Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
File: VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft (raw, json)
Hash identifier: 8wRWjjNihBWr9kBH7Ene2lPPuBg/8LRxG8ePQYUkclg=
Subject key identifier: BE:EA:D9:0B:C1:47:CF:32:9D:C3:AC:90:88:59:68:1A:84:65:1A:69
Authority key identifier: 54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
Certificate issuer: /CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Certificate serial: 019D265F5F687CCD8131819DB8957D53C884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
Manifest number: 1643
Signing time: Wed 25 Mar 2026 19:01:17 +0000
Manifest this update: Wed 25 Mar 2026 19:01:17 +0000
Manifest next update: Thu 26 Mar 2026 19:01:17 +0000
Files and hashes: 1: VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl (hash: ok8VCYXsTV+ycWRQe1zJ3z4ho4VGd7VGxZStBLtugxM=)
2: k1VkrYj71KlGDFGzEpJl8AHMPWc.roa (hash: gZkPpwxEzzZxWfr1nD5cROcpx5OzOWqvEYOhVqPkcH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:5f:68:7c:cd:81:31:81:9d:b8:95:7d:53:c8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Validity
Not Before: Mar 25 19:01:17 2026 GMT
Not After : Mar 26 19:01:17 2026 GMT
Subject: CN=beead90bc147cf329dc3ac908859681a84651a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:2e:26:85:dc:78:e0:17:0c:96:a1:d1:f5:
d3:40:d7:75:dc:31:5e:61:88:b0:03:13:4f:5e:01:
d9:47:3f:20:5e:bf:0e:b3:a2:4f:81:ce:78:01:be:
38:a0:76:b6:81:55:04:63:7a:9a:c3:c2:31:f4:fb:
a5:70:0d:6f:21:3e:71:58:3b:4c:85:db:b0:15:37:
26:32:27:ca:bb:99:71:24:26:70:99:b9:bc:4a:7c:
37:d6:49:84:cd:3c:f6:33:d4:40:56:91:5a:e4:5b:
c2:ef:fb:8e:af:e0:35:e5:1e:4d:b6:75:7b:0f:10:
c7:2f:92:d3:51:11:04:66:16:88:a9:7b:80:cf:84:
a5:b7:2d:c7:a4:42:76:55:10:f5:66:e2:3b:25:41:
b9:40:6f:58:52:e2:b7:44:85:b5:74:5a:5f:b2:b3:
b5:b6:0e:8a:89:3a:b3:be:84:00:2b:07:d2:f1:62:
34:23:40:9d:15:d0:81:0e:dc:a7:a8:c3:6d:72:50:
87:ba:29:f5:93:80:cf:8c:81:4e:32:5e:41:35:5a:
ad:e9:05:0d:8e:5f:f6:88:51:ee:63:10:61:a5:ad:
dd:e0:2b:bd:0e:26:33:64:73:62:7b:e9:07:a6:9e:
ac:ed:3b:59:cd:5b:76:78:be:24:03:1d:d7:91:47:
ba:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EA:D9:0B:C1:47:CF:32:9D:C3:AC:90:88:59:68:1A:84:65:1A:69
X509v3 Authority Key Identifier:
keyid:54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:59:6c:c6:a1:c7:82:aa:73:46:3c:af:f7:50:75:f4:31:b5:
b9:c4:84:d9:7e:af:b1:ab:fe:e1:bb:24:9c:46:53:d4:13:c1:
d6:2a:ad:4d:dc:5a:36:07:6e:fe:a2:37:68:13:7f:f8:c5:f2:
a2:c1:58:db:a2:d1:f9:96:c0:71:91:04:32:78:37:8e:a9:ad:
28:f1:2c:d8:81:4e:4e:56:d2:64:62:8c:a2:a7:68:7d:7d:0e:
38:78:da:8c:1d:57:38:c1:fa:64:57:78:03:af:94:20:51:1d:
f9:3e:6a:52:d0:b0:21:60:f4:cb:f4:69:5e:db:cd:c0:cf:ee:
de:2d:46:62:88:a8:fe:db:f3:48:0f:3f:d7:98:b4:75:51:93:
39:c0:29:4e:b9:1b:67:55:f4:a1:56:0c:b5:56:54:be:05:04:
e3:7a:ca:da:a8:af:f1:1f:66:89:a7:7a:b4:be:90:5e:8e:50:
59:ba:16:bb:8d:31:f7:8f:4c:19:80:0e:6b:86:fe:58:96:c1:
be:15:d2:df:59:a2:ab:69:12:fc:8c:65:9f:25:96:25:0d:ce:
a3:90:14:11:ea:fa:97:ef:52:23:de:77:35:7a:d0:e0:80:c4:
a3:5b:6c:d0:1d:c6:6c:36:3e:7d:e7:f2:cf:8a:c8:62:ff:96:
79:28:d6:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX19ofM2BMYGduJV9U8iEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzkxZGRlMmM5YmRlYTM2NmNlN2VjNmM1YTgwMGM1ZGE2
MzM0NTQwHhcNMjYwMzI1MTkwMTE3WhcNMjYwMzI2MTkwMTE3WjAzMTEwLwYDVQQD
EyhiZWVhZDkwYmMxNDdjZjMyOWRjM2FjOTA4ODU5NjgxYTg0NjUxYTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/suJoXceOAXDJah0fXTQNd13DFe
YYiwAxNPXgHZRz8gXr8Os6JPgc54Ab44oHa2gVUEY3qaw8Ix9PulcA1vIT5xWDtM
hduwFTcmMifKu5lxJCZwmbm8Snw31kmEzTz2M9RAVpFa5FvC7/uOr+A15R5NtnV7
DxDHL5LTUREEZhaIqXuAz4Slty3HpEJ2VRD1ZuI7JUG5QG9YUuK3RIW1dFpfsrO1
tg6KiTqzvoQAKwfS8WI0I0CdFdCBDtynqMNtclCHuin1k4DPjIFOMl5BNVqt6QUN
jl/2iFHuYxBhpa3d4Cu9DiYzZHNie+kHpp6s7TtZzVt2eL4kAx3XkUe6vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7q2QvBR88yncOskIhZaBqEZRppMB8GA1UdIwQY
MBaAFFR5Hd4sm96jZs5+xsWoAMXaYzRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhrZDNpeWIzcU5tem43R3hhZ0F4ZHBqTkZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xN2U1NjctOWU0NC00NDRhLWFjNjQt
MThiMzRiZWE5YjA2LzEvVkhrZDNpeWIzcU5tem43R3hhZ0F4ZHBqTkZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8xN2U1NjctOWU0NC00NDRhLWFjNjQtMThiMzRiZWE5YjA2
LzEvVkhrZDNpeWIzcU5tem43R3hhZ0F4ZHBqTkZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFlsxqHH
gqpzRjyv91B19DG1ucSE2X6vsav+4bsknEZT1BPB1iqtTdxaNgdu/qI3aBN/+MXy
osFY26LR+ZbAcZEEMng3jqmtKPEs2IFOTlbSZGKMoqdofX0OOHjajB1XOMH6ZFd4
A6+UIFEd+T5qUtCwIWD0y/RpXtvNwM/u3i1GYoio/tvzSA8/15i0dVGTOcApTrkb
Z1X0oVYMtVZUvgUE43rK2qiv8R9miad6tL6QXo5QWboWu40x949MGYAOa4b+WJbB
vhXS31miq2kS/IxlnyWWJQ3Oo5AUEer6l+9SI953NXrQ4IDEo1ts0B3GbDY+fefy
z4rIYv+WeSjW/A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:41:57 2026 by rpki-client