Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File: VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier: J0dZsJQjlagLWNodlCAOO1VzKBoKxnyQ03sJx1DIoBU=
Subject key identifier: E6:C6:B6:AD:BE:5A:10:84:BD:F1:3A:FF:5F:A3:C7:E2:DD:82:17:59
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial: 019D2583DA542C59BECB373F9088FD4C4275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number: 041B
Signing time: Wed 25 Mar 2026 15:01:31 +0000
Manifest this update: Wed 25 Mar 2026 15:01:31 +0000
Manifest next update: Thu 26 Mar 2026 15:01:31 +0000
Files and hashes: 1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: RA6Dp7gGddTW6PRz5EXZN6QurSNmt9r+ixWAyuDJPi4=)
2: _Oo5q5cK7WylvggoJmoqFYskB4c.roa (hash: 5KMQiMGpqj0Z920Fo72+vT0buVYau5a+ocsxOU9eZ5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:da:54:2c:59:be:cb:37:3f:90:88:fd:4c:42:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
Validity
Not Before: Mar 25 15:01:31 2026 GMT
Not After : Mar 26 15:01:31 2026 GMT
Subject: CN=e6c6b6adbe5a1084bdf13aff5fa3c7e2dd821759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:a8:ab:56:c7:23:66:2a:8f:ed:f0:2b:ac:
96:1f:95:51:0e:e7:ec:db:b2:7a:07:c4:e1:ea:0a:
53:22:f0:0c:1e:51:66:00:cf:e0:83:1f:f1:78:7d:
40:b8:79:03:31:a3:67:e9:ae:fd:4b:3c:c6:00:33:
83:0a:95:39:a0:5c:13:1e:87:39:47:24:63:75:39:
72:b3:c4:41:d1:e7:2e:e9:e1:68:7e:d3:30:ff:d7:
94:70:bd:93:07:a0:39:e5:61:03:2c:b5:25:55:f0:
98:c6:02:84:4d:34:56:bd:22:42:2f:4a:81:48:06:
94:43:bf:fd:21:f9:55:78:54:e2:28:2f:fa:56:0b:
0c:fe:25:30:22:0d:21:e3:06:f7:0f:ac:55:91:60:
1d:0d:48:a4:a9:45:8f:4c:57:7c:8c:87:0f:7a:01:
cf:9a:67:e3:bb:80:c5:1c:07:a0:a7:21:7f:73:dd:
d8:16:19:d7:34:55:11:a6:1d:04:3b:60:9c:76:9e:
09:f4:70:a8:bc:ba:72:58:4e:64:58:13:bf:91:a2:
b6:4a:87:bc:34:5a:bc:e1:c2:5f:65:18:6d:59:c3:
f9:b5:76:4c:f3:b8:fb:96:95:52:c6:15:ac:7b:6e:
29:6d:24:b3:4d:df:60:a3:59:9d:5d:92:ea:4f:64:
ad:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C6:B6:AD:BE:5A:10:84:BD:F1:3A:FF:5F:A3:C7:E2:DD:82:17:59
X509v3 Authority Key Identifier:
keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e7:70:eb:b3:4a:32:b0:aa:32:50:79:59:1e:01:cd:24:ef:
ee:3d:90:6c:f2:74:19:a1:ae:48:15:a5:ba:67:79:7f:ca:e3:
9c:7c:65:f2:c8:f3:8b:f7:9d:d1:fb:24:d7:32:a4:f1:62:74:
44:b9:e7:52:1e:89:77:db:40:3c:ca:c5:bb:98:13:7a:ea:e9:
a7:76:23:2a:3a:cb:58:7d:37:60:e1:f1:e8:d2:5e:aa:99:83:
d5:2d:10:b0:fc:49:b2:71:4d:29:a5:7c:4c:87:a1:3d:04:99:
a6:f3:07:d0:48:2e:b3:dc:4f:10:0a:87:91:2c:7a:70:3d:02:
68:62:83:0b:9a:08:e0:31:b6:95:aa:ba:c6:b2:d3:b4:08:40:
8a:fc:30:c1:a3:f4:3c:51:6d:2e:ef:01:39:03:18:b7:bb:45:
2a:ca:03:7c:f7:bc:cc:4e:43:75:3b:f1:00:84:6e:a0:19:6b:
5a:06:11:96:e3:c8:f8:53:78:07:c1:91:f2:3e:07:a5:8d:ba:
64:81:b9:fe:17:14:32:56:41:a9:f1:f4:d1:9b:34:40:18:2d:
86:db:a6:48:49:06:b9:18:11:c1:61:2f:0c:0a:02:37:dc:46:
ad:fc:67:cf:a8:3c:2e:39:2a:ff:88:a3:d1:e4:55:fe:01:03:
be:1d:ec:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg9pULFm+yzc/kIj9TEJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NjFkOTY0ZGY0YTg2ZGI4ZmZiOTlhYTg5NTgyZGE2OGEz
MDkwOGMwHhcNMjYwMzI1MTUwMTMxWhcNMjYwMzI2MTUwMTMxWjAzMTEwLwYDVQQD
EyhlNmM2YjZhZGJlNWExMDg0YmRmMTNhZmY1ZmEzYzdlMmRkODIxNzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ6oq1bHI2Yqj+3wK6yWH5VRDufs
27J6B8Th6gpTIvAMHlFmAM/ggx/xeH1AuHkDMaNn6a79SzzGADODCpU5oFwTHoc5
RyRjdTlys8RB0ecu6eFoftMw/9eUcL2TB6A55WEDLLUlVfCYxgKETTRWvSJCL0qB
SAaUQ7/9IflVeFTiKC/6VgsM/iUwIg0h4wb3D6xVkWAdDUikqUWPTFd8jIcPegHP
mmfju4DFHAegpyF/c93YFhnXNFURph0EO2Ccdp4J9HCovLpyWE5kWBO/kaK2Soe8
NFq84cJfZRhtWcP5tXZM87j7lpVSxhWse24pbSSzTd9go1mdXZLqT2StNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObGtq2+WhCEvfE6/1+jx+LdghdZMB8GA1UdIwQY
MBaAFFZh2WTfSobbj/uZqolYLaaKMJCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYt
M2Q0MzliN2NkZTcyLzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYtM2Q0MzliN2NkZTcy
LzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+dw67NK
MrCqMlB5WR4BzSTv7j2QbPJ0GaGuSBWlumd5f8rjnHxl8sjzi/ed0fsk1zKk8WJ0
RLnnUh6Jd9tAPMrFu5gTeurpp3YjKjrLWH03YOHx6NJeqpmD1S0QsPxJsnFNKaV8
TIehPQSZpvMH0Egus9xPEAqHkSx6cD0CaGKDC5oI4DG2laq6xrLTtAhAivwwwaP0
PFFtLu8BOQMYt7tFKsoDfPe8zE5DdTvxAIRuoBlrWgYRluPI+FN4B8GR8j4HpY26
ZIG5/hcUMlZBqfH00Zs0QBgthtumSEkGuRgRwWEvDAoCN9xGrfxnz6g8Ljkq/4ij
0eRV/gEDvh3slQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:19 2026 by rpki-client