Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
File: b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft (raw, json)
Hash identifier: Qpjudy+1Eo0c9iIspBTkekmP2ZNhiOa2L+EFl7oz4aA=
Subject key identifier: 86:45:37:66:0A:F4:A0:A6:98:FF:BC:1E:AF:22:36:20:D8:FF:C8:06
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 01A15251FBBD5C0B536629C3BFD6F880619A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
Manifest number: 17FB
Signing time: Mon 19 Oct 2026 04:01:06 +0000
Manifest this update: Mon 19 Oct 2026 04:01:06 +0000
Manifest next update: Tue 20 Oct 2026 04:01:06 +0000
Files and hashes: 1: 341ViOQdsNCW-En8QgEMghW3CrA.roa (hash: ZDMhvpmhtSILebU2dF818x+O1gwwEqpIPXCs7VmgQH0=)
2: EwqvsuzaZqidzerK9hCEUFqmQ00.roa (hash: GDEyHKgpCdUpHrUWgA6Yr0loRQV7nfKi6qOOjAkX3eQ=)
3: b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl (hash: vEcfMk5W4XLRInjy3JYrjRXy3iQqwC6BHp8fR6N6ZGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:51:fb:bd:5c:0b:53:66:29:c3:bf:d6:f8:80:61:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Oct 19 04:01:06 2026 GMT
Not After : Oct 20 04:01:06 2026 GMT
Subject: CN=864537660af4a0a698ffbc1eaf223620d8ffc806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:6e:79:1f:f7:8e:30:be:3e:48:25:d8:30:
1a:36:76:e6:a3:53:28:ee:de:c5:eb:36:7e:ef:c3:
07:7a:e1:fe:d7:bf:15:53:bb:ec:e0:56:3d:a5:9a:
11:c1:9a:92:07:bf:f5:59:86:ac:9e:8c:8b:0b:06:
cc:40:ba:5b:cd:fe:38:bd:4a:0b:d5:59:de:80:a2:
65:a5:8a:3f:da:32:19:bf:09:23:43:68:85:60:92:
0b:86:44:d9:ce:b5:83:12:ad:8e:a1:c1:7f:28:32:
a5:0e:3d:4b:23:2b:09:2f:57:5b:b6:85:0d:41:db:
49:80:05:54:90:27:6f:c3:1a:f0:97:ed:e6:81:cb:
0a:d3:e6:75:cc:e9:ad:a0:9d:5c:83:9b:21:84:2f:
0c:df:1c:d5:c7:e6:1d:5b:d7:82:ac:e9:58:53:c0:
48:c5:cc:d2:58:08:71:71:fd:42:63:09:ee:bd:5d:
ac:b0:4d:11:3a:5a:3d:42:60:a0:dd:49:63:88:62:
e0:27:e6:42:16:58:1a:5d:77:0c:a8:de:56:25:3c:
9c:06:ad:94:dc:fa:c9:47:36:c2:4d:e4:61:c8:d6:
61:87:ae:9a:0f:4f:7a:e6:99:ff:ea:05:3b:e1:a9:
28:95:d8:17:80:22:7b:bd:3d:25:2e:b1:c6:8b:90:
47:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:45:37:66:0A:F4:A0:A6:98:FF:BC:1E:AF:22:36:20:D8:FF:C8:06
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:bc:58:37:bc:31:61:23:8e:91:b6:5e:ef:d4:24:93:c2:0d:
d8:d9:24:ef:d9:5e:e5:e4:67:f2:53:95:53:dd:74:30:1a:2c:
e3:7c:ea:1a:e8:d5:46:41:66:39:33:18:6c:71:ed:3a:6d:e4:
01:ef:c9:b0:8a:0e:88:0c:84:55:6c:84:b6:8b:79:44:0f:b4:
40:fa:85:45:c1:ef:19:ae:2d:97:e2:40:ff:c8:3b:bf:a7:07:
92:72:2c:2e:fc:ab:49:29:dd:9c:9d:06:70:c7:74:a4:6c:fe:
ec:27:6e:6e:25:6d:ee:1a:58:71:b4:05:43:fb:c9:6d:d3:6d:
b7:74:b1:88:df:0c:fc:71:ba:82:f4:56:ad:bd:b2:22:30:a7:
85:24:6a:62:40:13:5b:75:af:d1:4a:bb:bd:1e:02:2e:e8:2d:
83:c1:c5:b5:84:0a:bf:1b:91:20:b3:de:d8:59:3c:1c:44:95:
17:b7:4c:eb:7c:48:56:0d:83:d7:a0:7f:88:6a:71:d9:8c:41:
3c:d9:a7:60:34:5d:c9:e9:0d:41:43:84:f1:cd:0f:05:26:7e:
44:b4:4a:d2:5e:af:ed:2e:57:ad:60:53:f8:dd:f6:9b:a9:62:
98:32:2b:2b:3d:83:85:f5:f6:e5:21:41:5f:cd:11:ee:87:e8:
3f:66:c5:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFSUfu9XAtTZinDv9b4gGGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZTU2MWY4NGM1YmFiMTdkNTAzYmY5M2QzYzNkMzI1YzJh
MjI1MmUwHhcNMjYxMDE5MDQwMTA2WhcNMjYxMDIwMDQwMTA2WjAzMTEwLwYDVQQD
Eyg4NjQ1Mzc2NjBhZjRhMGE2OThmZmJjMWVhZjIyMzYyMGQ4ZmZjODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudlueR/3jjC+Pkgl2DAaNnbmo1Mo
7t7F6zZ+78MHeuH+178VU7vs4FY9pZoRwZqSB7/1WYasnoyLCwbMQLpbzf44vUoL
1VnegKJlpYo/2jIZvwkjQ2iFYJILhkTZzrWDEq2OocF/KDKlDj1LIysJL1dbtoUN
QdtJgAVUkCdvwxrwl+3mgcsK0+Z1zOmtoJ1cg5shhC8M3xzVx+YdW9eCrOlYU8BI
xczSWAhxcf1CYwnuvV2ssE0ROlo9QmCg3UljiGLgJ+ZCFlgaXXcMqN5WJTycBq2U
3PrJRzbCTeRhyNZhh66aD0965pn/6gU74akoldgXgCJ7vT0lLrHGi5BHwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZFN2YK9KCmmP+8Hq8iNiDY/8gGMB8GA1UdIwQY
MBaAFG/lYfhMW6sX1QO/k9PD0yXCoiUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi1WaC1FeGJxeGZWQTctVDA4UFRKY0tpSlM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MjY2YWYtZmZiYi00NDYyLWJhYTYt
NTczOWVkODNjNjkxLzEvYi1WaC1FeGJxeGZWQTctVDA4UFRKY0tpSlM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82MjY2YWYtZmZiYi00NDYyLWJhYTYtNTczOWVkODNjNjkx
LzEvYi1WaC1FeGJxeGZWQTctVDA4UFRKY0tpSlM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLxYN7wx
YSOOkbZe79Qkk8IN2Nkk79le5eRn8lOVU910MBos43zqGujVRkFmOTMYbHHtOm3k
Ae/JsIoOiAyEVWyEtot5RA+0QPqFRcHvGa4tl+JA/8g7v6cHknIsLvyrSSndnJ0G
cMd0pGz+7CdubiVt7hpYcbQFQ/vJbdNtt3SxiN8M/HG6gvRWrb2yIjCnhSRqYkAT
W3Wv0Uq7vR4CLugtg8HFtYQKvxuRILPe2Fk8HESVF7dM63xIVg2D16B/iGpx2YxB
PNmnYDRdyekNQUOE8c0PBSZ+RLRK0l6v7S5XrWBT+N32m6limDIrKz2DhfX25SFB
X80R7ofoP2bF2w==
-----END CERTIFICATE-----
Generated at Mon Oct 19 14:29:25 2026 by rpki-client