Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
File: VxRWZJaS5gVm3gCOEmu90dLr7UU.mft (raw, json)
Hash identifier: rH6n9ENpOVTuRUJuvQ//JSLpeh14yndnV5U9qIFCWmQ=
Subject key identifier: 7C:45:03:4B:F0:B0:7D:A0:92:F7:B8:39:0C:2F:4D:A5:00:BF:F4:23
Authority key identifier: 57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
Certificate issuer: /CN=571456649692e60566de008e126bbdd1d2ebed45
Certificate serial: 019D2C97B89135911405AF5CF41119A7FCB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
Manifest number: 1104
Signing time: Fri 27 Mar 2026 00:00:33 +0000
Manifest this update: Fri 27 Mar 2026 00:00:33 +0000
Manifest next update: Sat 28 Mar 2026 00:00:33 +0000
Files and hashes: 1: HOp2jzb00JVG7hGcpmwz-YejBiA.roa (hash: az7il00pr1Ws5fJ/aExDjxq5+Lv6ZMAjzs01eExhQbQ=)
2: VxRWZJaS5gVm3gCOEmu90dLr7UU.crl (hash: 7I6PEBfs4CaY2R4AT5LuQU5gsDKdLglFmQRlPY9o6z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:97:b8:91:35:91:14:05:af:5c:f4:11:19:a7:fc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571456649692e60566de008e126bbdd1d2ebed45
Validity
Not Before: Mar 27 00:00:33 2026 GMT
Not After : Mar 28 00:00:33 2026 GMT
Subject: CN=7c45034bf0b07da092f7b8390c2f4da500bff423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ee:b2:6a:e6:f3:50:cc:e8:34:47:23:31:53:
1f:6d:57:64:f4:53:2e:89:66:4b:22:ac:a8:06:d7:
a0:9d:42:df:3f:2b:66:0f:a7:5a:11:c9:b7:c4:9d:
85:74:46:df:49:20:21:86:1b:a6:0a:9a:e1:15:73:
4b:59:9f:30:fc:14:79:6b:40:7b:19:03:b6:2c:c9:
fa:9f:8a:2b:78:16:1d:9a:b2:dc:31:cd:71:24:f1:
05:6e:52:b5:02:3f:ee:f1:9b:19:a7:5a:e4:86:8f:
d3:02:5d:fb:66:bf:26:bc:1b:33:0b:9d:f0:c2:3a:
27:ea:ba:ee:09:3a:36:04:a8:44:02:09:81:a0:fd:
c8:8f:41:7c:e8:2e:1f:0b:53:9e:21:15:64:00:d4:
8c:ff:a6:b2:f3:ac:ed:bb:07:c0:2e:8f:d3:a8:1d:
02:f8:71:d0:99:b7:82:d1:9e:d3:23:10:17:c1:ad:
6b:37:00:3b:6f:b1:b6:78:41:42:6f:a7:64:21:36:
cc:43:b3:6a:76:f5:4f:09:a4:84:9d:e3:91:7a:af:
a1:2b:30:31:b7:f1:ba:83:95:91:88:05:3f:66:33:
4a:1d:8f:04:13:52:9a:08:1a:cc:cc:90:c8:81:80:
f6:88:94:3c:3e:8e:81:ef:94:b9:9d:db:b2:31:d5:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:45:03:4B:F0:B0:7D:A0:92:F7:B8:39:0C:2F:4D:A5:00:BF:F4:23
X509v3 Authority Key Identifier:
keyid:57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:19:48:99:9a:7a:f6:6f:91:1a:4a:2f:f1:dd:23:91:7a:23:
ec:03:89:a1:11:a6:3e:7d:d1:4c:64:c8:cb:73:73:88:c3:88:
42:80:8c:95:f2:13:de:33:a8:6d:15:b7:37:89:70:d8:66:8c:
48:ae:66:f6:3a:66:f1:ce:b3:67:d1:3b:35:48:43:20:2b:f0:
fa:10:ad:e5:4b:e3:a7:7a:c6:46:e0:47:85:9b:05:ae:b4:c2:
d1:42:7c:17:65:55:cf:21:cc:d0:56:85:32:23:7f:08:10:36:
9e:f9:6d:71:48:4d:a5:03:87:39:17:bc:b1:e1:df:9b:a3:d4:
51:96:c2:a6:84:5f:cb:37:c6:77:78:64:9f:b4:de:5d:3d:e1:
2a:c4:93:cd:f4:2c:86:9c:6b:d4:5d:ee:d7:a7:58:d8:be:dc:
d0:06:46:be:9d:68:85:92:ee:03:08:57:1a:82:2d:b4:37:3c:
ef:02:eb:74:db:e1:3f:6f:4e:36:a4:31:19:74:88:f8:e4:56:
6a:76:84:91:37:c5:86:b7:f1:96:55:1e:d7:00:a5:38:3b:ae:
7b:ca:fe:ac:b0:85:3f:25:5e:03:87:65:8a:f8:13:ae:ac:d3:
51:87:7e:89:f6:29:f4:df:5b:b3:40:44:86:4f:24:c1:68:bf:
7d:38:5f:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0sl7iRNZEUBa9c9BEZp/y5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTQ1NjY0OTY5MmU2MDU2NmRlMDA4ZTEyNmJiZGQxZDJl
YmVkNDUwHhcNMjYwMzI3MDAwMDMzWhcNMjYwMzI4MDAwMDMzWjAzMTEwLwYDVQQD
Eyg3YzQ1MDM0YmYwYjA3ZGEwOTJmN2I4MzkwYzJmNGRhNTAwYmZmNDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu6yaubzUMzoNEcjMVMfbVdk9FMu
iWZLIqyoBtegnULfPytmD6daEcm3xJ2FdEbfSSAhhhumCprhFXNLWZ8w/BR5a0B7
GQO2LMn6n4oreBYdmrLcMc1xJPEFblK1Aj/u8ZsZp1rkho/TAl37Zr8mvBszC53w
wjon6rruCTo2BKhEAgmBoP3Ij0F86C4fC1OeIRVkANSM/6ay86ztuwfALo/TqB0C
+HHQmbeC0Z7TIxAXwa1rNwA7b7G2eEFCb6dkITbMQ7NqdvVPCaSEneOReq+hKzAx
t/G6g5WRiAU/ZjNKHY8EE1KaCBrMzJDIgYD2iJQ8Po6B75S5nduyMdVr8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxFA0vwsH2gkve4OQwvTaUAv/QjMB8GA1UdIwQY
MBaAFFcUVmSWkuYFZt4AjhJrvdHS6+1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wOGE3ZmYtMmNlZi00MjQ4LTlmZTgt
MDRjOGYzZWVjZWViLzEvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wOGE3ZmYtMmNlZi00MjQ4LTlmZTgtMDRjOGYzZWVjZWVi
LzEvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5hlImZp6
9m+RGkov8d0jkXoj7AOJoRGmPn3RTGTIy3NziMOIQoCMlfIT3jOobRW3N4lw2GaM
SK5m9jpm8c6zZ9E7NUhDICvw+hCt5Uvjp3rGRuBHhZsFrrTC0UJ8F2VVzyHM0FaF
MiN/CBA2nvltcUhNpQOHORe8seHfm6PUUZbCpoRfyzfGd3hkn7TeXT3hKsSTzfQs
hpxr1F3u16dY2L7c0AZGvp1ohZLuAwhXGoIttDc87wLrdNvhP29ONqQxGXSI+ORW
anaEkTfFhrfxllUe1wClODuue8r+rLCFPyVeA4dlivgTrqzTUYd+ifYp9N9bs0BE
hk8kwWi/fThfOg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:10:58 2026 by rpki-client