Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File: vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier: jcRLJtbPkFqafPQVJHnwSvL4U7qARq15UXICqG0HZ6Q=
Subject key identifier: CF:E7:26:2B:3E:D3:54:75:86:41:71:2C:F6:75:C2:4A:E8:1A:CF:7D
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial: 01A10BF076A12927F64DF1734E251D14B4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number: 1A0A
Signing time: Mon 05 Oct 2026 12:01:10 +0000
Manifest this update: Mon 05 Oct 2026 12:01:10 +0000
Manifest next update: Tue 06 Oct 2026 12:01:10 +0000
Files and hashes: 1: Hj4v62AOdoRZqYCBUDTjMFLo8KI.roa (hash: YWbpGzjtAJu7tqoItoovhEd5x36ZXMAx6yUUYU//amY=)
2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: 0/CfQnHUOkVpkJomE9AOZ+N7miTDQtYqUCrNDu3iko4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:f0:76:a1:29:27:f6:4d:f1:73:4e:25:1d:14:b4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Validity
Not Before: Oct 5 12:01:10 2026 GMT
Not After : Oct 6 12:01:10 2026 GMT
Subject: CN=cfe7262b3ed354758641712cf675c24ae81acf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:35:2b:dd:6e:3b:e5:3b:be:fc:65:77:0e:
60:e2:3a:f5:3b:99:2b:0d:70:72:8b:df:31:53:c3:
22:4f:b1:b7:f6:02:78:de:e3:22:7d:d3:fd:03:73:
f9:9e:75:a9:3e:49:5e:97:7b:87:d8:42:7d:3c:6d:
92:ba:67:9b:52:f9:92:88:18:82:76:28:b0:bd:fc:
14:eb:aa:e3:da:42:98:35:55:d9:0c:75:a2:0d:6c:
08:64:2e:93:52:35:2d:6f:f8:7c:24:81:b6:7d:da:
d1:b1:66:5e:93:50:63:07:0a:f8:38:1b:23:8d:89:
da:25:c9:95:98:02:cd:71:19:05:9d:33:27:88:40:
01:75:38:c6:38:72:4b:a1:79:97:0f:51:41:0e:b6:
ce:9c:71:c6:82:8f:33:df:89:6d:5d:ff:ef:57:6d:
d5:8f:82:5f:79:7a:62:bd:f1:fe:dd:02:b2:18:3b:
d0:bb:2f:b0:78:ce:59:72:0b:71:83:1f:b0:20:5e:
56:65:88:44:16:ee:95:3f:05:0a:a6:15:6c:85:af:
93:b3:e6:6c:42:d6:4d:60:36:e0:66:24:85:24:16:
17:05:93:4f:9f:ce:a9:6a:40:3a:cd:42:65:11:82:
aa:5f:d4:ad:4f:88:58:16:5e:b1:ec:66:fd:54:21:
bc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E7:26:2B:3E:D3:54:75:86:41:71:2C:F6:75:C2:4A:E8:1A:CF:7D
X509v3 Authority Key Identifier:
keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2f:5f:83:49:f6:d1:02:46:6e:f2:11:e6:40:34:b3:1e:00:
24:9b:66:d5:dc:18:8e:0e:59:6f:ad:85:b5:d7:62:0d:f9:0f:
0e:e6:99:f2:10:31:aa:ed:2f:3e:eb:85:5b:81:5a:c4:db:39:
82:33:51:b8:6c:31:48:e0:ae:d2:73:bd:26:74:b9:cb:45:bd:
dd:4f:77:f6:ee:63:7b:df:76:fe:f0:66:31:17:84:0a:0e:33:
60:c5:11:7c:7f:ba:bb:87:53:ad:b0:b6:eb:82:79:be:41:2a:
fc:cd:5d:4b:f7:20:5d:98:91:57:85:8a:6b:51:c1:5d:52:f7:
62:90:02:e2:6e:63:e6:7e:ec:96:db:ce:c0:cf:c4:cc:6a:bd:
3d:21:83:6e:af:f8:b3:11:75:97:6b:29:76:b3:7a:8b:b4:d5:
70:e5:e3:da:ce:49:86:6e:51:cd:e0:8a:ad:a2:4b:72:3a:ea:
9f:50:a1:e5:64:29:59:43:c6:e6:4e:8a:37:03:8d:85:b7:69:
b7:22:14:e8:f4:c8:72:ba:5e:89:4f:51:eb:2f:9a:51:c6:b4:
36:b6:a1:ef:d8:e5:ac:05:e3:80:98:54:02:c0:77:18:a7:f8:
4f:c7:23:e7:9c:03:02:10:61:5f:78:a7:3f:25:9b:e4:9a:b2:
22:21:e1:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEL8HahKSf2TfFzTiUdFLTzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOTAwYmI5YWM2MDY5YzUxM2I1ODJkNjFmZDgxZWNjZDU2
MWE1NjcwHhcNMjYxMDA1MTIwMTEwWhcNMjYxMDA2MTIwMTEwWjAzMTEwLwYDVQQD
EyhjZmU3MjYyYjNlZDM1NDc1ODY0MTcxMmNmNjc1YzI0YWU4MWFjZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApes1K91uO+U7vvxldw5g4jr1O5kr
DXByi98xU8MiT7G39gJ43uMifdP9A3P5nnWpPklel3uH2EJ9PG2SumebUvmSiBiC
diiwvfwU66rj2kKYNVXZDHWiDWwIZC6TUjUtb/h8JIG2fdrRsWZek1BjBwr4OBsj
jYnaJcmVmALNcRkFnTMniEABdTjGOHJLoXmXD1FBDrbOnHHGgo8z34ltXf/vV23V
j4JfeXpivfH+3QKyGDvQuy+weM5Zcgtxgx+wIF5WZYhEFu6VPwUKphVsha+Ts+Zs
QtZNYDbgZiSFJBYXBZNPn86pakA6zUJlEYKqX9StT4hYFl6x7Gb9VCG8BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/nJis+01R1hkFxLPZ1wkroGs99MB8GA1UdIwQY
MBaAFL2QC7msYGnFE7WC1h/YHszVYaVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpBTHVheGdhY1VUdFlMV0g5Z2V6TlZocFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lM2VhNWItZDUzZS00Y2Q3LWJiN2It
ZTFiOWY2ZDM1N2MwLzEvdlpBTHVheGdhY1VUdFlMV0g5Z2V6TlZocFdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lM2VhNWItZDUzZS00Y2Q3LWJiN2ItZTFiOWY2ZDM1N2Mw
LzEvdlpBTHVheGdhY1VUdFlMV0g5Z2V6TlZocFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoC9fg0n2
0QJGbvIR5kA0sx4AJJtm1dwYjg5Zb62FtddiDfkPDuaZ8hAxqu0vPuuFW4FaxNs5
gjNRuGwxSOCu0nO9JnS5y0W93U939u5je992/vBmMReECg4zYMURfH+6u4dTrbC2
64J5vkEq/M1dS/cgXZiRV4WKa1HBXVL3YpAC4m5j5n7sltvOwM/EzGq9PSGDbq/4
sxF1l2spdrN6i7TVcOXj2s5Jhm5RzeCKraJLcjrqn1Ch5WQpWUPG5k6KNwONhbdp
tyIU6PTIcrpeiU9R6y+aUca0Nrah79jlrAXjgJhUAsB3GKf4T8cj55wDAhBhX3in
PyWb5JqyIiHhEw==
-----END CERTIFICATE-----
Generated at Mon Oct 5 18:29:44 2026 by rpki-client