Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
File: VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft (raw, json)
Hash identifier: lboDoRG71H9LHw/LifHfNJv53wcfBnbbSRQDMHLGxlY=
Subject key identifier: 28:BE:A8:2B:C7:12:C3:F1:E5:1B:15:30:94:9B:9A:CC:B3:7B:1A:85
Authority key identifier: 54:AD:BB:CF:92:60:43:2A:BE:E2:01:30:33:D4:EB:95:F3:BD:AB:D6
Certificate issuer: /CN=54adbbcf9260432abee2013033d4eb95f3bdabd6
Certificate serial: 019E1FB5EB2325E57F6159CC8D7A6357D4CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
Manifest number: DD
Signing time: Wed 13 May 2026 05:01:16 +0000
Manifest this update: Wed 13 May 2026 05:01:16 +0000
Manifest next update: Thu 14 May 2026 05:01:16 +0000
Files and hashes: 1: 6x7BJ0F-meGk9fhXJNWGJnuegOw.roa (hash: ejX+MPtDK3gTtFG1432bC6M7t7QPNbrVRz6iGDt2Hfo=)
2: VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl (hash: TVLbjFCsCCKyk99WFLUvdH9cXsdPbgDOPA+/Bu/QIWo=)
3: oTR56cyeKnrqB4eLr9IFRqGiB88.roa (hash: snlvASDIyvudTtl4HEkxIFNnIhgqIkS7EP587pwAfiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:eb:23:25:e5:7f:61:59:cc:8d:7a:63:57:d4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54adbbcf9260432abee2013033d4eb95f3bdabd6
Validity
Not Before: May 13 05:01:16 2026 GMT
Not After : May 14 05:01:16 2026 GMT
Subject: CN=28bea82bc712c3f1e51b1530949b9accb37b1a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:d1:53:1c:e5:68:26:8a:5f:02:4d:60:13:
e1:49:37:19:8f:43:dc:19:63:42:24:26:7a:44:43:
90:2e:5d:2f:c5:a2:10:42:6a:a4:9b:30:bd:f2:47:
e0:8d:be:a4:33:b8:4e:10:91:3a:83:d4:80:e3:35:
16:fd:31:b7:aa:d7:5a:01:5f:74:73:10:b3:f2:dd:
e5:0c:a7:2b:b3:c1:5e:2b:74:4a:49:d3:df:cf:44:
19:19:e4:f5:f7:ac:1b:40:8a:f1:78:fe:db:9e:72:
9e:60:60:79:5e:9e:e8:b1:78:c9:bd:ff:f6:a5:11:
92:02:26:c9:e7:aa:9c:1d:48:13:8d:6f:e4:37:d4:
cd:64:1c:d9:5a:59:f3:73:72:54:58:a8:7b:7c:2f:
e7:ef:ee:d3:78:c9:79:0f:84:f7:e3:0d:99:01:f7:
54:29:82:85:e4:61:2e:50:ad:9f:38:b1:ce:7a:d1:
7d:c4:b9:32:5b:b0:d5:0c:8c:f4:ca:15:00:0a:f8:
be:36:b5:e6:ad:b2:94:ba:71:af:95:2a:dc:28:45:
66:06:d5:ed:58:9b:0b:14:0a:8d:18:8d:44:61:04:
77:0f:c8:7c:25:39:aa:17:78:ab:e0:e3:33:be:17:
ac:89:4e:11:2d:89:a2:3d:f5:50:39:00:47:30:7e:
10:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BE:A8:2B:C7:12:C3:F1:E5:1B:15:30:94:9B:9A:CC:B3:7B:1A:85
X509v3 Authority Key Identifier:
keyid:54:AD:BB:CF:92:60:43:2A:BE:E2:01:30:33:D4:EB:95:F3:BD:AB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:25:2c:76:b9:d0:4c:a5:df:4e:65:ab:a2:ad:72:6d:7d:e6:
e9:67:60:c8:a0:4b:c0:3b:d1:61:a3:71:4c:0d:09:b8:50:6c:
b0:a6:28:7d:ac:ab:e9:d1:58:e2:cd:5d:90:a5:8c:91:a2:7d:
e6:cc:80:98:43:a5:50:05:a2:70:e0:98:7d:07:06:74:b9:c3:
4b:e1:ee:f8:81:0d:06:6a:9c:b3:6e:8d:9e:ac:2b:d1:b5:2f:
1f:57:92:66:45:e5:8d:9d:39:ec:db:3b:77:8e:db:f2:81:fc:
0e:82:be:85:ea:42:e1:f0:15:18:37:14:00:24:0d:5e:82:2c:
51:31:61:aa:89:a9:87:cc:06:e9:a5:f5:18:4a:bc:f0:ef:3a:
d3:2f:11:34:cd:14:e9:a6:05:b6:4c:c9:e1:d4:2a:2c:85:1e:
3f:f9:a8:32:29:31:7d:98:db:61:58:c4:81:72:1e:52:e0:46:
d0:5c:b5:a6:cd:9c:5d:56:be:04:cc:34:98:bb:3c:9e:23:fd:
14:98:e1:85:80:1b:61:81:83:26:4e:f8:72:db:e7:e6:57:45:
36:67:60:4e:05:d6:e7:36:1b:4a:f6:48:88:6c:81:26:b2:87:
51:b0:0f:60:26:1e:b7:3c:af:1d:4a:9a:06:2f:bc:44:46:e3:
47:49:50:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftesjJeV/YVnMjXpjV9TPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YWRiYmNmOTI2MDQzMmFiZWUyMDEzMDMzZDRlYjk1ZjNi
ZGFiZDYwHhcNMjYwNTEzMDUwMTE2WhcNMjYwNTE0MDUwMTE2WjAzMTEwLwYDVQQD
EygyOGJlYTgyYmM3MTJjM2YxZTUxYjE1MzA5NDliOWFjY2IzN2IxYTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptLRUxzlaCaKXwJNYBPhSTcZj0Pc
GWNCJCZ6REOQLl0vxaIQQmqkmzC98kfgjb6kM7hOEJE6g9SA4zUW/TG3qtdaAV90
cxCz8t3lDKcrs8FeK3RKSdPfz0QZGeT196wbQIrxeP7bnnKeYGB5Xp7osXjJvf/2
pRGSAibJ56qcHUgTjW/kN9TNZBzZWlnzc3JUWKh7fC/n7+7TeMl5D4T34w2ZAfdU
KYKF5GEuUK2fOLHOetF9xLkyW7DVDIz0yhUACvi+NrXmrbKUunGvlSrcKEVmBtXt
WJsLFAqNGI1EYQR3D8h8JTmqF3ir4OMzvhesiU4RLYmiPfVQOQBHMH4QBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCi+qCvHEsPx5RsVMJSbmsyzexqFMB8GA1UdIwQY
MBaAFFStu8+SYEMqvuIBMDPU65XzvavWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVksyN3o1SmdReXEtNGdFd005VHJsZk85cTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8zNDBlNTYtNjQ5Mi00N2UyLTk5ZGMt
MTQyNTM3ZGU5NDhlLzEvVksyN3o1SmdReXEtNGdFd005VHJsZk85cTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8zNDBlNTYtNjQ5Mi00N2UyLTk5ZGMtMTQyNTM3ZGU5NDhl
LzEvVksyN3o1SmdReXEtNGdFd005VHJsZk85cTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyUsdrnQ
TKXfTmWroq1ybX3m6WdgyKBLwDvRYaNxTA0JuFBssKYofayr6dFY4s1dkKWMkaJ9
5syAmEOlUAWicOCYfQcGdLnDS+Hu+IENBmqcs26Nnqwr0bUvH1eSZkXljZ057Ns7
d47b8oH8DoK+hepC4fAVGDcUACQNXoIsUTFhqomph8wG6aX1GEq88O860y8RNM0U
6aYFtkzJ4dQqLIUeP/moMikxfZjbYVjEgXIeUuBG0Fy1ps2cXVa+BMw0mLs8niP9
FJjhhYAbYYGDJk74ctvn5ldFNmdgTgXW5zYbSvZIiGyBJrKHUbAPYCYetzyvHUqa
Bi+8REbjR0lQ4A==
-----END CERTIFICATE-----
Generated at Wed May 13 13:23:06 2026 by rpki-client