Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
File: vx1f6v05F0clv-S--RvSfHsvb5E.mft (raw, json)
Hash identifier: r7YvP4YIp1KbRgfHnzfwDET2p/pz821mkbmMUXnTrFo=
Subject key identifier: BD:A5:D3:74:8C:9D:B6:59:7D:9D:1C:C7:BC:30:35:28:EA:A2:A4:2A
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 01A1AA831E72A8945366F516C4708F7D49D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
Manifest number: 1B12
Signing time: Thu 05 Nov 2026 07:01:22 +0000
Manifest this update: Thu 05 Nov 2026 07:01:22 +0000
Manifest next update: Fri 06 Nov 2026 07:01:22 +0000
Files and hashes: 1: HBbTZ3Q7BOwj640I0jYSUAVw3qo.roa (hash: o7T4Dh22yBlZp7Egs8uQK5dq+Y2Bk/ktQFDv0GOBtkk=)
2: b-3_s4OPm47G13nSnIa7XR69rcA.roa (hash: mFgZd4d8zued0wGbLsJXs0gSSRBKDoCC0snAs4/GtZw=)
3: dZqs8E7LyKHkfB4jh2GOoyNo76Y.roa (hash: zgo7CuU8bSN45o0HLMgfnKvZADdH4eXVAz8vL+7KLKo=)
4: vx1f6v05F0clv-S--RvSfHsvb5E.crl (hash: 2IcY/eLvIqMb8B6HXIEQ/RD7+D4yNxaassKLoZ79QMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:83:1e:72:a8:94:53:66:f5:16:c4:70:8f:7d:49:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Nov 5 07:01:22 2026 GMT
Not After : Nov 6 07:01:22 2026 GMT
Subject: CN=bda5d3748c9db6597d9d1cc7bc303528eaa2a42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:2e:ff:1f:c4:d4:83:fb:3c:fa:05:9c:c6:
2e:77:b9:6e:25:b8:4f:18:c2:cf:a6:46:fc:74:46:
b7:dc:ee:5d:24:ce:06:6d:09:06:8b:9f:4f:9a:ff:
a2:d3:28:e1:d0:f2:ec:ed:31:8f:ab:b8:03:c5:9a:
5c:12:59:fc:33:6e:9c:59:3f:7c:8b:cd:e6:c3:34:
f5:46:4b:58:42:06:ad:f7:c3:d2:ed:77:96:f3:42:
b8:76:c5:d1:3e:eb:7f:eb:cd:50:38:08:c8:d8:bf:
39:55:f1:fc:db:58:1f:df:61:e3:0a:05:89:b9:ae:
62:31:29:c3:24:32:64:c1:54:f6:6d:ec:0b:99:9f:
74:30:bc:05:1d:e3:73:4b:df:63:90:43:7f:37:0f:
f7:e1:24:be:b3:52:c3:e9:31:d7:e9:13:d4:97:09:
28:d6:69:a3:d3:89:c3:9e:59:8f:38:a1:a5:fa:9f:
5c:52:fe:5a:38:4a:8e:b8:a6:b3:e3:19:f1:ad:06:
e1:15:30:23:22:7d:2b:ef:6c:97:76:09:95:24:d1:
2b:ee:e6:7e:03:b9:0d:31:1d:ab:0b:6b:a0:3e:e9:
6c:76:de:f7:ef:7d:ae:37:76:38:8c:43:f2:8c:6e:
13:fd:4f:b6:fc:cf:63:c6:c2:a5:30:18:9a:ec:0f:
28:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A5:D3:74:8C:9D:B6:59:7D:9D:1C:C7:BC:30:35:28:EA:A2:A4:2A
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:61:ad:97:89:16:b1:02:31:2f:6d:26:7b:0a:50:56:34:6c:
c8:46:0d:66:0f:bc:ed:5d:49:f6:20:54:74:f8:21:67:92:f1:
e8:0c:f5:be:d7:9a:5a:eb:ed:32:99:f8:fd:14:7a:34:e2:18:
f1:95:cb:f8:84:fa:0b:6d:20:db:d2:2c:9d:0b:d6:1c:27:05:
54:80:9b:04:02:51:46:fc:23:00:a4:00:a8:f4:7b:69:4e:54:
c7:8a:a8:18:8a:b9:38:cc:ff:c7:87:51:77:92:53:28:37:1f:
89:d7:1d:e9:ac:bf:35:d4:b3:58:fa:bd:08:3f:78:22:f7:b9:
51:04:70:71:cd:a9:78:fd:c1:59:d0:d2:d6:0b:18:59:85:76:
fc:b2:c8:81:08:ba:d3:76:89:78:92:10:d3:90:17:e7:bb:00:
e6:12:fd:f6:4e:2c:3c:bd:f7:09:9c:5f:19:1f:37:0f:52:ca:
e5:de:83:4d:24:9f:e1:0f:2c:9e:dd:4e:20:ae:a2:93:af:72:
fa:83:8d:9e:9d:1d:14:f2:61:4a:88:a7:e8:44:45:1f:04:f1:
d2:34:46:c0:8c:c4:a6:7d:ff:0b:7e:27:45:0d:b8:c9:11:f2:
d4:3b:ea:69:a9:69:df:07:5b:ef:e5:56:d4:34:91:45:06:1d:
85:fb:de:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGqgx5yqJRTZvUWxHCPfUnXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMWQ1ZmVhZmQzOTE3NDcyNWJmZTRiZWY5MWJkMjdjN2Iy
ZjZmOTEwHhcNMjYxMTA1MDcwMTIyWhcNMjYxMTA2MDcwMTIyWjAzMTEwLwYDVQQD
EyhiZGE1ZDM3NDhjOWRiNjU5N2Q5ZDFjYzdiYzMwMzUyOGVhYTJhNDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOcu/x/E1IP7PPoFnMYud7luJbhP
GMLPpkb8dEa33O5dJM4GbQkGi59Pmv+i0yjh0PLs7TGPq7gDxZpcEln8M26cWT98
i83mwzT1RktYQgat98PS7XeW80K4dsXRPut/681QOAjI2L85VfH821gf32HjCgWJ
ua5iMSnDJDJkwVT2bewLmZ90MLwFHeNzS99jkEN/Nw/34SS+s1LD6THX6RPUlwko
1mmj04nDnlmPOKGl+p9cUv5aOEqOuKaz4xnxrQbhFTAjIn0r72yXdgmVJNEr7uZ+
A7kNMR2rC2ugPulsdt73732uN3Y4jEPyjG4T/U+2/M9jxsKlMBia7A8ooQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2l03SMnbZZfZ0cx7wwNSjqoqQqMB8GA1UdIwQY
MBaAFL8dX+r9ORdHJb/kvvkb0nx7L2+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMt
MWE4Yzg0MmFmZTJhLzEvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMtMWE4Yzg0MmFmZTJh
LzEvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWGtl4kW
sQIxL20mewpQVjRsyEYNZg+87V1J9iBUdPghZ5Lx6Az1vteaWuvtMpn4/RR6NOIY
8ZXL+IT6C20g29IsnQvWHCcFVICbBAJRRvwjAKQAqPR7aU5Ux4qoGIq5OMz/x4dR
d5JTKDcfidcd6ay/NdSzWPq9CD94Ive5UQRwcc2peP3BWdDS1gsYWYV2/LLIgQi6
03aJeJIQ05AX57sA5hL99k4sPL33CZxfGR83D1LK5d6DTSSf4Q8snt1OIK6ik69y
+oONnp0dFPJhSoin6ERFHwTx0jRGwIzEpn3/C34nRQ24yRHy1Dvqaalp3wdb7+VW
1DSRRQYdhfveaw==
-----END CERTIFICATE-----
Generated at Thu Nov 5 12:14:09 2026 by rpki-client