Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
File: VTq9CI9YVGJD8CJwIs20e80dfY4.mft (raw, json)
Hash identifier: Pw+GKfb2+U2vHZA+WOmsM/NL0gdI1kh0hOS3e3GdB3g=
Subject key identifier: 6E:EC:BB:36:D2:26:5C:97:80:ED:5E:AC:4B:67:76:9E:46:44:14:67
Authority key identifier: 55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
Certificate issuer: /CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Certificate serial: 019D27A8C1CBC5C856C1C4723418ABD68D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
Manifest number: 167F
Signing time: Thu 26 Mar 2026 01:01:04 +0000
Manifest this update: Thu 26 Mar 2026 01:01:04 +0000
Manifest next update: Fri 27 Mar 2026 01:01:04 +0000
Files and hashes: 1: VTq9CI9YVGJD8CJwIs20e80dfY4.crl (hash: SC9yVRB4YvEBhU8Lqxgyk8unEnVM5/Du6ZkQbrfCtwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c1:cb:c5:c8:56:c1:c4:72:34:18:ab:d6:8d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Validity
Not Before: Mar 26 01:01:04 2026 GMT
Not After : Mar 27 01:01:04 2026 GMT
Subject: CN=6eecbb36d2265c9780ed5eac4b67769e46441467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:ea:5a:6d:db:4d:bf:eb:de:0b:1c:b5:3f:
ee:bb:8c:86:9d:9e:4a:c7:4b:7d:87:5a:ef:fa:07:
4a:95:19:ee:94:ce:bc:06:32:c2:cb:1e:9d:fe:b7:
7b:ee:39:1d:b7:63:a9:02:89:2f:0c:bd:8b:1d:d2:
b5:46:9c:22:5c:6d:f9:b9:30:02:5f:62:36:28:ac:
31:ad:68:db:53:d0:ec:57:b6:ea:ba:d9:9f:52:bd:
05:fc:95:d6:b4:37:2b:c2:28:d6:f8:e7:a9:ab:c2:
1e:46:aa:ec:ef:86:87:69:48:2a:2e:b4:f6:12:be:
26:db:f3:27:9a:61:a8:76:3f:dd:4b:47:5a:20:ea:
55:bd:a1:1e:bd:54:59:96:69:e6:db:83:35:e5:8b:
5f:50:2b:33:21:1a:7a:1d:db:27:38:6f:49:1d:8d:
04:4e:e1:64:2f:ac:b2:ac:ef:fe:91:a0:4a:4e:db:
57:12:b3:29:a9:d3:f3:f9:8d:a0:a2:8e:16:04:91:
e0:93:fe:89:5d:e5:6b:5f:17:9f:23:9a:72:b0:97:
62:26:0b:18:d2:fb:b6:25:76:52:cb:75:01:f8:38:
4c:d4:b6:7c:c8:c1:49:af:3a:82:bd:e7:93:8d:65:
1d:3e:67:21:1a:f9:2a:76:fc:a4:6d:72:6e:4b:31:
7a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EC:BB:36:D2:26:5C:97:80:ED:5E:AC:4B:67:76:9E:46:44:14:67
X509v3 Authority Key Identifier:
keyid:55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1d:1b:da:75:53:63:ca:5e:f3:43:99:5b:17:7a:d7:cb:93:
4f:f3:aa:7f:cc:31:c5:13:02:ab:e4:3c:66:e1:b7:80:af:cf:
0b:54:36:1e:71:c2:ea:f2:ca:6e:ec:f9:c8:0e:8d:05:57:7a:
26:4f:4f:2c:87:59:87:0e:ae:ca:fe:6e:6b:90:63:a7:9b:04:
63:00:99:d5:d5:c0:d3:ac:59:76:28:a5:c3:22:d1:41:24:3c:
86:da:c4:40:c4:a1:dc:1d:7e:89:66:11:15:06:a5:ed:0f:07:
5b:ef:ec:d9:2e:38:f9:41:61:93:86:36:8d:59:9b:2b:0f:d6:
19:a1:f0:f9:af:ed:da:c1:1d:df:1f:38:9f:72:53:71:a5:a9:
3c:8d:aa:91:4c:e8:77:1c:6a:2f:db:ff:5d:db:92:43:fa:fa:
88:31:d2:76:be:ca:92:de:6c:fa:85:de:a4:83:bf:cd:1c:fc:
18:cf:7a:88:59:4d:09:0f:f1:4b:ed:b6:16:78:85:f7:3c:0b:
2b:63:bd:8a:11:3e:65:06:d6:fa:6e:2f:bd:ab:95:da:79:1e:
5d:b1:42:ba:c9:64:b9:45:9b:81:a8:9e:1c:3a:77:f6:cd:5d:
8e:6c:00:f5:3d:8b:62:22:39:4e:cb:15:ff:21:99:ca:c1:7d:
10:3f:44:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqMHLxchWwcRyNBir1o1iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1M2FiZDA4OGY1ODU0NjI0M2YwMjI3MDIyY2RiNDdiY2Qx
ZDdkOGUwHhcNMjYwMzI2MDEwMTA0WhcNMjYwMzI3MDEwMTA0WjAzMTEwLwYDVQQD
Eyg2ZWVjYmIzNmQyMjY1Yzk3ODBlZDVlYWM0YjY3NzY5ZTQ2NDQxNDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEDqWm3bTb/r3gsctT/uu4yGnZ5K
x0t9h1rv+gdKlRnulM68BjLCyx6d/rd77jkdt2OpAokvDL2LHdK1RpwiXG35uTAC
X2I2KKwxrWjbU9DsV7bqutmfUr0F/JXWtDcrwijW+Oepq8IeRqrs74aHaUgqLrT2
Er4m2/MnmmGodj/dS0daIOpVvaEevVRZlmnm24M15YtfUCszIRp6HdsnOG9JHY0E
TuFkL6yyrO/+kaBKTttXErMpqdPz+Y2goo4WBJHgk/6JXeVrXxefI5pysJdiJgsY
0vu2JXZSy3UB+DhM1LZ8yMFJrzqCveeTjWUdPmchGvkqdvykbXJuSzF6nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7suzbSJlyXgO1erEtndp5GRBRnMB8GA1UdIwQY
MBaAFFU6vQiPWFRiQ/AicCLNtHvNHX2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQt
ZDU2NmY3M2QzZmIwLzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQtZDU2NmY3M2QzZmIw
LzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMB0b2nVT
Y8pe80OZWxd618uTT/Oqf8wxxRMCq+Q8ZuG3gK/PC1Q2HnHC6vLKbuz5yA6NBVd6
Jk9PLIdZhw6uyv5ua5Bjp5sEYwCZ1dXA06xZdiilwyLRQSQ8htrEQMSh3B1+iWYR
FQal7Q8HW+/s2S44+UFhk4Y2jVmbKw/WGaHw+a/t2sEd3x84n3JTcaWpPI2qkUzo
dxxqL9v/XduSQ/r6iDHSdr7Kkt5s+oXepIO/zRz8GM96iFlNCQ/xS+22FniF9zwL
K2O9ihE+ZQbW+m4vvauV2nkeXbFCuslkuUWbgaieHDp39s1djmwA9T2LYiI5TssV
/yGZysF9ED9EUQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:48:02 2026 by rpki-client