Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
File: vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft (raw, json)
Hash identifier: j7qLuW+JTiAMjPuZCzcsscMtnqV2z/gVWJ3jfVL+aAs=
Subject key identifier: 7D:41:13:13:CA:8A:0A:B6:A4:7C:07:ED:24:9D:3F:8B:DB:36:2B:D6
Authority key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
Certificate issuer: /CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Certificate serial: 019D37C0C3FC10EFCF62A358B5D66C72BD49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
Manifest number: 0EC0
Signing time: Sun 29 Mar 2026 04:01:13 +0000
Manifest this update: Sun 29 Mar 2026 04:01:13 +0000
Manifest next update: Mon 30 Mar 2026 04:01:13 +0000
Files and hashes: 1: 1-K5viE_tD80UCpoY9vGuHEt9bYY.roa (hash: 0PAUh76wGv4SeSVcF89n/81BqOvrny0HN1SsAK5KcyI=)
2: MUcb1NLuFfY7MdF9X5f0dfTZRhE.roa (hash: 6+se8GWynfFcWjVvzZnWa9acPijPMo+xD9nNkmbbk70=)
3: vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl (hash: PvR04ObbNLquc1QrGRNV4Mxdua7mDtr+u0iBC75Qbd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c3:fc:10:ef:cf:62:a3:58:b5:d6:6c:72:bd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Validity
Not Before: Mar 29 04:01:13 2026 GMT
Not After : Mar 30 04:01:13 2026 GMT
Subject: CN=7d411313ca8a0ab6a47c07ed249d3f8bdb362bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5e:66:1b:80:f3:a6:fd:bb:af:c5:df:72:53:
64:b0:9c:e2:85:f2:52:ff:06:0f:0f:9f:b8:27:59:
f4:a2:ea:e2:6d:43:c5:d0:b9:ab:ed:02:dc:18:c0:
a2:8d:07:39:68:69:c9:f9:57:76:4b:c6:42:c1:94:
e3:48:5e:43:dd:b7:68:18:16:41:dc:3e:07:45:e7:
ee:60:6a:a4:46:e2:6d:ec:5f:5c:47:2f:97:74:70:
b7:d2:75:b3:e0:38:c5:c2:e0:73:e4:46:8d:db:f3:
88:bc:3c:e2:ce:a7:04:8b:f8:fb:9c:b5:c0:a8:0b:
32:0c:f7:4d:3b:64:1a:df:bf:13:4b:e9:2b:33:60:
b5:24:fa:06:b7:6d:de:1a:fd:50:e4:9b:69:5f:6a:
b1:33:aa:f5:9b:00:68:fe:74:3c:47:41:7c:1a:0d:
36:0c:6d:c8:41:59:79:1b:f7:e4:1c:e1:6f:32:f3:
f6:dd:46:89:a3:62:8a:a6:8b:eb:9a:57:05:d2:1b:
83:cc:6a:0d:b3:bf:c4:74:bd:c7:25:7d:b7:9f:22:
e5:0a:cb:0d:0e:57:ff:de:52:ef:7f:de:c2:9c:c7:
a7:26:55:6e:a4:1b:e0:e8:b3:dc:c5:42:08:d6:07:
ff:b7:b2:8b:55:6f:46:91:c1:f0:4e:92:23:93:70:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:41:13:13:CA:8A:0A:B6:A4:7C:07:ED:24:9D:3F:8B:DB:36:2B:D6
X509v3 Authority Key Identifier:
keyid:BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3b:7a:36:72:7e:a2:97:25:98:a4:1b:8e:a4:22:95:29:0e:
4e:b7:f7:90:4c:a4:ae:90:db:d4:2c:94:e4:f0:f9:78:00:74:
c4:65:ff:36:ab:e5:36:1d:96:f9:9c:37:80:12:92:53:c7:5c:
0d:4a:ae:07:03:94:9e:3d:17:56:a0:2b:70:2c:82:5c:e2:75:
c4:f3:90:46:66:b8:87:9b:f3:68:24:0c:2d:4c:21:de:f8:b4:
88:eb:64:51:af:b3:2e:15:82:2b:d0:e8:46:32:4f:d6:86:c7:
b9:dc:82:95:d7:23:a6:c0:ce:91:e1:b9:3d:ce:91:df:ec:2a:
a8:3a:86:de:27:b9:10:dd:84:4f:b3:27:e2:6c:df:50:aa:22:
67:86:69:2f:fc:ec:c5:b9:1f:0c:24:09:3c:70:67:cd:11:fa:
4e:52:f0:3c:22:ea:59:4b:b7:32:e5:3a:db:de:4a:f8:51:ca:
f8:1b:a1:d2:02:91:e3:89:73:59:8d:2f:38:28:93:93:61:02:
6c:ca:28:b4:ff:6a:84:28:ef:9f:f7:78:8e:46:06:08:fb:c3:
25:d2:ba:59:a3:f6:2c:1a:e0:56:5c:64:c1:5a:01:e5:a5:b4:
36:c5:55:ec:b6:ee:f8:47:6a:da:f1:30:df:b8:81:af:f6:d0:
fc:3f:a7:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wMP8EO/PYqNYtdZscr1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNjYzYzZlNzc5ZGFlOWJkYjA0Njg1NGYxODlmZThjNWMz
YzMyZTEwHhcNMjYwMzI5MDQwMTEzWhcNMjYwMzMwMDQwMTEzWjAzMTEwLwYDVQQD
Eyg3ZDQxMTMxM2NhOGEwYWI2YTQ3YzA3ZWQyNDlkM2Y4YmRiMzYyYmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7l5mG4Dzpv27r8XfclNksJzihfJS
/wYPD5+4J1n0ouribUPF0Lmr7QLcGMCijQc5aGnJ+Vd2S8ZCwZTjSF5D3bdoGBZB
3D4HRefuYGqkRuJt7F9cRy+XdHC30nWz4DjFwuBz5EaN2/OIvDzizqcEi/j7nLXA
qAsyDPdNO2Qa378TS+krM2C1JPoGt23eGv1Q5JtpX2qxM6r1mwBo/nQ8R0F8Gg02
DG3IQVl5G/fkHOFvMvP23UaJo2KKpovrmlcF0huDzGoNs7/EdL3HJX23nyLlCssN
Dlf/3lLvf97CnMenJlVupBvg6LPcxUII1gf/t7KLVW9GkcHwTpIjk3CaqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1BExPKigq2pHwH7SSdP4vbNivWMB8GA1UdIwQY
MBaAFLxmPG53na6b2wRoVPGJ/oxcPDLhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkdZOGJuZWRycHZiQkdoVThZbi1qRnc4TXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83YThmM2YtMzA0Yy00YTI2LWFlY2Et
MThiZGZlOGNjMGNkLzEvdkdZOGJuZWRycHZiQkdoVThZbi1qRnc4TXVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83YThmM2YtMzA0Yy00YTI2LWFlY2EtMThiZGZlOGNjMGNk
LzEvdkdZOGJuZWRycHZiQkdoVThZbi1qRnc4TXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDt6NnJ+
opclmKQbjqQilSkOTrf3kEykrpDb1CyU5PD5eAB0xGX/NqvlNh2W+Zw3gBKSU8dc
DUquBwOUnj0XVqArcCyCXOJ1xPOQRma4h5vzaCQMLUwh3vi0iOtkUa+zLhWCK9Do
RjJP1obHudyCldcjpsDOkeG5Pc6R3+wqqDqG3ie5EN2ET7Mn4mzfUKoiZ4ZpL/zs
xbkfDCQJPHBnzRH6TlLwPCLqWUu3MuU6295K+FHK+Buh0gKR44lzWY0vOCiTk2EC
bMootP9qhCjvn/d4jkYGCPvDJdK6WaP2LBrgVlxkwVoB5aW0NsVV7Lbu+Edq2vEw
37iBr/bQ/D+nCA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:17 2026 by rpki-client