Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
File: VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft (raw, json)
Hash identifier: 1KUPq0zbqmT2RoNeqERZ6b834bvFkR9D3Aknt4bazko=
Subject key identifier: 00:5D:71:70:3C:B9:B0:B1:F0:09:2E:B7:6F:76:FB:CB:C7:EE:DA:2A
Authority key identifier: 54:AD:BB:CF:92:60:43:2A:BE:E2:01:30:33:D4:EB:95:F3:BD:AB:D6
Certificate issuer: /CN=54adbbcf9260432abee2013033d4eb95f3bdabd6
Certificate serial: 019D2A72C80B6D5454B414ABC91CB768AFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
Manifest number: 5E
Signing time: Thu 26 Mar 2026 14:00:58 +0000
Manifest this update: Thu 26 Mar 2026 14:00:58 +0000
Manifest next update: Fri 27 Mar 2026 14:00:58 +0000
Files and hashes: 1: 6x7BJ0F-meGk9fhXJNWGJnuegOw.roa (hash: ejX+MPtDK3gTtFG1432bC6M7t7QPNbrVRz6iGDt2Hfo=)
2: VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl (hash: ihe0JOv/2yZskoa3uqfz4Fwh2deRQcjI3pPhDcq/wXk=)
3: oTR56cyeKnrqB4eLr9IFRqGiB88.roa (hash: snlvASDIyvudTtl4HEkxIFNnIhgqIkS7EP587pwAfiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:c8:0b:6d:54:54:b4:14:ab:c9:1c:b7:68:af:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54adbbcf9260432abee2013033d4eb95f3bdabd6
Validity
Not Before: Mar 26 14:00:58 2026 GMT
Not After : Mar 27 14:00:58 2026 GMT
Subject: CN=005d71703cb9b0b1f0092eb76f76fbcbc7eeda2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1b:ec:1c:3e:d2:96:7f:e0:18:2a:42:fa:2f:
94:9c:ac:be:d3:12:06:97:60:95:52:52:e0:19:d5:
06:a3:61:24:28:f6:17:8a:6f:08:a0:a1:f0:19:35:
3f:de:86:0c:ad:51:70:dc:08:b3:9a:7e:37:a4:2e:
b0:af:2d:d4:e1:24:3c:cc:b8:84:d8:f1:f2:16:f9:
3e:9d:b6:72:33:ba:dd:13:40:4f:79:e2:77:a7:e0:
94:de:03:64:bb:cd:ac:b8:1a:dc:32:e1:d9:44:7b:
20:4f:57:65:e0:a7:8b:57:84:19:03:65:27:37:c9:
3e:23:56:e4:c6:a4:41:54:ec:b5:e5:4c:17:36:e7:
96:3d:6b:c1:ed:68:7a:4e:2c:7e:8c:4f:3b:5e:71:
b4:80:c1:53:44:ae:4e:85:ba:83:0a:f9:42:e6:b7:
5c:03:42:1a:a6:59:d2:1a:73:07:f3:a0:72:7f:cd:
5c:f0:5a:a7:cd:1c:ae:12:93:52:ff:b3:67:5c:19:
18:01:05:a8:0f:b2:79:17:ed:3f:80:73:c3:b0:1a:
b0:0e:3b:6e:a5:d9:6b:15:8c:2e:50:91:59:82:a4:
7d:a3:89:05:2a:42:27:31:76:9d:82:2e:63:c0:f3:
e2:8b:fe:3f:0b:be:d7:7d:df:e6:bc:51:fa:fb:36:
ac:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5D:71:70:3C:B9:B0:B1:F0:09:2E:B7:6F:76:FB:CB:C7:EE:DA:2A
X509v3 Authority Key Identifier:
keyid:54:AD:BB:CF:92:60:43:2A:BE:E2:01:30:33:D4:EB:95:F3:BD:AB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9c:b9:c9:70:23:b2:74:4e:4d:a4:c1:da:83:a2:95:81:95:
e3:f2:01:38:02:b9:cc:1e:22:40:52:83:37:bc:11:91:fe:d3:
67:0c:93:aa:76:24:57:f6:d9:15:6d:ea:15:2b:10:86:07:e4:
a1:88:44:0b:cc:e3:18:30:34:b2:7b:dc:b3:fa:ee:b2:df:eb:
00:45:70:51:89:96:bd:a0:41:0a:4d:81:a7:76:78:07:9a:e4:
50:c0:ee:6d:42:3e:7f:87:2d:c6:61:ce:8b:1c:4a:fb:d7:0c:
e9:f6:46:d9:81:7e:24:45:34:43:e9:d9:37:59:47:32:6e:f3:
d7:ed:52:81:81:c0:04:50:e0:6f:36:b3:fb:68:3d:68:30:40:
81:ff:de:6b:75:6f:12:a3:cd:d8:a1:bf:5e:f7:94:8b:a8:75:
49:26:ff:10:e1:de:3e:62:ef:ec:05:88:5c:b8:b7:15:69:dd:
9a:a7:d7:78:f0:45:43:09:9b:c8:c3:1c:6a:b9:9a:03:e2:6c:
7e:1e:d9:93:ef:ac:8c:e9:01:b5:79:11:3b:9e:79:93:ce:c0:
12:b1:a2:65:a5:8c:18:7e:62:4c:63:36:fe:da:33:bc:96:af:
cb:ea:5c:84:44:4b:79:f2:c9:8d:b8:de:dd:b8:69:c5:db:6e:
8c:c8:94:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcsgLbVRUtBSryRy3aK/gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YWRiYmNmOTI2MDQzMmFiZWUyMDEzMDMzZDRlYjk1ZjNi
ZGFiZDYwHhcNMjYwMzI2MTQwMDU4WhcNMjYwMzI3MTQwMDU4WjAzMTEwLwYDVQQD
EygwMDVkNzE3MDNjYjliMGIxZjAwOTJlYjc2Zjc2ZmJjYmM3ZWVkYTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BvsHD7Sln/gGCpC+i+UnKy+0xIG
l2CVUlLgGdUGo2EkKPYXim8IoKHwGTU/3oYMrVFw3Aizmn43pC6wry3U4SQ8zLiE
2PHyFvk+nbZyM7rdE0BPeeJ3p+CU3gNku82suBrcMuHZRHsgT1dl4KeLV4QZA2Un
N8k+I1bkxqRBVOy15UwXNueWPWvB7Wh6Tix+jE87XnG0gMFTRK5OhbqDCvlC5rdc
A0IaplnSGnMH86Byf81c8FqnzRyuEpNS/7NnXBkYAQWoD7J5F+0/gHPDsBqwDjtu
pdlrFYwuUJFZgqR9o4kFKkInMXadgi5jwPPii/4/C77Xfd/mvFH6+zas5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABdcXA8ubCx8Akut292+8vH7toqMB8GA1UdIwQY
MBaAFFStu8+SYEMqvuIBMDPU65XzvavWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVksyN3o1SmdReXEtNGdFd005VHJsZk85cTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8zNDBlNTYtNjQ5Mi00N2UyLTk5ZGMt
MTQyNTM3ZGU5NDhlLzEvVksyN3o1SmdReXEtNGdFd005VHJsZk85cTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8zNDBlNTYtNjQ5Mi00N2UyLTk5ZGMtMTQyNTM3ZGU5NDhl
LzEvVksyN3o1SmdReXEtNGdFd005VHJsZk85cTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5y5yXAj
snROTaTB2oOilYGV4/IBOAK5zB4iQFKDN7wRkf7TZwyTqnYkV/bZFW3qFSsQhgfk
oYhEC8zjGDA0snvcs/rust/rAEVwUYmWvaBBCk2Bp3Z4B5rkUMDubUI+f4ctxmHO
ixxK+9cM6fZG2YF+JEU0Q+nZN1lHMm7z1+1SgYHABFDgbzaz+2g9aDBAgf/ea3Vv
EqPN2KG/XveUi6h1SSb/EOHePmLv7AWIXLi3FWndmqfXePBFQwmbyMMcarmaA+Js
fh7Zk++sjOkBtXkRO555k87AErGiZaWMGH5iTGM2/tozvJavy+pchERLefLJjbje
3bhpxdtujMiUPw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:00:16 2026 by rpki-client