Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
File: vZyAy-XVeXI0X1-l66NchoieVco.mft (raw, json)
Hash identifier: y/Vbe7yXhvsIC6TBqIo2B4KDEJPb1kNNU6+ZQeBz/c0=
Subject key identifier: D8:7A:DD:65:CC:DD:DE:5F:C7:6B:24:5B:85:4A:50:03:79:81:49:53
Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Certificate serial: 019D37897B8A764E3D2E9C1ED4738C42CB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
Manifest number: 120E
Signing time: Sun 29 Mar 2026 03:00:49 +0000
Manifest this update: Sun 29 Mar 2026 03:00:49 +0000
Manifest next update: Mon 30 Mar 2026 03:00:49 +0000
Files and hashes: 1: C5LrSLcRHuSrJ5qA7Ys4buh2aCk.roa (hash: 6iHK7B3B74ju73Bu4UIi5X39juU33AzJxjN7DE2wqoc=)
2: vZyAy-XVeXI0X1-l66NchoieVco.crl (hash: gfHenm9tHDjgo7oqnK4CUndNXprcdfCbhdvrtx/q7xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:7b:8a:76:4e:3d:2e:9c:1e:d4:73:8c:42:cb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Validity
Not Before: Mar 29 03:00:49 2026 GMT
Not After : Mar 30 03:00:49 2026 GMT
Subject: CN=d87add65ccddde5fc76b245b854a500379814953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:39:90:45:d9:46:85:ea:dc:b9:20:e8:6d:
b7:eb:47:17:62:06:b1:1d:a4:d6:8a:d5:0a:20:bd:
a5:f9:1c:ec:c8:db:3e:32:2a:26:fb:9d:99:b1:04:
ff:1a:38:ce:71:6b:03:b1:f1:e7:c5:93:6c:73:90:
b8:bb:dd:9d:a5:de:f8:64:21:4f:41:0e:2d:1c:81:
e5:f2:95:5c:73:71:ab:71:7e:27:76:a1:41:05:ed:
d4:54:4d:97:25:8c:24:ad:76:ad:9f:e8:6b:1c:b4:
bd:10:ef:57:85:0d:2f:05:65:a0:93:e3:38:b8:f3:
40:8b:9b:de:56:4d:15:b4:76:66:14:5e:3d:ae:6c:
bf:87:6c:19:0b:28:27:97:8b:57:d7:55:67:c3:28:
b3:22:d1:fc:47:2a:45:bf:58:68:93:6e:7f:16:d6:
92:e2:2f:40:d4:07:b1:07:7d:3b:8a:fe:0d:50:d9:
81:00:1d:3b:34:34:e7:5f:db:b2:fd:f8:f0:b9:f2:
96:a2:79:d9:28:56:eb:74:34:59:dc:d4:38:d6:6c:
a0:3a:ad:4a:ad:32:ea:96:f1:a6:46:cb:cc:5f:93:
8b:64:80:f8:b7:47:fb:92:bd:c2:a5:8f:9c:6d:a9:
ef:df:0b:bf:08:14:f9:01:61:cc:ca:b1:23:20:a3:
59:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7A:DD:65:CC:DD:DE:5F:C7:6B:24:5B:85:4A:50:03:79:81:49:53
X509v3 Authority Key Identifier:
keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fc:a5:e0:59:ac:65:f8:b1:31:1b:5d:22:25:ea:20:90:e2:
d0:43:1a:23:b3:00:7f:e5:e9:b7:bb:79:e0:31:dc:13:4b:6d:
c4:3c:c9:17:81:dd:b7:c3:c2:7a:80:ff:cd:c4:e1:19:74:21:
3b:7e:30:5b:e6:b0:24:f9:1e:d6:34:c8:dd:62:0c:e6:5d:37:
72:a4:c9:69:1c:cb:13:60:e8:3f:41:0e:20:42:b4:37:30:66:
1b:8d:94:c3:0d:eb:c3:98:f6:57:8c:7a:6e:dc:18:fc:ab:05:
0d:19:95:f8:43:ce:0c:d8:6b:74:cc:0f:b3:b9:f3:da:3e:55:
ed:8c:be:65:a4:42:02:dc:a0:a4:63:fe:81:95:cf:46:27:23:
53:62:b6:ca:6d:99:90:e6:f9:67:3c:a3:6c:a0:24:26:5b:dc:
50:c1:9c:7c:9b:a0:00:6d:61:e0:0e:4a:7f:29:d5:56:70:77:
05:1d:04:3e:9d:4d:74:72:3a:48:8f:ad:d9:a0:a2:ad:18:34:
96:f9:8d:de:97:fa:23:92:48:63:42:8e:de:19:5f:92:0f:33:
8f:57:80:b6:b5:1d:93:c1:d3:76:f9:a8:65:1d:af:9e:a2:e0:
ac:15:3e:14:dd:32:38:10:18:b0:3f:99:12:05:a6:9f:eb:60:
20:ab:42:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iXuKdk49Lpwe1HOMQstZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOWM4MGNiZTVkNTc5NzIzNDVmNWZhNWViYTM1Yzg2ODg5
ZTU1Y2EwHhcNMjYwMzI5MDMwMDQ5WhcNMjYwMzMwMDMwMDQ5WjAzMTEwLwYDVQQD
EyhkODdhZGQ2NWNjZGRkZTVmYzc2YjI0NWI4NTRhNTAwMzc5ODE0OTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt85kEXZRoXq3Lkg6G2360cXYgax
HaTWitUKIL2l+RzsyNs+Miom+52ZsQT/GjjOcWsDsfHnxZNsc5C4u92dpd74ZCFP
QQ4tHIHl8pVcc3GrcX4ndqFBBe3UVE2XJYwkrXatn+hrHLS9EO9XhQ0vBWWgk+M4
uPNAi5veVk0VtHZmFF49rmy/h2wZCygnl4tX11VnwyizItH8RypFv1hok25/FtaS
4i9A1AexB307iv4NUNmBAB07NDTnX9uy/fjwufKWonnZKFbrdDRZ3NQ41mygOq1K
rTLqlvGmRsvMX5OLZID4t0f7kr3CpY+cbanv3wu/CBT5AWHMyrEjIKNZgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNh63WXM3d5fx2skW4VKUAN5gUlTMB8GA1UdIwQY
MBaAFL2cgMvl1XlyNF9fpeujXIaInlXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iZGNiYzQtNjNiNy00YWU1LTg2ODQt
NjBlN2U0NTM5OWU2LzEvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9iZGNiYzQtNjNiNy00YWU1LTg2ODQtNjBlN2U0NTM5OWU2
LzEvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPyl4Fms
ZfixMRtdIiXqIJDi0EMaI7MAf+Xpt7t54DHcE0ttxDzJF4Hdt8PCeoD/zcThGXQh
O34wW+awJPke1jTI3WIM5l03cqTJaRzLE2DoP0EOIEK0NzBmG42Uww3rw5j2V4x6
btwY/KsFDRmV+EPODNhrdMwPs7nz2j5V7Yy+ZaRCAtygpGP+gZXPRicjU2K2ym2Z
kOb5ZzyjbKAkJlvcUMGcfJugAG1h4A5KfynVVnB3BR0EPp1NdHI6SI+t2aCirRg0
lvmN3pf6I5JIY0KO3hlfkg8zj1eAtrUdk8HTdvmoZR2vnqLgrBU+FN0yOBAYsD+Z
EgWmn+tgIKtCiw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:22 2026 by rpki-client