Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft
File: VmczL0gJQe01gDssBLhPNyjTkpc.mft (raw, json)
Hash identifier: wooayyFhNQ3T8TRFQYhM2HSPRpQFJcGU/nbiUsAir8g=
Subject key identifier: 3D:D3:1F:89:96:2E:51:5D:36:2A:E0:17:F2:9B:1F:24:60:BC:51:BD
Authority key identifier: 56:67:33:2F:48:09:41:ED:35:80:3B:2C:04:B8:4F:37:28:D3:92:97
Certificate issuer: /CN=5667332f480941ed35803b2c04b84f3728d39297
Certificate serial: 019D27A8C03355383AFCA693DA65C2B5156D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmczL0gJQe01gDssBLhPNyjTkpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft
Manifest number: 0277
Signing time: Thu 26 Mar 2026 01:01:03 +0000
Manifest this update: Thu 26 Mar 2026 01:01:03 +0000
Manifest next update: Fri 27 Mar 2026 01:01:03 +0000
Files and hashes: 1: VmczL0gJQe01gDssBLhPNyjTkpc.crl (hash: Y3gotlgI4LG2PzrXlPEYJnsf7hYN1A7UZbAmx7mHtnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmczL0gJQe01gDssBLhPNyjTkpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c0:33:55:38:3a:fc:a6:93:da:65:c2:b5:15:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5667332f480941ed35803b2c04b84f3728d39297
Validity
Not Before: Mar 26 01:01:03 2026 GMT
Not After : Mar 27 01:01:03 2026 GMT
Subject: CN=3dd31f89962e515d362ae017f29b1f2460bc51bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:45:d5:66:00:27:8b:09:de:78:66:22:cc:da:
50:f9:95:b0:36:64:b2:75:97:2c:94:14:ce:c8:fe:
95:4a:b0:a6:91:6b:1f:12:c8:ab:3d:a8:11:3f:26:
0a:0e:a8:b7:79:73:9a:0b:ab:8b:31:38:76:90:b9:
52:2d:fc:81:1d:13:58:27:e3:e3:e4:03:0d:73:9b:
93:74:1d:76:be:77:77:a8:c5:a5:f5:a0:8a:88:b2:
57:e3:d9:38:0e:7a:12:a1:c5:26:98:b4:34:c0:a7:
18:00:18:9b:02:b6:7b:5a:13:67:8d:4e:f8:1b:7f:
d1:b0:c3:34:c4:b5:36:80:15:cc:49:f1:92:2a:de:
2b:11:b9:52:ef:ce:52:f7:c8:44:85:90:05:b0:f5:
48:aa:3e:34:d0:51:60:a8:b7:8f:84:1f:c3:0f:1c:
0d:6d:3b:a4:19:58:53:6c:a1:36:7a:fb:a2:7b:91:
ca:4f:a8:b5:a3:d8:a0:30:d1:b2:be:ab:01:a4:8f:
15:ad:d9:ed:ba:6d:37:96:9c:4c:7f:26:87:6e:84:
e2:1c:05:cf:08:c7:fc:af:9e:c4:54:f8:ae:37:a7:
4e:bc:2f:f1:52:9f:e7:56:3d:2d:8a:1d:0c:c2:c8:
cb:2c:5a:7b:e6:da:cc:1d:bc:08:85:e7:70:84:72:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D3:1F:89:96:2E:51:5D:36:2A:E0:17:F2:9B:1F:24:60:BC:51:BD
X509v3 Authority Key Identifier:
keyid:56:67:33:2F:48:09:41:ED:35:80:3B:2C:04:B8:4F:37:28:D3:92:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmczL0gJQe01gDssBLhPNyjTkpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:33:c3:e3:b0:3b:78:bb:e4:f6:56:a5:08:86:3d:c3:ce:98:
06:1b:21:c2:86:99:e3:eb:4a:bf:6d:97:24:6d:09:26:60:03:
4e:be:95:5b:8d:ba:68:71:ae:b1:85:47:06:8a:01:a8:93:c0:
db:17:5e:71:4d:1d:fa:1d:43:6b:81:37:9b:8b:18:1d:29:33:
2e:b9:f3:1e:31:70:41:c8:2c:3a:5a:af:f8:31:0a:9f:88:0c:
76:de:ad:20:a2:89:61:8f:73:44:21:d3:6b:bf:49:a9:9b:f4:
05:53:3f:6d:0e:4f:ce:89:88:f5:3b:08:7d:05:ed:38:e6:af:
f3:73:5e:31:98:e7:9d:b4:69:0e:59:33:38:8c:7a:cb:25:90:
2e:d8:ce:78:15:bb:af:82:d1:ba:39:ab:ab:0c:5f:b8:98:03:
5d:4a:a9:e6:a0:07:7b:b3:b4:1c:af:37:fb:f7:dc:f6:47:ad:
59:20:b1:56:a7:ec:17:f4:a0:61:24:f9:f2:17:d2:f2:85:ec:
77:07:bb:44:5a:5f:94:20:5f:0b:3e:b8:f9:36:03:1e:28:8c:
a1:70:e3:58:b3:58:49:05:22:10:ff:27:62:dc:06:42:fa:8e:
cd:18:e9:73:2f:02:4c:f2:a7:35:86:7b:80:1d:3f:f8:50:2d:
0d:13:2a:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqMAzVTg6/KaT2mXCtRVtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NjczMzJmNDgwOTQxZWQzNTgwM2IyYzA0Yjg0ZjM3Mjhk
MzkyOTcwHhcNMjYwMzI2MDEwMTAzWhcNMjYwMzI3MDEwMTAzWjAzMTEwLwYDVQQD
EygzZGQzMWY4OTk2MmU1MTVkMzYyYWUwMTdmMjliMWYyNDYwYmM1MWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0XVZgAniwneeGYizNpQ+ZWwNmSy
dZcslBTOyP6VSrCmkWsfEsirPagRPyYKDqi3eXOaC6uLMTh2kLlSLfyBHRNYJ+Pj
5AMNc5uTdB12vnd3qMWl9aCKiLJX49k4DnoSocUmmLQ0wKcYABibArZ7WhNnjU74
G3/RsMM0xLU2gBXMSfGSKt4rEblS785S98hEhZAFsPVIqj400FFgqLePhB/DDxwN
bTukGVhTbKE2evuie5HKT6i1o9igMNGyvqsBpI8Vrdntum03lpxMfyaHboTiHAXP
CMf8r57EVPiuN6dOvC/xUp/nVj0tih0MwsjLLFp75trMHbwIhedwhHKceQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3TH4mWLlFdNirgF/KbHyRgvFG9MB8GA1UdIwQY
MBaAFFZnMy9ICUHtNYA7LAS4Tzco05KXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm1jekwwZ0pRZTAxZ0Rzc0JMaFBOeWpUa3BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yZjkwZjEtZTI1Ny00ZTU0LWIyNWQt
MjU5NGMyZmY2Y2I3LzEvVm1jekwwZ0pRZTAxZ0Rzc0JMaFBOeWpUa3BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8yZjkwZjEtZTI1Ny00ZTU0LWIyNWQtMjU5NGMyZmY2Y2I3
LzEvVm1jekwwZ0pRZTAxZ0Rzc0JMaFBOeWpUa3BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjPD47A7
eLvk9lalCIY9w86YBhshwoaZ4+tKv22XJG0JJmADTr6VW426aHGusYVHBooBqJPA
2xdecU0d+h1Da4E3m4sYHSkzLrnzHjFwQcgsOlqv+DEKn4gMdt6tIKKJYY9zRCHT
a79JqZv0BVM/bQ5PzomI9TsIfQXtOOav83NeMZjnnbRpDlkzOIx6yyWQLtjOeBW7
r4LRujmrqwxfuJgDXUqp5qAHe7O0HK83+/fc9ketWSCxVqfsF/SgYST58hfS8oXs
dwe7RFpflCBfCz64+TYDHiiMoXDjWLNYSQUiEP8nYtwGQvqOzRjpcy8CTPKnNYZ7
gB0/+FAtDRMqxg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:33 2026 by rpki-client