Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier: SSO9kMCsjEkTvUYyNUrRjuuWMdbvGOR67DNAkKl2g6U=
Subject key identifier: A2:4A:79:CC:F5:BB:07:B6:61:19:96:40:4C:B1:72:99:64:62:A2:62
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 019D29CDF7B8EBD82A17F4C16F8B5E6E0792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number: 1366
Signing time: Thu 26 Mar 2026 11:00:57 +0000
Manifest this update: Thu 26 Mar 2026 11:00:57 +0000
Manifest next update: Fri 27 Mar 2026 11:00:57 +0000
Files and hashes: 1: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: xq0v+7ICHWJQi/PcHhdTcQRFb4vPZa2yGoiVJhpnJRs=)
2: oGOTDBSs-8RzQgvE7ZrDeZrWmhY.roa (hash: fg5ldvtNVy0GA4pv1zrABZsjmX5v9/M80VbIZSFHe+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:f7:b8:eb:d8:2a:17:f4:c1:6f:8b:5e:6e:07:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: Mar 26 11:00:57 2026 GMT
Not After : Mar 27 11:00:57 2026 GMT
Subject: CN=a24a79ccf5bb07b6611996404cb172996462a262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:5f:87:0d:09:b9:23:1e:b9:7b:8c:67:01:
25:7f:69:97:4d:b2:92:2d:3b:0d:a5:82:78:a3:35:
8b:12:05:58:1b:05:60:8d:f0:d5:09:c3:55:11:ee:
0c:4a:8c:b9:f7:82:55:36:cb:fa:91:38:2a:96:c5:
80:35:57:89:c0:7f:f2:d5:d3:44:42:52:b6:3a:4b:
95:f8:a7:42:ec:62:fd:9b:26:cb:23:2b:c6:a1:2d:
98:c3:59:4a:a6:e4:14:61:a9:e9:c0:e4:b1:1b:ad:
7b:24:75:67:b7:d3:de:f2:c0:d4:13:9e:e6:3c:a7:
93:01:fe:4c:9f:11:6e:7f:64:15:97:5c:28:9f:d3:
22:31:91:ad:03:8c:97:9e:12:d4:7f:a0:08:cb:c4:
ca:17:cc:b6:a8:2a:68:86:b3:9d:40:5c:cc:ba:cc:
7d:5d:8b:d7:68:c2:0f:3a:04:43:5e:9b:e6:00:65:
51:59:aa:da:e9:3f:b4:91:b0:da:f5:30:98:ce:fa:
14:38:25:21:f4:5a:d0:7a:63:14:8f:8a:ec:1f:bc:
f6:c3:9d:b5:43:fd:05:38:19:b7:30:61:7a:25:fb:
23:76:ad:d5:96:0b:41:6d:ab:1c:dd:8a:5e:8e:7f:
fc:ec:f8:63:e8:27:c9:ea:62:84:ad:6e:1c:80:06:
8b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4A:79:CC:F5:BB:07:B6:61:19:96:40:4C:B1:72:99:64:62:A2:62
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:11:32:81:0a:42:b4:1c:a4:15:bd:da:e8:6e:f6:0c:79:b2:
0b:97:90:ca:fa:f4:12:d8:41:bb:86:0b:2a:d9:59:80:33:0f:
58:f6:98:90:18:32:26:8e:5d:2d:0e:05:1c:a9:48:99:b4:f7:
56:ac:ec:27:de:2e:57:45:01:44:f1:90:9c:a8:43:41:ca:31:
db:87:66:be:ad:61:54:c5:e1:47:4c:ad:aa:a4:7b:2e:ba:d2:
45:f7:60:e7:5a:83:2a:68:63:ab:3c:56:8e:6b:3c:44:9d:eb:
3f:d8:94:ea:55:89:92:53:d3:82:72:81:a7:e4:8d:c9:5e:a1:
e7:ee:fa:55:0d:f1:77:5e:48:77:8b:bc:3d:5d:af:20:23:2f:
35:89:19:a8:46:cc:1c:b6:c0:dc:b7:5f:a8:1a:a2:77:ad:d7:
2c:e8:b3:a2:48:26:9d:f7:30:af:88:b8:cf:4c:c3:24:f0:c0:
e5:16:c9:9c:48:03:99:c0:3f:17:18:c5:49:18:51:55:5c:98:
7d:05:79:e8:15:04:81:d5:4b:de:c9:f6:7c:e2:7e:f5:09:da:
37:52:3f:ed:98:99:8d:de:cd:ee:2e:53:f1:ab:76:5a:d5:e2:
9c:37:27:a8:75:a0:2d:a9:8c:db:53:e4:23:eb:dd:45:42:0d:
a4:73:f0:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzfe469gqF/TBb4tebgeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2UyMGJmNWYyNTJiMWJkYmQyMWRjOTlkOTRjZDk3ZWE3
ZjBmZTYwHhcNMjYwMzI2MTEwMDU3WhcNMjYwMzI3MTEwMDU3WjAzMTEwLwYDVQQD
EyhhMjRhNzljY2Y1YmIwN2I2NjExOTk2NDA0Y2IxNzI5OTY0NjJhMjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI1fhw0JuSMeuXuMZwElf2mXTbKS
LTsNpYJ4ozWLEgVYGwVgjfDVCcNVEe4MSoy594JVNsv6kTgqlsWANVeJwH/y1dNE
QlK2OkuV+KdC7GL9mybLIyvGoS2Yw1lKpuQUYanpwOSxG617JHVnt9Pe8sDUE57m
PKeTAf5MnxFuf2QVl1won9MiMZGtA4yXnhLUf6AIy8TKF8y2qCpohrOdQFzMusx9
XYvXaMIPOgRDXpvmAGVRWara6T+0kbDa9TCYzvoUOCUh9FrQemMUj4rsH7z2w521
Q/0FOBm3MGF6Jfsjdq3VlgtBbasc3Ypejn/87Phj6CfJ6mKErW4cgAaLmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJKecz1uwe2YRmWQEyxcplkYqJiMB8GA1UdIwQY
MBaAFFQ+IL9fJSsb29IdyZ2UzZfqfw/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUt
ZDVhZDk5NmExYWM4LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUtZDVhZDk5NmExYWM4
LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxEygQpC
tBykFb3a6G72DHmyC5eQyvr0EthBu4YLKtlZgDMPWPaYkBgyJo5dLQ4FHKlImbT3
VqzsJ94uV0UBRPGQnKhDQcox24dmvq1hVMXhR0ytqqR7LrrSRfdg51qDKmhjqzxW
jms8RJ3rP9iU6lWJklPTgnKBp+SNyV6h5+76VQ3xd15Id4u8PV2vICMvNYkZqEbM
HLbA3LdfqBqid63XLOizokgmnfcwr4i4z0zDJPDA5RbJnEgDmcA/FxjFSRhRVVyY
fQV56BUEgdVL3sn2fOJ+9QnaN1I/7ZiZjd7N7i5T8at2WtXinDcnqHWgLamM21Pk
I+vdRUINpHPwPQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:48:56 2026 by rpki-client