Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
File: vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json)
Hash identifier: gEzvhJkdwcVGUkzLjn345dyFs+1c9QPLBBNqt6UsUgY=
Subject key identifier: 2C:DE:B5:54:49:8E:66:44:0F:40:9D:5F:C9:CD:8A:B6:A3:C1:9A:3A
Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
Certificate issuer: /CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Certificate serial: 01A0F5D7136D35CFD9503645102DBBB27FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
Manifest number: 08B8
Signing time: Thu 01 Oct 2026 05:01:48 +0000
Manifest this update: Thu 01 Oct 2026 05:01:48 +0000
Manifest next update: Fri 02 Oct 2026 05:01:48 +0000
Files and hashes: 1: HvPuzupiO3Z449T8DejhvcuWJI8.roa (hash: d/KHbVCd1y2BI+CW/A2kCa+tSbu/RU5vseQ+Nk58moM=)
2: J9Tirn-HkifoA7eAO9_-_NX3I1I.asa (hash: IsPPMejoIJMmGMrrSwEk5XaCQkYzWFMok6cZ/Un8S2E=)
3: r113hOesw4Xd_yEaqFZzRYfSE7Y.roa (hash: tedMkLnP1L9n55ZYcISog8S1/Qbay3SL1Z2VckbCsdI=)
4: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: ViLMBPtvkmg6jPbSgGUJGl8qyHr7k2brI5EFZpWnYp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:d7:13:6d:35:cf:d9:50:36:45:10:2d:bb:b2:7f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Validity
Not Before: Oct 1 05:01:48 2026 GMT
Not After : Oct 2 05:01:48 2026 GMT
Subject: CN=2cdeb554498e66440f409d5fc9cd8ab6a3c19a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:20:45:92:54:71:aa:f2:72:71:09:3c:61:
91:d0:5e:c9:36:e1:e4:b7:f1:9c:32:bf:30:e8:c2:
16:ba:6c:86:ca:ee:59:91:b6:f7:f8:0c:bf:7e:da:
3f:49:35:8a:3c:89:16:3a:b1:6d:b2:08:fc:31:29:
03:39:9f:5c:3f:ac:48:a4:ba:f3:6b:12:31:2b:a1:
49:3a:00:1e:89:23:f4:f5:5a:ca:50:0a:74:01:5b:
1e:e1:ef:77:d7:aa:7f:99:b1:34:78:a6:94:e4:30:
f9:3d:0d:1e:ae:66:6c:10:ba:91:02:8b:e9:bc:d3:
d7:03:7c:aa:df:0a:ae:a9:af:b9:91:ad:e2:8a:f6:
f3:9c:f8:ef:14:ab:27:31:dd:7a:78:0d:9e:71:19:
73:7d:a0:0f:04:e2:08:a0:69:d7:2f:88:31:a4:42:
48:70:2a:0d:3e:43:7e:d4:df:58:bb:78:98:15:18:
8e:56:1b:e3:4b:24:a3:52:d4:56:44:51:81:b0:5b:
ab:a3:f0:b6:a9:91:4d:0d:76:22:03:f9:57:44:28:
f6:8b:cf:b3:6e:39:64:a1:21:72:0c:41:7c:0d:2a:
cb:df:1d:19:23:a8:97:b7:3d:ac:d9:45:1e:4a:cd:
86:0c:69:c2:dc:d1:1e:6b:ef:5b:3f:41:f7:9c:a9:
27:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DE:B5:54:49:8E:66:44:0F:40:9D:5F:C9:CD:8A:B6:A3:C1:9A:3A
X509v3 Authority Key Identifier:
keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:3f:14:bb:38:d9:16:5b:0d:1f:18:45:2f:99:09:02:58:4d:
47:ba:30:80:ad:09:67:43:c2:b2:8f:73:13:4a:bd:ff:70:d9:
c8:d3:46:1b:96:f0:e1:64:9a:95:d8:c1:d5:a0:09:8e:73:9b:
83:dd:e3:fd:db:cc:03:10:20:88:81:13:47:2b:de:6b:83:9a:
72:ae:f3:aa:ea:64:92:71:43:a6:17:38:d5:a0:23:39:dd:7f:
07:69:86:87:da:77:53:6a:a1:3f:89:f0:d6:90:d2:58:29:ec:
94:60:82:00:a8:23:ec:0e:a2:98:b3:3d:41:0c:de:5a:9a:ab:
13:5b:0d:21:e1:33:33:c8:30:5a:59:12:4c:48:3d:f9:ff:6e:
40:5f:00:a0:2e:73:b2:7b:22:c7:c9:a2:ef:17:5c:d4:e1:4a:
a8:43:8e:2b:5a:ee:35:42:4a:16:0c:7a:33:e6:51:13:ee:3b:
a3:5a:a6:40:21:8f:86:08:44:56:1c:47:06:8b:e7:2b:41:a8:
b7:32:0b:b6:52:7f:f1:42:f0:25:09:31:5c:cb:0d:e8:df:d4:
10:24:eb:e6:8f:04:3c:ce:a0:44:a2:15:0c:86:7b:7e:bb:89:
89:23:57:c8:87:10:27:3b:fb:44:f6:6f:ad:dc:b1:dc:02:b1:
bf:66:2e:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD11xNtNc/ZUDZFEC27sn+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMDYzZDk0NGJiODFmYzMxY2JhMTE0OTlkZDAwNmViNGVj
ZTk2MjQwHhcNMjYxMDAxMDUwMTQ4WhcNMjYxMDAyMDUwMTQ4WjAzMTEwLwYDVQQD
EygyY2RlYjU1NDQ5OGU2NjQ0MGY0MDlkNWZjOWNkOGFiNmEzYzE5YTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuIgRZJUcarycnEJPGGR0F7JNuHk
t/GcMr8w6MIWumyGyu5Zkbb3+Ay/fto/STWKPIkWOrFtsgj8MSkDOZ9cP6xIpLrz
axIxK6FJOgAeiSP09VrKUAp0AVse4e9316p/mbE0eKaU5DD5PQ0ermZsELqRAovp
vNPXA3yq3wquqa+5ka3iivbznPjvFKsnMd16eA2ecRlzfaAPBOIIoGnXL4gxpEJI
cCoNPkN+1N9Yu3iYFRiOVhvjSySjUtRWRFGBsFuro/C2qZFNDXYiA/lXRCj2i8+z
bjlkoSFyDEF8DSrL3x0ZI6iXtz2s2UUeSs2GDGnC3NEea+9bP0H3nKknuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzetVRJjmZED0CdX8nNirajwZo6MB8GA1UdIwQY
MBaAFL0GPZRLuB/DHLoRSZ3QButOzpYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlFZOWxFdTRIOE1jdWhGSm5kQUc2MDdPbGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lYmZjM2QtNTRmYy00NjQzLWJlNTYt
ZWE3MGEyOWM3NmYwLzEvdlFZOWxFdTRIOE1jdWhGSm5kQUc2MDdPbGlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9lYmZjM2QtNTRmYy00NjQzLWJlNTYtZWE3MGEyOWM3NmYw
LzEvdlFZOWxFdTRIOE1jdWhGSm5kQUc2MDdPbGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxD8UuzjZ
FlsNHxhFL5kJAlhNR7owgK0JZ0PCso9zE0q9/3DZyNNGG5bw4WSaldjB1aAJjnOb
g93j/dvMAxAgiIETRyvea4Oacq7zqupkknFDphc41aAjOd1/B2mGh9p3U2qhP4nw
1pDSWCnslGCCAKgj7A6imLM9QQzeWpqrE1sNIeEzM8gwWlkSTEg9+f9uQF8AoC5z
snsix8mi7xdc1OFKqEOOK1ruNUJKFgx6M+ZRE+47o1qmQCGPhghEVhxHBovnK0Go
tzILtlJ/8ULwJQkxXMsN6N/UECTr5o8EPM6gRKIVDIZ7fruJiSNXyIcQJzv7RPZv
rdyx3AKxv2YuMQ==
-----END CERTIFICATE-----
Generated at Thu Oct 1 13:25:53 2026 by rpki-client