Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
File: VC8JTwQnsU80mffN9h2IOwiIYoo.mft (raw, json)
Hash identifier: OkLuYuL/odnfnD6ynqGYzzv6nH9V+/6RF+EhNrNWbKs=
Subject key identifier: 45:48:BE:50:42:F9:51:16:2F:71:C9:F7:E4:32:8D:8C:1B:81:32:59
Authority key identifier: 54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
Certificate issuer: /CN=542f094f0427b14f3499f7cdf61d883b0888628a
Certificate serial: 019D29977B385C04023965B2915020AC8719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
Manifest number: 156E
Signing time: Thu 26 Mar 2026 10:01:26 +0000
Manifest this update: Thu 26 Mar 2026 10:01:26 +0000
Manifest next update: Fri 27 Mar 2026 10:01:26 +0000
Files and hashes: 1: MxmtZpT39ziVe-pzqj79_Ed_jAo.roa (hash: 4OhUHwywmDOO3mmhT6ZwnGr79zua7TEwc4pRLTJjvFc=)
2: VC8JTwQnsU80mffN9h2IOwiIYoo.crl (hash: 2OmknPvXI4Zlf686Z2QiYi9bRNuHvKX3xkaTxrJZaD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:7b:38:5c:04:02:39:65:b2:91:50:20:ac:87:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f094f0427b14f3499f7cdf61d883b0888628a
Validity
Not Before: Mar 26 10:01:26 2026 GMT
Not After : Mar 27 10:01:26 2026 GMT
Subject: CN=4548be5042f951162f71c9f7e4328d8c1b813259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:33:34:07:41:4a:1d:6c:48:2d:d6:30:9c:a6:
72:38:a5:ce:97:ba:fc:88:84:7f:de:53:fa:43:56:
f5:6f:7e:f1:f9:9d:f5:07:d7:84:1d:03:90:4f:87:
38:d0:92:a7:12:16:7d:b4:38:fa:6e:85:51:20:5e:
05:47:7e:9b:53:21:a2:c3:bc:3d:91:63:7d:f1:68:
12:c3:9a:ce:2a:92:55:20:b4:15:e3:4b:85:83:6b:
01:07:af:be:c1:f4:5f:01:8a:51:2d:b1:55:24:f7:
03:2e:62:51:70:83:e6:39:a4:b6:dc:8d:4d:93:d4:
10:45:85:f8:fe:3e:b6:57:28:bc:c4:8a:9e:c7:7b:
0a:2d:db:bf:db:a6:18:a9:ce:f4:44:f6:c7:51:3d:
0d:35:f6:17:ec:ae:01:37:1b:91:78:c9:05:59:66:
f5:e4:08:2b:0e:8e:85:1c:e7:ca:19:06:71:75:3a:
9a:47:69:03:59:58:2e:ba:65:b0:91:c4:ef:34:b8:
c0:d4:25:7f:83:45:ac:d7:88:12:af:6c:fb:ee:4a:
54:ed:d3:0e:75:f6:83:db:3f:57:1f:66:49:83:f3:
02:aa:f5:a3:49:bb:ae:7b:1d:db:d4:12:2c:16:e2:
5c:da:b2:87:98:49:79:05:46:8d:c7:9e:e1:4a:ac:
2c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:48:BE:50:42:F9:51:16:2F:71:C9:F7:E4:32:8D:8C:1B:81:32:59
X509v3 Authority Key Identifier:
keyid:54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:22:24:64:32:ed:07:7e:65:52:98:f9:ac:27:96:ea:ca:38:
fb:3d:64:b3:67:6d:7c:cf:12:13:96:78:0d:a8:ad:1a:e8:7b:
b8:82:c6:97:27:d3:62:6f:fa:e4:2d:61:ec:c0:00:e1:70:31:
28:41:06:b9:e3:e3:b0:2d:26:11:ac:89:bd:94:bc:8f:a8:e3:
95:60:08:f2:d3:24:0d:21:00:e8:e8:0e:4d:52:1e:dd:f6:28:
2a:20:fd:a3:bf:7d:8a:e0:d6:77:8d:4e:0b:95:ec:bf:d4:27:
91:21:b6:b6:aa:e3:53:46:3c:80:0e:0d:f8:60:2e:a4:d8:0a:
f4:94:eb:30:1f:9d:f8:c8:8a:0a:e8:3f:85:3b:c8:f7:95:e8:
fa:8a:c5:dd:5a:e4:2d:4f:e6:fe:50:a1:75:08:a9:01:9f:8e:
5c:76:62:c2:ca:f0:fe:81:21:29:00:fd:9b:4f:7a:63:3a:47:
7d:c1:29:f6:49:65:a8:27:d6:29:85:74:ab:48:76:b7:39:1e:
c6:06:77:96:78:4a:de:f5:11:06:39:36:74:0a:de:1c:43:9e:
22:81:3e:51:0a:25:c4:59:79:10:b0:56:7d:86:64:46:3b:ad:
3b:6d:d4:d9:de:c2:cf:05:77:fc:18:b4:6a:20:1b:dd:eb:a4:
f5:85:23:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl3s4XAQCOWWykVAgrIcZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MmYwOTRmMDQyN2IxNGYzNDk5ZjdjZGY2MWQ4ODNiMDg4
ODYyOGEwHhcNMjYwMzI2MTAwMTI2WhcNMjYwMzI3MTAwMTI2WjAzMTEwLwYDVQQD
Eyg0NTQ4YmU1MDQyZjk1MTE2MmY3MWM5ZjdlNDMyOGQ4YzFiODEzMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jM0B0FKHWxILdYwnKZyOKXOl7r8
iIR/3lP6Q1b1b37x+Z31B9eEHQOQT4c40JKnEhZ9tDj6boVRIF4FR36bUyGiw7w9
kWN98WgSw5rOKpJVILQV40uFg2sBB6++wfRfAYpRLbFVJPcDLmJRcIPmOaS23I1N
k9QQRYX4/j62Vyi8xIqex3sKLdu/26YYqc70RPbHUT0NNfYX7K4BNxuReMkFWWb1
5AgrDo6FHOfKGQZxdTqaR2kDWVguumWwkcTvNLjA1CV/g0Ws14gSr2z77kpU7dMO
dfaD2z9XH2ZJg/MCqvWjSbuuex3b1BIsFuJc2rKHmEl5BUaNx57hSqwsawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVIvlBC+VEWL3HJ9+QyjYwbgTJZMB8GA1UdIwQY
MBaAFFQvCU8EJ7FPNJn3zfYdiDsIiGKKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkM4SlR3UW5zVTgwbWZmTjloMklPd2lJWW9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS83NTZhZWItMDIyZS00Yzk4LThkZGIt
MGUwNjhjNDk3MGZmLzEvVkM4SlR3UW5zVTgwbWZmTjloMklPd2lJWW9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS83NTZhZWItMDIyZS00Yzk4LThkZGItMGUwNjhjNDk3MGZm
LzEvVkM4SlR3UW5zVTgwbWZmTjloMklPd2lJWW9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQiIkZDLt
B35lUpj5rCeW6so4+z1ks2dtfM8SE5Z4DaitGuh7uILGlyfTYm/65C1h7MAA4XAx
KEEGuePjsC0mEayJvZS8j6jjlWAI8tMkDSEA6OgOTVIe3fYoKiD9o799iuDWd41O
C5Xsv9QnkSG2tqrjU0Y8gA4N+GAupNgK9JTrMB+d+MiKCug/hTvI95Xo+orF3Vrk
LU/m/lChdQipAZ+OXHZiwsrw/oEhKQD9m096YzpHfcEp9kllqCfWKYV0q0h2tzke
xgZ3lnhK3vURBjk2dAreHEOeIoE+UQolxFl5ELBWfYZkRjutO23U2d7CzwV3/Bi0
aiAb3euk9YUjWg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:40 2026 by rpki-client