Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
File: vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json)
Hash identifier: NQcmgk1l5OIyHV12e1V+bSQsuAROg/BzKIW4aszYGI0=
Subject key identifier: F6:A2:83:9A:0E:87:11:BB:7A:F1:90:6B:2D:0A:B0:16:73:8A:79:0B
Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
Certificate issuer: /CN=bd9a03521864fde571afadef01f32975983d1f62
Certificate serial: 01A179966A95B0E1E111FF54D03E381202BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
Manifest number: 05AD
Signing time: Mon 26 Oct 2026 19:01:03 +0000
Manifest this update: Mon 26 Oct 2026 19:01:03 +0000
Manifest next update: Tue 27 Oct 2026 19:01:03 +0000
Files and hashes: 1: DL1N_WLltaKiMUu8ebX9NozMvHY.asa (hash: GBlkMfbXm3G5bf+OMcuJMbHMOCV88FK9f+Gi2F4HMkU=)
2: ntc1WC3vm1k3JcSErDirE-bzwtM.roa (hash: L9yeSfoh1wmxKMxYP1W4Vm7cz9VV1GGVVoomG/BNrTg=)
3: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: ppdHng21sk7LdfKvh9ndu9/1qDqt8mWEDDEKF9/PcFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:96:6a:95:b0:e1:e1:11:ff:54:d0:3e:38:12:02:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62
Validity
Not Before: Oct 26 19:01:03 2026 GMT
Not After : Oct 27 19:01:03 2026 GMT
Subject: CN=f6a2839a0e8711bb7af1906b2d0ab016738a790b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:19:33:f1:30:09:93:9c:c8:83:c4:24:da:f4:
36:61:0d:df:9a:22:76:75:17:7f:bb:f6:6f:ec:fa:
e0:6f:e7:dc:3c:73:06:4d:b8:12:ee:b2:05:a3:86:
80:98:14:fe:5c:af:42:9f:91:0a:7e:a8:73:ee:65:
67:f0:fb:75:dc:fa:07:aa:17:e1:b1:af:14:d2:73:
bf:85:a1:46:3c:04:fc:5b:34:bc:b0:b7:58:1e:50:
93:0b:31:28:07:62:c8:bf:69:20:df:a4:d7:97:85:
a2:48:45:a0:8b:f6:1f:19:1f:1a:ee:16:91:28:39:
b2:0b:69:4a:f2:bd:13:24:75:a2:17:f8:76:f6:2d:
b5:8f:ef:5f:d7:ce:2e:c3:ea:0e:5a:45:e2:8b:f3:
f0:08:68:e1:38:64:2f:c7:00:ac:e5:20:43:34:bb:
65:d9:ae:d9:a0:a0:f4:d4:4b:af:14:fb:27:67:98:
b2:b9:53:62:10:14:21:f4:d3:e2:eb:fb:dc:14:f8:
d4:44:3b:ea:9e:a7:2c:4b:fd:2f:68:bc:46:28:75:
11:99:89:bd:2d:34:4e:3b:16:64:f1:70:53:bc:d2:
1b:86:d9:bb:21:0f:69:73:9b:c9:cc:4c:91:7b:7c:
d1:8a:76:ee:cc:d6:a6:f7:c2:8a:6a:f5:0e:35:b7:
ca:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A2:83:9A:0E:87:11:BB:7A:F1:90:6B:2D:0A:B0:16:73:8A:79:0B
X509v3 Authority Key Identifier:
keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1b:11:db:06:80:a9:8c:0f:1b:59:fa:01:6a:0d:5f:a2:39:
9c:b4:9c:05:7f:62:ad:57:e6:a3:b7:37:a0:c2:91:1e:c1:4e:
29:02:bc:cb:1a:92:ee:ec:1d:67:9a:18:02:91:e0:90:ca:dc:
68:b9:4c:98:b0:1f:c5:32:97:3e:8a:54:05:a6:0c:a3:32:07:
f9:b1:d1:c5:6f:65:99:e5:db:5f:b8:f3:f5:b9:25:ae:e3:92:
21:2a:9c:58:6d:5b:2b:39:3a:ef:23:d4:03:1f:d0:93:1f:99:
aa:d4:f6:a9:06:62:45:18:0c:08:2e:40:a0:52:a0:a8:7a:ae:
d9:40:39:4a:9d:47:09:fc:fa:bd:f8:76:03:33:52:02:1b:1b:
be:d0:35:77:8b:e2:06:15:2a:4a:f2:99:f2:e9:a4:af:fb:69:
1e:86:2c:4e:43:9f:59:ca:16:4d:ce:73:d8:81:ea:be:54:4a:
34:f4:88:8c:26:dd:33:f3:cc:07:2f:52:8a:21:47:a5:64:57:
49:6c:3c:93:e0:b4:8c:04:a1:c2:ab:1e:eb:31:07:1c:87:dc:
41:54:62:79:79:b5:7c:45:b1:7c:12:5a:05:db:6d:ee:a2:ed:
4c:a7:37:b9:0d:32:34:a4:f7:c9:d6:24:89:d8:f7:ff:d1:22:
ea:56:cc:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF5lmqVsOHhEf9U0D44EgK9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOWEwMzUyMTg2NGZkZTU3MWFmYWRlZjAxZjMyOTc1OTgz
ZDFmNjIwHhcNMjYxMDI2MTkwMTAzWhcNMjYxMDI3MTkwMTAzWjAzMTEwLwYDVQQD
EyhmNmEyODM5YTBlODcxMWJiN2FmMTkwNmIyZDBhYjAxNjczOGE3OTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBkz8TAJk5zIg8Qk2vQ2YQ3fmiJ2
dRd/u/Zv7Prgb+fcPHMGTbgS7rIFo4aAmBT+XK9Cn5EKfqhz7mVn8Pt13PoHqhfh
sa8U0nO/haFGPAT8WzS8sLdYHlCTCzEoB2LIv2kg36TXl4WiSEWgi/YfGR8a7haR
KDmyC2lK8r0TJHWiF/h29i21j+9f184uw+oOWkXii/PwCGjhOGQvxwCs5SBDNLtl
2a7ZoKD01EuvFPsnZ5iyuVNiEBQh9NPi6/vcFPjURDvqnqcsS/0vaLxGKHURmYm9
LTROOxZk8XBTvNIbhtm7IQ9pc5vJzEyRe3zRinbuzNam98KKavUONbfKIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaig5oOhxG7evGQay0KsBZzinkLMB8GA1UdIwQY
MBaAFL2aA1IYZP3lca+t7wHzKXWYPR9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hZDU3MGUtN2UyMS00NjcxLWE3YmQt
Njc5NWU2Yzg3MjQ3LzEvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9hZDU3MGUtN2UyMS00NjcxLWE3YmQtNjc5NWU2Yzg3MjQ3
LzEvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRsR2waA
qYwPG1n6AWoNX6I5nLScBX9irVfmo7c3oMKRHsFOKQK8yxqS7uwdZ5oYApHgkMrc
aLlMmLAfxTKXPopUBaYMozIH+bHRxW9lmeXbX7jz9bklruOSISqcWG1bKzk67yPU
Ax/Qkx+ZqtT2qQZiRRgMCC5AoFKgqHqu2UA5Sp1HCfz6vfh2AzNSAhsbvtA1d4vi
BhUqSvKZ8umkr/tpHoYsTkOfWcoWTc5z2IHqvlRKNPSIjCbdM/PMBy9SiiFHpWRX
SWw8k+C0jAShwqse6zEHHIfcQVRieXm1fEWxfBJaBdtt7qLtTKc3uQ0yNKT3ydYk
idj3/9Ei6lbMYg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:10:08 2026 by rpki-client