Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
File: vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json)
Hash identifier: 7whYK8PUK5vMFMWQ2Y3k72vOFaFP7BFNzBoh7RlEcE8=
Subject key identifier: B4:71:65:3B:D7:D1:61:84:1C:72:07:C4:08:DE:24:D8:B0:EC:39:28
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial: 019DB39046A603D9DB302EA39A842E48D1EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
Manifest number: 0A66
Signing time: Wed 22 Apr 2026 05:01:10 +0000
Manifest this update: Wed 22 Apr 2026 05:01:10 +0000
Manifest next update: Thu 23 Apr 2026 05:01:10 +0000
Files and hashes: 1: gOX8D8p806A5CJ7mpndk-EXr948.roa (hash: 2sz6qMSJk6TSCV4AbeeKZkEdeqE+n55SbpZkpDDbX6E=)
2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: m6xbHjqAubPJVFpGqbMc5Nfjk8i5DGgjG4cG72ORZIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:90:46:a6:03:d9:db:30:2e:a3:9a:84:2e:48:d1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Validity
Not Before: Apr 22 05:01:10 2026 GMT
Not After : Apr 23 05:01:10 2026 GMT
Subject: CN=b471653bd7d161841c7207c408de24d8b0ec3928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:ca:b7:98:93:c2:f1:e3:d3:91:36:fe:91:
3e:55:8f:91:22:d0:c7:de:3d:dc:23:69:88:9e:6e:
de:84:7f:c0:90:5e:59:5c:2b:05:68:20:35:86:a8:
b9:d8:ad:02:31:14:00:c1:aa:4d:9d:1e:38:4d:fa:
b4:8c:00:ca:0a:60:90:59:ba:24:c1:62:53:03:0b:
86:64:e3:09:b8:7a:7b:1f:8e:c0:bd:8c:c5:6d:67:
11:2a:0e:50:18:9d:03:79:5c:fd:ff:05:78:31:02:
89:84:88:60:32:09:8d:ff:d6:75:a9:7f:d8:03:82:
c0:d6:3e:a4:97:5a:43:52:8b:da:ec:39:09:92:f4:
82:aa:bf:48:dc:05:e8:d9:7a:ed:39:aa:32:b0:e3:
2b:4e:cd:c6:3e:0c:2c:6f:71:ee:1d:d2:de:16:f9:
04:4c:59:c1:ce:af:88:11:b1:f0:cd:1f:1c:28:0c:
cd:4c:37:b0:57:40:c1:5e:b3:96:04:3d:ad:99:c7:
33:09:70:02:08:33:d7:be:f9:ef:e6:9d:23:71:d6:
b1:83:e2:d7:c1:f7:c3:ba:38:5b:b0:a0:c4:c1:86:
d0:85:33:77:ff:2b:d0:4e:15:fa:45:85:5e:d9:d7:
c4:47:b6:96:e8:25:b0:a2:60:01:5c:54:4d:50:cb:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:71:65:3B:D7:D1:61:84:1C:72:07:C4:08:DE:24:D8:B0:EC:39:28
X509v3 Authority Key Identifier:
keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fc:22:50:5a:5c:fa:e8:f9:44:23:16:fd:dd:ec:2d:c6:b6:
c5:d3:ec:7c:a1:52:d5:15:6e:f7:f2:ec:57:be:91:3e:fa:75:
fd:bd:27:7d:0e:95:2d:7f:09:d9:dd:69:78:84:9d:b5:81:3f:
f6:68:14:e3:29:c8:d5:f6:7f:bd:aa:ab:1f:e6:85:7c:8c:26:
cd:1e:90:41:af:92:90:8b:b5:e0:3d:c5:12:08:2a:f4:80:74:
b7:62:f6:23:6e:7c:8b:32:b8:6f:41:9b:aa:eb:24:35:f7:bc:
d6:0f:9b:ff:4b:7a:00:ba:a6:f0:d8:e8:18:c1:7e:c8:16:64:
dd:17:9b:8d:6e:f1:4e:62:1e:22:9d:e0:74:82:c2:3b:84:07:
df:8b:f7:16:bb:97:56:45:ae:c0:ed:c5:77:5b:32:62:e3:0d:
26:0d:e4:61:05:ad:66:40:fc:5a:76:a6:59:d5:c1:95:a6:33:
e5:54:33:4a:fa:cd:5f:70:7d:51:15:74:82:78:46:32:b9:2e:
8e:20:c7:dd:de:8a:f7:6f:92:b8:04:98:ab:cc:ab:ce:21:c2:
2a:88:57:39:3e:f1:59:5f:92:43:3e:98:2a:d9:aa:90:ea:df:
75:5e:b8:d4:29:36:9c:07:ef:6d:7b:1d:83:ad:50:6a:fa:15:
ca:fc:01:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2zkEamA9nbMC6jmoQuSNHsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOTBiYzNlMzcxMTQwYjQyYTIxZDY5N2Q4MzAwZDk0MTBh
MjQ5YWEwHhcNMjYwNDIyMDUwMTEwWhcNMjYwNDIzMDUwMTEwWjAzMTEwLwYDVQQD
EyhiNDcxNjUzYmQ3ZDE2MTg0MWM3MjA3YzQwOGRlMjRkOGIwZWMzOTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUTKt5iTwvHj05E2/pE+VY+RItDH
3j3cI2mInm7ehH/AkF5ZXCsFaCA1hqi52K0CMRQAwapNnR44Tfq0jADKCmCQWbok
wWJTAwuGZOMJuHp7H47AvYzFbWcRKg5QGJ0DeVz9/wV4MQKJhIhgMgmN/9Z1qX/Y
A4LA1j6kl1pDUova7DkJkvSCqr9I3AXo2XrtOaoysOMrTs3GPgwsb3HuHdLeFvkE
TFnBzq+IEbHwzR8cKAzNTDewV0DBXrOWBD2tmcczCXACCDPXvvnv5p0jcdaxg+LX
wffDujhbsKDEwYbQhTN3/yvQThX6RYVe2dfER7aW6CWwomABXFRNUMvsJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRxZTvX0WGEHHIHxAjeJNiw7DkoMB8GA1UdIwQY
MBaAFL2QvD43EUC0KiHWl9gwDZQQokmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81NGU4YTYtNGQ4MS00ODc1LWE5ODct
ZmViMGU1MTVjMDJjLzEvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi81NGU4YTYtNGQ4MS00ODc1LWE5ODctZmViMGU1MTVjMDJj
LzEvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPwiUFpc
+uj5RCMW/d3sLca2xdPsfKFS1RVu9/LsV76RPvp1/b0nfQ6VLX8J2d1peISdtYE/
9mgU4ynI1fZ/vaqrH+aFfIwmzR6QQa+SkIu14D3FEggq9IB0t2L2I258izK4b0Gb
quskNfe81g+b/0t6ALqm8NjoGMF+yBZk3RebjW7xTmIeIp3gdILCO4QH34v3FruX
VkWuwO3Fd1syYuMNJg3kYQWtZkD8WnamWdXBlaYz5VQzSvrNX3B9URV0gnhGMrku
jiDH3d6K92+SuASYq8yrziHCKohXOT7xWV+SQz6YKtmqkOrfdV641Ck2nAfvbXsd
g61QavoVyvwB3g==
-----END CERTIFICATE-----
Generated at Wed Apr 22 07:05:54 2026 by rpki-client