Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
File: VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft (raw, json)
Hash identifier: P15caGCKjZSwy+w9mPSRisO62J81gghI6qCqVjcXc7U=
Subject key identifier: 8D:F9:F5:76:2C:52:21:45:F3:FE:B3:5A:D6:03:D2:AD:A0:01:B1:D0
Authority key identifier: 55:16:75:57:89:46:86:EE:0C:87:27:B9:61:CC:4B:92:30:00:5F:38
Certificate issuer: /CN=55167557894686ee0c8727b961cc4b9230005f38
Certificate serial: 019F935B5F6EC3116E4C34B0AA9017AE85DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:06 +0000
Manifest this update: Fri 24 Jul 2026 09:01:06 +0000
Manifest next update: Sat 25 Jul 2026 09:01:06 +0000
Files and hashes: 1: VRZ1V4lGhu4Mhye5YcxLkjAAXzg.crl (hash: TDc/ZgAoiiZKjbKzOMw2+qCX5y8bou80DX28I2/nyko=)
2: qjU3-mg-6plX7NPtZmDw0teXaog.roa (hash: yHPCb3W11kzbNlMZG3Tad2k2N/aaDEDcgs/PQrk8prM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:5f:6e:c3:11:6e:4c:34:b0:aa:90:17:ae:85:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55167557894686ee0c8727b961cc4b9230005f38
Validity
Not Before: Jul 24 09:01:06 2026 GMT
Not After : Jul 25 09:01:06 2026 GMT
Subject: CN=8df9f5762c522145f3feb35ad603d2ada001b1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:84:47:7f:ca:8f:8b:f8:8b:a2:da:3c:78:
68:17:21:e2:ce:ea:3e:91:d8:07:0d:8f:ed:96:bc:
8e:99:fc:bc:06:dc:c7:c5:d1:8a:7a:19:61:a5:f9:
f5:8d:02:fd:05:3e:da:9e:cc:29:32:6a:df:54:90:
4e:f4:b1:ee:f1:14:17:c5:c3:3e:5a:db:e6:c4:74:
09:2a:ab:dd:98:84:bc:65:84:f9:f0:d7:bf:94:67:
e5:47:fa:91:00:c8:3f:e3:fe:3c:5e:93:7c:c1:03:
da:c7:aa:f3:0f:2b:a0:87:69:3c:99:94:dd:12:21:
ab:c1:5b:d8:55:c6:d0:8b:50:e1:70:0c:a4:a7:0e:
bc:81:8e:c2:db:c0:fe:8e:60:bf:54:5b:af:24:b7:
39:ca:0e:19:18:fd:07:b7:61:40:a0:dc:da:a5:7d:
3e:f4:d3:a9:09:56:10:ad:6a:5f:a7:60:39:c2:9e:
13:01:50:88:77:dd:62:ad:0e:87:8a:7d:05:d8:83:
58:b3:60:c6:7e:1e:c6:88:20:b6:4e:0b:74:34:91:
b1:47:ea:c3:fc:68:84:2a:b0:b3:91:f7:d2:e0:ad:
ac:ad:10:4f:11:1c:c9:35:9b:ef:b6:44:8f:5e:d9:
2a:71:10:2b:81:83:28:dc:73:be:84:b1:2e:e0:36:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F9:F5:76:2C:52:21:45:F3:FE:B3:5A:D6:03:D2:AD:A0:01:B1:D0
X509v3 Authority Key Identifier:
keyid:55:16:75:57:89:46:86:EE:0C:87:27:B9:61:CC:4B:92:30:00:5F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a6:d2:cd:6c:b9:0c:5e:06:77:36:54:70:89:f5:d2:e8:f9:
50:7d:e9:71:ec:ce:db:6f:b0:a2:73:3d:aa:97:ef:eb:34:15:
87:ee:de:98:94:87:48:7e:6d:b8:78:67:58:87:97:e6:9a:ba:
53:b1:16:2d:83:51:9c:1c:6e:71:e8:89:2a:06:27:e4:38:d4:
4b:4e:cf:2f:cd:07:a3:53:91:9f:e3:49:ab:aa:57:ad:2e:1c:
40:85:36:7b:ed:4d:13:3a:5e:6b:09:dd:38:cf:b5:fa:8f:02:
8f:91:9d:64:16:04:cf:82:99:06:ce:e6:9c:3a:3f:7b:33:23:
f8:0c:9e:5f:fa:33:17:af:14:48:d9:06:d4:45:38:29:8d:34:
6d:51:3a:5b:9a:80:a7:da:a9:22:c8:0b:a4:c9:6d:a7:c5:0a:
a7:d1:8e:ac:14:7d:0e:1f:8e:04:db:cd:bf:78:12:a7:14:89:
e5:1e:04:60:c5:1b:c8:07:d1:51:16:43:ac:59:3c:ea:8d:43:
22:50:6d:29:54:e8:0f:1e:f3:9e:81:5c:74:83:59:c8:7a:65:
c8:f5:9b:94:a9:ae:6f:49:2b:66:88:61:63:26:96:de:19:f4:
76:72:ea:66:4a:7b:a9:5c:77:0e:a6:6f:1d:d6:5e:5e:b6:9a:
86:27:f3:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW19uwxFuTDSwqpAXroXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MTY3NTU3ODk0Njg2ZWUwYzg3MjdiOTYxY2M0YjkyMzAw
MDVmMzgwHhcNMjYwNzI0MDkwMTA2WhcNMjYwNzI1MDkwMTA2WjAzMTEwLwYDVQQD
Eyg4ZGY5ZjU3NjJjNTIyMTQ1ZjNmZWIzNWFkNjAzZDJhZGEwMDFiMWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8KER3/Kj4v4i6LaPHhoFyHizuo+
kdgHDY/tlryOmfy8BtzHxdGKehlhpfn1jQL9BT7answpMmrfVJBO9LHu8RQXxcM+
WtvmxHQJKqvdmIS8ZYT58Ne/lGflR/qRAMg/4/48XpN8wQPax6rzDyugh2k8mZTd
EiGrwVvYVcbQi1DhcAykpw68gY7C28D+jmC/VFuvJLc5yg4ZGP0Ht2FAoNzapX0+
9NOpCVYQrWpfp2A5wp4TAVCId91irQ6Hin0F2INYs2DGfh7GiCC2Tgt0NJGxR+rD
/GiEKrCzkffS4K2srRBPERzJNZvvtkSPXtkqcRArgYMo3HO+hLEu4DbMEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI359XYsUiFF8/6zWtYD0q2gAbHQMB8GA1UdIwQY
MBaAFFUWdVeJRobuDIcnuWHMS5IwAF84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlJaMVY0bEdodTRNaHllNVljeExrakFBWHpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80ZTI4MDgtZThmNC00MmE3LWE4Mjct
N2FiY2U2MDBjMjE4LzEvVlJaMVY0bEdodTRNaHllNVljeExrakFBWHpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80ZTI4MDgtZThmNC00MmE3LWE4MjctN2FiY2U2MDBjMjE4
LzEvVlJaMVY0bEdodTRNaHllNVljeExrakFBWHpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKbSzWy5
DF4GdzZUcIn10uj5UH3pcezO22+wonM9qpfv6zQVh+7emJSHSH5tuHhnWIeX5pq6
U7EWLYNRnBxuceiJKgYn5DjUS07PL80Ho1ORn+NJq6pXrS4cQIU2e+1NEzpeawnd
OM+1+o8Cj5GdZBYEz4KZBs7mnDo/ezMj+AyeX/ozF68USNkG1EU4KY00bVE6W5qA
p9qpIsgLpMltp8UKp9GOrBR9Dh+OBNvNv3gSpxSJ5R4EYMUbyAfRURZDrFk86o1D
IlBtKVToDx7znoFcdINZyHplyPWblKmub0krZohhYyaW3hn0dnLqZkp7qVx3DqZv
HdZeXraahifz5Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:11:57 2026 by rpki-client