKzIyWUQZ7TAKDdLxvKieVKT57jVrnQ7IpDjgqOnMYjfWVLMuQQ+V+PgcwwA
pYUsJnb94J83LUNh9VXE8zQeMDaTEVvraAz+bBTQARUJfpsf0JyDQpAoQVbGq/JM
c8efTg8zTJ5cPk/lqKlCudP63zOhJfwt1GS+9wY9eXtL9g1DTLb7wDNPTHmaxMOL
Z/WLwBTiurKfeoQMj7S0sD1I9+E/aYFUCP7372Oij43aJxnZuk7Z5LT9YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxCGxWvGbXc2m3XPwzcYMTODgJZMB8GA1UdIwQY
MBaAFL30hqRMUQXXgTVylFYczD0TpNZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZTR3BFeFJCZGVCTlhLVVZoek1QUk9rMW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iOGIyNzgtZjliZC00MGUxLTgwM2Et
ZjY5MWY2NDc1OGFjLzEvdmZTR3BFeFJCZGVCTlhLVVZoek1QUk9rMW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iOGIyNzgtZjliZC00MGUxLTgwM2EtZjY5MWY2NDc1OGFj
LzEvdmZTR3BFeFJCZGVCTlhLVVZoek1QUk9rMW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKz5D+Jy
uBisuaHubcLWTdTwEG2JLbE9S9qlklLve2U8RRHRoEu/h4Wt5rNRhNviIxH7RvoN
EFKmURvOQbiv4wVfz+X2By4rDmSeD/r69Jnphex0CAaLTfHGQw3+YMoFhCXnPUlY
NW35a6c/jL4B/knjMqxPXDw2/u/6GKaYxFxzOdVWJO78qxJCFyjtWU5Nkm9UQVTq
iWcKKibIgw0U3KUa4tojUToCWULQY784JGmLOgBrwTYElJEY50InL6ioU1YtIqDn
x72rxsZ1xwSI89zJ1og17hprXudxF9CnMz4YULs/qmbXefXCmBxoF+3ZPAA0z+wO
j5kqE0mtApECDQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:58 2026 by rpki-client