Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
File: VHGK9qNvZqkZOTZKr8hkRauKbg4.mft (raw, json)
Hash identifier: 5TbSdzO9copj9Z1Ysa9qwtHxB12l7FQ8MVUiglkIHDg=
Subject key identifier: A3:70:AC:93:94:5C:5C:49:0C:B2:45:81:90:F0:5B:F7:19:68:23:FD
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Certificate issuer: /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial: 019D29CEA57DF9C9FC40469EE38AA3FCF6C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 11:01:41 +0000
Manifest this update: Thu 26 Mar 2026 11:01:41 +0000
Manifest next update: Fri 27 Mar 2026 11:01:41 +0000
Files and hashes: 1: TJJ2gOjBREqpMzOZJTJ2VfBKc3M.roa (hash: peGM10woKh6oL0rMneWbTzD1iT6wAY2ntEnSy9KA6Lo=)
2: VHGK9qNvZqkZOTZKr8hkRauKbg4.crl (hash: +QEMTlXZBbw043tYXX4cSz+HTadshBBP4aXTcLn0JNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:a5:7d:f9:c9:fc:40:46:9e:e3:8a:a3:fc:f6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Validity
Not Before: Mar 26 11:01:41 2026 GMT
Not After : Mar 27 11:01:41 2026 GMT
Subject: CN=a370ac93945c5c490cb2458190f05bf7196823fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:59:1f:aa:5f:6e:c5:f8:77:83:55:d0:9f:
2f:98:ff:0f:17:b1:43:38:56:4b:c8:73:fa:5a:17:
6d:0b:40:cf:5d:a8:d7:b6:70:6a:ec:37:b8:82:2a:
27:61:6f:08:bd:c0:c1:73:36:e0:86:4e:e9:a9:43:
09:6b:fb:b6:45:11:31:1e:6a:aa:09:62:f1:c9:63:
0e:69:48:91:e2:12:87:18:2d:df:c1:fa:50:d5:e3:
16:97:54:c7:c3:56:3f:50:be:05:86:5f:52:17:0b:
89:4d:12:6a:83:7c:36:8f:dd:e3:78:7e:26:23:21:
f4:7c:19:b0:09:35:db:82:1e:cd:82:37:8f:7f:c3:
bb:07:5e:1a:9c:9b:8c:8d:93:ca:7f:f9:85:fd:80:
e2:39:78:64:4e:4f:a5:de:01:ed:84:36:93:f8:2d:
28:c7:98:26:1c:78:70:c3:d6:79:e5:b6:22:d9:e2:
d4:85:5b:fe:49:55:ab:0d:db:c5:3f:87:58:9f:9d:
fb:56:7a:bd:15:6e:99:01:08:36:04:35:f0:99:40:
b1:aa:38:24:47:55:09:b3:be:e1:aa:02:55:e7:a6:
f2:36:e8:0f:fa:83:dc:6e:91:7b:24:54:06:1b:aa:
ba:d5:e7:74:f6:1b:2c:8a:10:e0:4c:29:76:53:72:
35:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:70:AC:93:94:5C:5C:49:0C:B2:45:81:90:F0:5B:F7:19:68:23:FD
X509v3 Authority Key Identifier:
keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:85:95:c4:32:78:20:fc:ad:8d:09:35:7d:50:f6:c9:04:b9:
25:0f:ea:46:09:e3:03:3a:68:fa:75:35:de:29:51:ea:3f:12:
e0:c4:7c:dc:c8:32:ac:bf:b4:15:6e:ca:3e:77:cf:47:2e:b7:
2f:a3:2e:42:4c:d0:db:b4:78:45:1f:bf:5d:29:fb:7d:f6:6b:
85:66:86:15:c0:8e:fe:d3:d9:25:ce:d5:bb:6d:66:1b:58:6b:
93:14:46:c0:b2:90:5a:f1:8b:bd:ed:a6:a0:7d:8e:6e:7d:b0:
54:f5:4b:36:7d:9e:f9:f3:31:dc:46:67:bd:f7:7f:d2:ed:55:
6a:33:87:ac:bf:f8:99:e2:70:7f:a9:a4:dd:fb:82:f4:a2:4f:
65:e2:c5:95:f2:71:4f:61:78:86:33:e4:91:cf:eb:36:43:71:
28:21:51:66:88:b9:e3:d3:66:bd:83:bd:a9:06:39:10:5f:4c:
7b:3b:b8:dc:5d:71:e2:d3:08:b2:99:13:fd:e2:c7:74:56:ec:
49:3b:71:0c:06:d0:59:e0:64:db:55:1c:93:4e:0a:fe:e5:07:
17:b3:0c:0a:ef:93:e3:c1:22:4c:ed:da:d0:e7:50:9f:1b:7c:
71:1a:59:5c:21:8a:20:23:bd:d6:9a:da:62:5f:2f:be:17:6a:
aa:1e:16:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzqV9+cn8QEae44qj/PbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzE4YWY2YTM2ZjY2YTkxOTM5MzY0YWFmYzg2NDQ1YWI4
YTZlMGUwHhcNMjYwMzI2MTEwMTQxWhcNMjYwMzI3MTEwMTQxWjAzMTEwLwYDVQQD
EyhhMzcwYWM5Mzk0NWM1YzQ5MGNiMjQ1ODE5MGYwNWJmNzE5NjgyM2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCFZH6pfbsX4d4NV0J8vmP8PF7FD
OFZLyHP6WhdtC0DPXajXtnBq7De4gionYW8IvcDBczbghk7pqUMJa/u2RRExHmqq
CWLxyWMOaUiR4hKHGC3fwfpQ1eMWl1THw1Y/UL4Fhl9SFwuJTRJqg3w2j93jeH4m
IyH0fBmwCTXbgh7NgjePf8O7B14anJuMjZPKf/mF/YDiOXhkTk+l3gHthDaT+C0o
x5gmHHhww9Z55bYi2eLUhVv+SVWrDdvFP4dYn537Vnq9FW6ZAQg2BDXwmUCxqjgk
R1UJs77hqgJV56byNugP+oPcbpF7JFQGG6q61ed09hssihDgTCl2U3I16QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNwrJOUXFxJDLJFgZDwW/cZaCP9MB8GA1UdIwQY
MBaAFFRxivajb2apGTk2Sq/IZEWrim4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jZDJmNDEtNTllMC00YjhiLTgyMDYt
YmVkNTVjNDdhNTc4LzEvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jZDJmNDEtNTllMC00YjhiLTgyMDYtYmVkNTVjNDdhNTc4
LzEvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYWVxDJ4
IPytjQk1fVD2yQS5JQ/qRgnjAzpo+nU13ilR6j8S4MR83MgyrL+0FW7KPnfPRy63
L6MuQkzQ27R4RR+/XSn7ffZrhWaGFcCO/tPZJc7Vu21mG1hrkxRGwLKQWvGLve2m
oH2Obn2wVPVLNn2e+fMx3EZnvfd/0u1VajOHrL/4meJwf6mk3fuC9KJPZeLFlfJx
T2F4hjPkkc/rNkNxKCFRZoi549NmvYO9qQY5EF9Mezu43F1x4tMIspkT/eLHdFbs
STtxDAbQWeBk21Uck04K/uUHF7MMCu+T48EiTO3a0OdQnxt8cRpZXCGKICO91pra
Yl8vvhdqqh4Wjg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:31:24 2026 by rpki-client