Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
File: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft (raw, json)
Hash identifier: IshfR9p0/niiWh8rQ4DAakwWplJZX8Eds1M+JSkSa9w=
Subject key identifier: D0:8A:39:CC:87:1E:CE:5C:29:95:D3:C4:38:69:8C:82:3C:D4:E2:A7
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial: 019DD16330B3A9104952F95C060AC0F35A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
Manifest number: 16FC
Signing time: Tue 28 Apr 2026 00:00:31 +0000
Manifest this update: Tue 28 Apr 2026 00:00:31 +0000
Manifest next update: Wed 29 Apr 2026 00:00:31 +0000
Files and hashes: 1: R-q6ieQ5ZRpyZAS3VuKsjP1lbqI.roa (hash: LE0wpmfemoMC71Up9yLLrAR45HiWA1m8U6namnoo6+E=)
2: RoC9yHrjkOJ0GiednXz9KzpBgEI.roa (hash: kugJughWaN4KyRcT9vU8DskQM03Ay2SChRmN27jdndQ=)
3: Uj9qErLJ7z3sRt5hNWIVbAoCTJU.roa (hash: XmHbyEYbwLMwHEMXeqgjX8MuDffCoDklGaGBFZdSn00=)
4: u_BnVwDhAa2ItOuzTxp9mi3OVGk.roa (hash: DT0/HarFisk4IStUU9LzkErJGL5WNt4QSQVHnd5C+vo=)
5: upv2bkah2kmcgwzii9vlsV1YYx0.roa (hash: DdoCoWJ4MAXwMUb9LrgBORU0OoZ8wqZEHBq3WjBn6lw=)
6: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl (hash: BN/1HAo6NHwzKGVaQSoSNOKlLTlpS7zhVMoR6inWHbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:63:30:b3:a9:10:49:52:f9:5c:06:0a:c0:f3:5a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Validity
Not Before: Apr 28 00:00:31 2026 GMT
Not After : Apr 29 00:00:31 2026 GMT
Subject: CN=d08a39cc871ece5c2995d3c438698c823cd4e2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:54:ee:0c:83:6c:82:f2:fa:08:55:a3:ec:
41:7e:70:b5:01:af:71:97:f6:ed:a9:30:d6:5a:84:
19:a2:f8:08:ee:e2:57:ed:b0:7b:88:f9:80:88:4f:
46:14:de:53:a6:83:3d:42:7a:cf:f8:29:10:5e:27:
92:9a:03:bb:83:f1:ee:40:38:c8:72:9b:e7:e9:8d:
7e:89:6c:48:34:a1:0e:42:5e:8a:11:c3:3b:c4:7d:
32:89:d1:00:41:bd:b6:06:3e:ca:35:a2:1c:b0:3f:
ec:1f:72:72:25:2f:f6:af:f4:ef:31:80:e6:73:97:
21:84:e2:ff:cb:68:a6:9f:5e:3c:02:7d:08:89:33:
55:6a:fa:64:38:08:2e:c8:2c:9d:45:ec:52:c6:69:
b5:bb:dd:06:f9:a2:59:6c:42:c9:df:c6:20:82:e9:
ff:b0:ba:44:0b:15:ca:b6:98:9e:68:7a:bc:c3:32:
1c:28:ad:43:ba:5c:fd:6b:3b:bb:37:6b:7c:87:ec:
34:98:61:60:32:58:32:29:b5:c6:68:6a:63:cf:59:
1d:1a:06:5a:e2:f5:6d:d1:56:af:44:58:b9:ac:92:
05:78:2e:cd:34:07:84:44:0d:b0:ae:29:14:92:b5:
75:15:1e:7f:74:c8:34:b6:fe:cb:51:01:43:17:44:
6b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8A:39:CC:87:1E:CE:5C:29:95:D3:C4:38:69:8C:82:3C:D4:E2:A7
X509v3 Authority Key Identifier:
keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:9a:15:71:3b:1f:86:47:89:67:2f:d7:8b:8b:80:fe:8a:5b:
37:12:a4:18:13:37:60:4d:7b:75:e2:11:0d:93:b8:1d:a3:a7:
4d:16:02:67:e5:5b:ca:ae:c4:1f:fa:10:9d:27:69:07:8d:4e:
f7:d7:51:c7:eb:07:00:35:39:d3:d9:da:90:ca:8b:cb:19:e7:
e3:d7:a3:02:10:fa:0d:b1:e5:de:89:ea:4b:ab:2b:48:65:94:
8c:3a:c4:e1:6c:22:af:52:a2:29:f5:26:bd:c6:6f:bf:1f:45:
12:00:5b:a6:57:32:78:e8:08:db:4e:da:c5:06:43:e9:21:ab:
c5:27:d8:52:16:0a:87:9c:9c:77:b0:da:8c:8a:c0:60:8c:45:
e4:d2:81:e8:2c:6a:1c:be:5e:af:e6:11:89:5d:25:23:56:88:
6d:c6:94:54:78:b5:99:d0:80:f7:3b:62:cf:3f:c9:8b:94:9b:
7c:68:68:3b:a0:7a:94:df:70:a5:eb:b2:2c:86:a2:63:60:30:
db:98:79:a5:4d:89:31:57:78:58:6d:11:cc:f2:17:67:fc:fe:
3a:38:26:4c:df:ba:8b:e2:19:c0:1c:8a:45:cd:85:4e:95:e4:
81:65:f6:18:14:41:ee:ee:3c:86:92:c6:52:d7:27:e1:d5:b2:
0b:05:30:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3RYzCzqRBJUvlcBgrA81qWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDlmYjE5MGY0YmQwZjU4MTVhOGU1NzlmMzY2YWQ1OGQ1
ZDQxZjkwHhcNMjYwNDI4MDAwMDMxWhcNMjYwNDI5MDAwMDMxWjAzMTEwLwYDVQQD
EyhkMDhhMzljYzg3MWVjZTVjMjk5NWQzYzQzODY5OGM4MjNjZDRlMmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt5U7gyDbILy+ghVo+xBfnC1Aa9x
l/btqTDWWoQZovgI7uJX7bB7iPmAiE9GFN5TpoM9QnrP+CkQXieSmgO7g/HuQDjI
cpvn6Y1+iWxINKEOQl6KEcM7xH0yidEAQb22Bj7KNaIcsD/sH3JyJS/2r/TvMYDm
c5chhOL/y2imn148An0IiTNVavpkOAguyCydRexSxmm1u90G+aJZbELJ38Yggun/
sLpECxXKtpieaHq8wzIcKK1Dulz9azu7N2t8h+w0mGFgMlgyKbXGaGpjz1kdGgZa
4vVt0VavRFi5rJIFeC7NNAeERA2wrikUkrV1FR5/dMg0tv7LUQFDF0Rr7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCKOcyHHs5cKZXTxDhpjII81OKnMB8GA1UdIwQY
MBaAFL5J+xkPS9D1gVqOV582atWNXUH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDct
NWU2NTZmMWI0ODc2LzEvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDctNWU2NTZmMWI0ODc2
LzEvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpoVcTsf
hkeJZy/Xi4uA/opbNxKkGBM3YE17deIRDZO4HaOnTRYCZ+Vbyq7EH/oQnSdpB41O
99dRx+sHADU509nakMqLyxnn49ejAhD6DbHl3onqS6srSGWUjDrE4Wwir1KiKfUm
vcZvvx9FEgBbplcyeOgI207axQZD6SGrxSfYUhYKh5ycd7DajIrAYIxF5NKB6Cxq
HL5er+YRiV0lI1aIbcaUVHi1mdCA9ztizz/Ji5SbfGhoO6B6lN9wpeuyLIaiY2Aw
25h5pU2JMVd4WG0RzPIXZ/z+OjgmTN+6i+IZwByKRc2FTpXkgWX2GBRB7u48hpLG
Utcn4dWyCwUwYg==
-----END CERTIFICATE-----
Generated at Tue Apr 28 02:09:32 2026 by rpki-client