Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
File: vx9s1vq5XSQc2axfhfTQX53lj5s.mft (raw, json)
Hash identifier: naYpNwjkg+GJxxpgjY8ZWXOfgdbSkBd0XjjE58Kg8IU=
Subject key identifier: A2:75:99:90:C0:78:7C:D6:35:90:51:AD:33:8D:12:63:1A:DF:81:94
Authority key identifier: BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
Certificate issuer: /CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Certificate serial: 019D38D2ED9D607B41389E44EAFFB973204F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
Manifest number: 166C
Signing time: Sun 29 Mar 2026 09:00:40 +0000
Manifest this update: Sun 29 Mar 2026 09:00:40 +0000
Manifest next update: Mon 30 Mar 2026 09:00:40 +0000
Files and hashes: 1: smH8IDaU7mi6eo7ubYIhaO6o_IM.roa (hash: zUmgtKSpqk5n2lEgS4LMSnmGpaSRvnHOfoCAI5v+7/g=)
2: vx9s1vq5XSQc2axfhfTQX53lj5s.crl (hash: gOCaGfHII68zIiuTeZGtKkdKao2iJcti1c/Nt5eqLhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ed:9d:60:7b:41:38:9e:44:ea:ff:b9:73:20:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Validity
Not Before: Mar 29 09:00:40 2026 GMT
Not After : Mar 30 09:00:40 2026 GMT
Subject: CN=a2759990c0787cd6359051ad338d12631adf8194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:f1:2b:15:26:90:bf:4f:b5:65:4d:f0:bd:
a1:5d:08:65:b5:44:60:88:f5:7e:72:e1:16:0a:2f:
aa:5f:08:7e:fe:f7:4c:ab:58:21:de:80:02:6f:63:
bb:bf:3c:7c:1e:4e:0c:e2:36:5d:9f:cc:fa:59:56:
c2:58:b0:0d:30:aa:52:5a:d3:24:02:c2:b7:68:f4:
4e:89:a9:6d:c5:e9:34:93:1e:e4:5f:ec:f0:6d:8c:
91:63:34:1e:f4:1b:68:35:63:f7:3a:69:90:5f:ed:
ab:8d:e9:3b:94:4d:7a:cf:56:4b:22:a7:a3:11:8d:
9d:89:21:7c:94:4c:95:4f:3f:81:29:d5:cc:46:49:
4b:a7:f4:a1:8c:3b:07:91:73:37:a1:fa:96:77:a1:
70:06:8d:9f:61:58:06:a5:89:bf:44:c3:e7:77:e4:
79:ce:cd:23:36:88:a5:51:89:84:a1:5d:3f:34:a6:
fd:bd:30:3c:48:68:5c:7c:82:69:bc:7d:85:d8:6f:
07:b9:ef:68:a1:ae:24:6c:96:cc:72:86:b9:21:f9:
4f:53:c2:14:13:d7:c1:6a:74:c5:6e:ed:7b:e4:90:
d4:11:bd:99:b6:48:d3:60:87:d8:e5:90:8d:54:19:
70:cd:99:78:ae:7b:c2:70:0b:b4:be:1e:fc:15:5c:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:75:99:90:C0:78:7C:D6:35:90:51:AD:33:8D:12:63:1A:DF:81:94
X509v3 Authority Key Identifier:
keyid:BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:68:e4:8a:52:8e:02:06:dd:e7:90:51:ce:ed:3a:c1:f5:83:
ea:3e:ef:f8:2f:5c:35:4f:11:1a:7e:57:46:59:aa:64:1f:0c:
54:b0:39:d1:4e:78:1e:ee:d6:00:45:73:ef:69:9e:1c:c7:c6:
c3:1c:1d:3d:56:fc:75:78:b9:d1:d8:d2:be:ba:fe:91:bb:ac:
bd:49:8b:13:26:55:2c:47:d0:74:60:fe:b6:e4:a1:b0:87:38:
c6:a1:61:33:4e:7c:16:59:fe:5d:56:76:3c:90:27:78:de:85:
4b:e4:4a:db:58:5d:22:ec:40:53:e2:19:46:01:02:c6:e4:b3:
96:ad:6d:72:1e:fb:80:c3:2b:63:9f:ac:1b:88:03:09:53:05:
11:83:0a:a2:40:df:77:32:29:19:36:09:ba:b3:a0:1f:f1:86:
33:e6:aa:98:2f:74:b3:e3:c6:60:bc:9b:92:8b:e5:92:a8:1c:
b7:a7:32:d3:46:8f:3a:4b:7e:96:03:4b:c9:55:c4:9d:1a:94:
4b:23:36:64:df:98:ea:00:2a:9f:50:81:24:3a:77:89:76:98:
2e:19:c2:dd:94:20:da:d4:f4:b9:4d:85:a7:12:bb:96:61:12:
29:b1:54:54:c9:17:0f:94:3b:f4:40:96:7e:dd:79:22:0b:7d:
04:69:2e:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040u2dYHtBOJ5E6v+5cyBPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMWY2Y2Q2ZmFiOTVkMjQxY2Q5YWM1Zjg1ZjRkMDVmOWRl
NThmOWIwHhcNMjYwMzI5MDkwMDQwWhcNMjYwMzMwMDkwMDQwWjAzMTEwLwYDVQQD
EyhhMjc1OTk5MGMwNzg3Y2Q2MzU5MDUxYWQzMzhkMTI2MzFhZGY4MTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPbxKxUmkL9PtWVN8L2hXQhltURg
iPV+cuEWCi+qXwh+/vdMq1gh3oACb2O7vzx8Hk4M4jZdn8z6WVbCWLANMKpSWtMk
AsK3aPROialtxek0kx7kX+zwbYyRYzQe9BtoNWP3OmmQX+2rjek7lE16z1ZLIqej
EY2diSF8lEyVTz+BKdXMRklLp/ShjDsHkXM3ofqWd6FwBo2fYVgGpYm/RMPnd+R5
zs0jNoilUYmEoV0/NKb9vTA8SGhcfIJpvH2F2G8Hue9ooa4kbJbMcoa5IflPU8IU
E9fBanTFbu175JDUEb2ZtkjTYIfY5ZCNVBlwzZl4rnvCcAu0vh78FVygFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJ1mZDAeHzWNZBRrTONEmMa34GUMB8GA1UdIwQY
MBaAFL8fbNb6uV0kHNmsX4X00F+d5Y+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lM2M5NzEtNTMyNC00MTM0LWJlYWQt
NTk3YzQzNTk4NTc3LzEvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lM2M5NzEtNTMyNC00MTM0LWJlYWQtNTk3YzQzNTk4NTc3
LzEvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGjkilKO
Agbd55BRzu06wfWD6j7v+C9cNU8RGn5XRlmqZB8MVLA50U54Hu7WAEVz72meHMfG
wxwdPVb8dXi50djSvrr+kbusvUmLEyZVLEfQdGD+tuShsIc4xqFhM058Fln+XVZ2
PJAneN6FS+RK21hdIuxAU+IZRgECxuSzlq1tch77gMMrY5+sG4gDCVMFEYMKokDf
dzIpGTYJurOgH/GGM+aqmC90s+PGYLybkovlkqgct6cy00aPOkt+lgNLyVXEnRqU
SyM2ZN+Y6gAqn1CBJDp3iXaYLhnC3ZQg2tT0uU2FpxK7lmESKbFUVMkXD5Q79ECW
ft15Igt9BGkutQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:12 2026 by rpki-client