Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
File: vZLq6eEWmeTOcQWAUZd2wwApYWI.mft (raw, json)
Hash identifier: 0dwojte6oqNNBSIg1tylt8dq2jk/w/s+TA81Raz7ZCQ=
Subject key identifier: 90:02:A4:60:93:C6:E3:CA:B1:D8:2F:8B:65:5B:7E:97:07:C4:F6:A4
Authority key identifier: BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
Certificate issuer: /CN=bd92eae9e11699e4ce710580519776c300296162
Certificate serial: 019D3940726221E619F5589E3DE40E85CFEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 11:00:17 +0000
Manifest this update: Sun 29 Mar 2026 11:00:17 +0000
Manifest next update: Mon 30 Mar 2026 11:00:17 +0000
Files and hashes: 1: bbUvQcBL8PFNw2iTLVczp7F8xLg.roa (hash: roBeIpW3t+PPAB0V8G5Pbdujfwh3PQz2ybcfRM5Trps=)
2: vZLq6eEWmeTOcQWAUZd2wwApYWI.crl (hash: ETBDhl/9RSZ4C2jnuBR30V0kDT322HPhnRT+a3Io1PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:72:62:21:e6:19:f5:58:9e:3d:e4:0e:85:cf:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd92eae9e11699e4ce710580519776c300296162
Validity
Not Before: Mar 29 11:00:17 2026 GMT
Not After : Mar 30 11:00:17 2026 GMT
Subject: CN=9002a46093c6e3cab1d82f8b655b7e9707c4f6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:32:72:75:9e:01:4a:f7:c9:9d:cc:f9:d3:
3d:c0:04:f2:2d:f4:fc:e8:00:ad:78:48:5e:62:7d:
16:78:1f:1c:38:b8:24:a6:97:d7:dd:12:d0:50:96:
df:0b:da:38:79:e9:48:c2:09:34:19:6f:6e:f4:05:
25:23:6a:d2:5d:bd:7c:7d:2a:fd:cd:9d:1a:a6:40:
c8:cd:d9:35:ec:a7:6c:15:f5:bf:a9:4d:19:2e:cb:
52:73:d8:43:dd:ec:35:f2:f0:95:d0:16:7e:ff:67:
8b:9d:34:6e:20:20:1f:88:b8:91:09:50:60:f1:2c:
e3:f6:99:86:e2:e7:a7:20:c0:a8:2a:d1:f2:5e:73:
6c:25:ca:6e:29:9e:0a:de:54:27:2c:b8:d5:ce:91:
34:7c:42:0e:63:6f:3d:d8:5f:73:01:6e:3e:e0:f6:
4b:bf:af:4b:87:2b:4b:de:44:ac:6e:96:6f:15:b3:
d7:e7:62:8e:81:7c:85:44:a0:cf:fe:48:0f:df:dc:
9d:72:2d:8d:b7:b4:15:9a:5d:a0:db:7a:67:b9:1d:
67:67:e7:a7:3e:c1:d2:a7:5d:bd:ca:2b:25:22:82:
9c:12:fd:08:f8:6e:53:01:55:64:cd:9a:88:73:76:
96:db:61:0a:96:b3:5f:49:52:2a:7a:27:64:57:3f:
e4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:02:A4:60:93:C6:E3:CA:B1:D8:2F:8B:65:5B:7E:97:07:C4:F6:A4
X509v3 Authority Key Identifier:
keyid:BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:02:4c:fe:a6:d5:b8:94:f3:77:d9:e5:88:1c:22:76:6e:a7:
51:96:ce:45:4a:08:5d:85:de:9f:41:c8:1a:90:39:e3:ad:13:
8a:8b:2a:12:7f:b7:04:d9:b0:89:f2:86:f4:06:c8:20:ce:04:
42:ed:b7:3c:e0:09:60:83:fc:89:a4:bd:dc:cd:41:3e:33:d8:
71:ba:d5:14:da:31:b4:be:d3:d3:02:db:0c:de:b0:b5:c1:77:
0e:d2:2a:c6:53:42:46:35:ed:a9:d5:f9:8d:0a:f2:97:4e:f3:
be:51:c9:94:6c:18:f4:c1:ee:80:9b:1b:2e:e5:84:83:10:f9:
f6:61:31:05:f5:3c:99:e2:5f:88:09:aa:90:40:75:a8:c6:b5:
2b:37:52:8d:b3:80:e3:11:66:33:b8:64:e5:e4:b6:8a:98:cc:
5f:25:34:4f:b5:15:2f:0a:3c:ad:7b:50:40:00:64:e8:70:41:
a7:2b:3f:61:57:74:0d:2f:11:a6:ea:1c:67:5f:2f:db:61:72:
1a:36:cb:01:86:68:3f:1a:f7:47:19:77:eb:cd:3d:12:5a:11:
c5:8e:82:c2:14:cb:6c:67:d4:49:6c:b4:7b:d3:1a:73:fc:da:
cf:16:74:3d:b7:ee:69:cb:fd:22:8f:14:82:54:8e:37:ec:3e:
67:6f:4d:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QHJiIeYZ9ViePeQOhc/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOTJlYWU5ZTExNjk5ZTRjZTcxMDU4MDUxOTc3NmMzMDAy
OTYxNjIwHhcNMjYwMzI5MTEwMDE3WhcNMjYwMzMwMTEwMDE3WjAzMTEwLwYDVQQD
Eyg5MDAyYTQ2MDkzYzZlM2NhYjFkODJmOGI2NTViN2U5NzA3YzRmNmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxcycnWeAUr3yZ3M+dM9wATyLfT8
6ACteEheYn0WeB8cOLgkppfX3RLQUJbfC9o4eelIwgk0GW9u9AUlI2rSXb18fSr9
zZ0apkDIzdk17KdsFfW/qU0ZLstSc9hD3ew18vCV0BZ+/2eLnTRuICAfiLiRCVBg
8Szj9pmG4uenIMCoKtHyXnNsJcpuKZ4K3lQnLLjVzpE0fEIOY2892F9zAW4+4PZL
v69LhytL3kSsbpZvFbPX52KOgXyFRKDP/kgP39ydci2Nt7QVml2g23pnuR1nZ+en
PsHSp129yislIoKcEv0I+G5TAVVkzZqIc3aW22EKlrNfSVIqeidkVz/kcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJACpGCTxuPKsdgvi2VbfpcHxPakMB8GA1UdIwQY
MBaAFL2S6unhFpnkznEFgFGXdsMAKWFiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80N2QyMTMtMjZkYS00NzFhLTk2Y2Qt
YzhhOWNhYTNiYmU5LzEvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80N2QyMTMtMjZkYS00NzFhLTk2Y2QtYzhhOWNhYTNiYmU5
LzEvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQJM/qbV
uJTzd9nliBwidm6nUZbORUoIXYXen0HIGpA5460TiosqEn+3BNmwifKG9AbIIM4E
Qu23POAJYIP8iaS93M1BPjPYcbrVFNoxtL7T0wLbDN6wtcF3DtIqxlNCRjXtqdX5
jQryl07zvlHJlGwY9MHugJsbLuWEgxD59mExBfU8meJfiAmqkEB1qMa1KzdSjbOA
4xFmM7hk5eS2ipjMXyU0T7UVLwo8rXtQQABk6HBBpys/YVd0DS8RpuocZ18v22Fy
GjbLAYZoPxr3Rxl36809EloRxY6CwhTLbGfUSWy0e9Mac/zazxZ0Pbfuacv9Io8U
glSON+w+Z29Naw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:08:15 2026 by rpki-client