Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier: MZBhtd5WijAwGWjBSHmLPTo3mjmNWy5DiMB/1FlEE70=
Subject key identifier: 95:9C:4D:FC:DC:13:B8:2B:5D:AC:62:28:7E:47:C8:E4:78:1A:90:AC
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 019E1F11202BD7B3DF45111B857044137E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number: 13E5
Signing time: Wed 13 May 2026 02:01:16 +0000
Manifest this update: Wed 13 May 2026 02:01:16 +0000
Manifest next update: Thu 14 May 2026 02:01:16 +0000
Files and hashes: 1: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: C7HVFvgwjPGZtS8BCctJqdxdrDn49ma/UfM+dXeIA8w=)
2: oGOTDBSs-8RzQgvE7ZrDeZrWmhY.roa (hash: fg5ldvtNVy0GA4pv1zrABZsjmX5v9/M80VbIZSFHe+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:20:2b:d7:b3:df:45:11:1b:85:70:44:13:7e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: May 13 02:01:16 2026 GMT
Not After : May 14 02:01:16 2026 GMT
Subject: CN=959c4dfcdc13b82b5dac62287e47c8e4781a90ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:12:d5:7b:e4:a2:b6:ae:d8:bc:c0:36:d7:
b2:9d:86:5e:dc:5a:08:5c:43:b3:c1:53:eb:62:2b:
d1:53:52:7c:26:3c:79:c6:34:3b:4c:a3:da:54:ad:
59:2d:13:da:b8:a0:d7:26:28:15:d9:47:0e:f0:ab:
bd:59:ea:07:9e:03:53:e6:d0:3b:b8:22:b3:eb:d5:
a8:45:ba:cc:4e:6e:9e:05:c4:2b:85:81:3f:a2:9f:
d8:93:66:fd:0f:1b:c4:84:bc:56:b2:e9:b4:27:0a:
f2:6b:fb:a4:65:cd:5c:96:b0:ee:b0:c7:48:24:57:
35:cb:c4:53:88:42:9b:fa:d9:61:93:86:e9:3a:c2:
86:d6:72:09:25:19:79:e5:9c:67:5a:30:e0:61:b2:
a8:22:d2:37:4f:39:27:a6:ef:e8:1f:8d:c8:c5:1e:
5e:5e:9d:e7:95:b8:f7:da:9a:f1:cb:ef:a8:8e:e0:
81:a2:46:94:e1:47:41:aa:f8:0e:9f:fb:10:9d:30:
42:12:c9:e7:a1:b9:94:a5:91:df:8f:87:16:c5:66:
13:e1:24:86:0e:a4:a0:39:ec:1a:91:c3:3c:3f:68:
86:fc:2b:70:25:b5:4e:41:3e:0b:91:a1:6a:80:75:
14:87:83:c9:ed:b8:5d:ff:6b:25:73:2a:f1:01:3c:
4a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9C:4D:FC:DC:13:B8:2B:5D:AC:62:28:7E:47:C8:E4:78:1A:90:AC
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ee:b7:ea:6e:d3:f3:3d:ad:f8:7c:41:92:e5:6a:74:d3:e5:
00:17:8a:ca:65:f4:48:39:0c:4b:29:ba:a7:b2:91:11:2d:b1:
a9:8d:d2:b3:82:59:52:df:6c:be:80:f2:04:db:47:c7:f1:72:
e7:77:66:4e:2c:8c:0b:81:dd:ae:6f:92:ef:8b:fa:71:81:f5:
ca:6f:cd:76:2d:5c:89:9d:8c:b5:5b:54:22:1c:d2:81:03:f0:
ba:12:84:91:47:92:09:4f:36:89:54:2d:86:9d:fc:83:b9:1f:
85:d8:1a:96:a4:ec:f4:08:57:6f:ab:60:94:b2:b3:5a:05:f7:
c4:81:65:e4:d1:29:70:74:63:2f:88:2a:cb:a2:ea:37:a5:10:
86:60:45:24:7f:a5:e7:38:4a:24:f9:fd:81:c1:1a:4b:58:a2:
71:f8:56:b0:6b:91:10:0c:e9:36:cf:ed:2f:42:4c:00:04:65:
e7:e6:9c:d2:9c:51:b2:17:ab:a6:9b:41:1b:f7:d1:f9:7f:17:
06:a8:66:f7:f3:ca:a5:98:54:30:ad:92:05:2e:0d:de:aa:04:
8a:c8:1b:60:67:dc:fb:fe:3f:03:23:df:ac:94:ca:ca:5e:e5:
f8:7e:21:63:74:6e:71:01:04:f9:2f:ab:d2:bd:db:c7:b2:18:
a5:25:fc:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fESAr17PfRREbhXBEE36VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2UyMGJmNWYyNTJiMWJkYmQyMWRjOTlkOTRjZDk3ZWE3
ZjBmZTYwHhcNMjYwNTEzMDIwMTE2WhcNMjYwNTE0MDIwMTE2WjAzMTEwLwYDVQQD
Eyg5NTljNGRmY2RjMTNiODJiNWRhYzYyMjg3ZTQ3YzhlNDc4MWE5MGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5kS1Xvkorau2LzANteynYZe3FoI
XEOzwVPrYivRU1J8Jjx5xjQ7TKPaVK1ZLRPauKDXJigV2UcO8Ku9WeoHngNT5tA7
uCKz69WoRbrMTm6eBcQrhYE/op/Yk2b9DxvEhLxWsum0Jwrya/ukZc1clrDusMdI
JFc1y8RTiEKb+tlhk4bpOsKG1nIJJRl55ZxnWjDgYbKoItI3Tzknpu/oH43IxR5e
Xp3nlbj32prxy++ojuCBokaU4UdBqvgOn/sQnTBCEsnnobmUpZHfj4cWxWYT4SSG
DqSgOewakcM8P2iG/CtwJbVOQT4LkaFqgHUUh4PJ7bhd/2slcyrxATxKfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWcTfzcE7grXaxiKH5HyOR4GpCsMB8GA1UdIwQY
MBaAFFQ+IL9fJSsb29IdyZ2UzZfqfw/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUt
ZDVhZDk5NmExYWM4LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUtZDVhZDk5NmExYWM4
LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcO636m7T
8z2t+HxBkuVqdNPlABeKymX0SDkMSym6p7KRES2xqY3Ss4JZUt9svoDyBNtHx/Fy
53dmTiyMC4Hdrm+S74v6cYH1ym/Ndi1ciZ2MtVtUIhzSgQPwuhKEkUeSCU82iVQt
hp38g7kfhdgalqTs9AhXb6tglLKzWgX3xIFl5NEpcHRjL4gqy6LqN6UQhmBFJH+l
5zhKJPn9gcEaS1iicfhWsGuREAzpNs/tL0JMAARl5+ac0pxRsherpptBG/fR+X8X
Bqhm9/PKpZhUMK2SBS4N3qoEisgbYGfc+/4/AyPfrJTKyl7l+H4hY3RucQEE+S+r
0r3bx7IYpSX8yw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:43:46 2026 by rpki-client