Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
File: VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft (raw, json)
Hash identifier: LX2FXzbORbMviwSXwyMdzAg8or2ylXfxKt+LV1WWWBI=
Subject key identifier: 15:A7:DB:DD:4F:BF:6C:FC:13:44:2F:3B:73:50:1B:DA:5C:F8:F7:27
Authority key identifier: 54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
Certificate issuer: /CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Certificate serial: 019E21360A384763E97EADC1B6C06FB76FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 12:00:50 +0000
Manifest this update: Wed 13 May 2026 12:00:50 +0000
Manifest next update: Thu 14 May 2026 12:00:50 +0000
Files and hashes: 1: Tv-1lu7GVvYKCCNJrjspKQqz-UY.roa (hash: 9l4nrTM55YoKW+9z7XZNyjc96a4hC8pAvLejRN5e7BI=)
2: VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl (hash: knWdG2WVjkPtlq6G3XTwJAoDOrFjltbnYsOqSVCzKUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:0a:38:47:63:e9:7e:ad:c1:b6:c0:6f:b7:6f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Validity
Not Before: May 13 12:00:50 2026 GMT
Not After : May 14 12:00:50 2026 GMT
Subject: CN=15a7dbdd4fbf6cfc13442f3b73501bda5cf8f727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:3d:51:75:bb:ec:b2:b4:3d:d3:11:a9:9a:
02:c0:f6:da:65:0d:89:55:e4:e8:a6:c9:75:fc:1d:
b0:66:0a:96:b1:08:9c:89:f1:69:9f:62:ea:0b:a4:
7d:0c:40:f0:8a:d9:20:b4:a3:14:d8:3d:a4:0d:a4:
de:34:d1:2a:c9:d0:48:f3:d1:7c:ba:79:a7:36:81:
f6:aa:4f:77:07:4a:07:e5:c8:fb:26:98:96:38:9c:
2f:f8:6c:09:6e:ea:4c:c2:b8:ba:e8:8b:86:ba:ac:
99:a3:8d:5d:8c:61:e9:91:ce:0b:9a:1d:0b:2b:9b:
98:02:3f:9a:37:5e:47:cb:67:03:96:65:88:73:99:
28:70:f1:32:2e:47:2d:cb:3e:33:93:ae:33:30:da:
aa:1c:81:94:27:bb:a1:6f:45:fc:77:0d:2e:99:44:
22:64:4c:94:91:97:c3:c7:ac:b2:75:4a:dc:2d:53:
a9:62:85:8d:e2:37:f7:3e:1b:78:d7:96:97:91:23:
70:87:ce:b2:50:3c:6c:fd:68:ef:7e:d7:06:33:90:
a6:bd:b1:cb:db:89:01:6f:9e:19:98:b9:cf:7e:39:
26:33:65:40:8a:b3:70:3c:5a:bf:19:98:bc:8b:b5:
f1:d4:38:23:a1:62:a6:79:8d:94:73:aa:5b:c3:ff:
89:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A7:DB:DD:4F:BF:6C:FC:13:44:2F:3B:73:50:1B:DA:5C:F8:F7:27
X509v3 Authority Key Identifier:
keyid:54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ea:04:76:9d:70:23:48:f9:bb:a2:88:8f:74:09:f0:77:99:
dc:de:49:ac:80:d2:ae:40:cc:91:06:28:cf:cf:2a:28:4e:9c:
fe:b8:3a:22:a6:73:f7:06:91:81:65:0a:1f:13:57:bf:03:20:
7b:38:9a:7e:5b:7f:bc:aa:44:b1:06:99:5e:42:70:99:f4:65:
3a:b3:94:3f:4b:9f:da:62:08:b0:5d:23:c3:53:c4:35:b8:92:
33:e9:15:ec:56:19:1e:82:1c:a0:a9:9c:46:83:cd:6a:8a:27:
79:cc:74:f5:ff:3b:45:ae:b2:6e:48:c5:68:59:b6:02:08:28:
0b:fb:65:39:0c:35:1d:74:bd:80:67:8d:ff:cb:2d:0f:39:18:
48:4e:4e:c4:36:bd:bc:7c:c2:03:dc:3b:9d:c6:02:86:e3:52:
26:a4:15:dd:a4:19:66:27:c8:5b:d5:8d:06:e0:96:3c:20:60:
23:d6:d8:de:72:ae:10:16:55:15:75:e8:75:26:df:32:70:c5:
7d:a1:70:46:7a:94:5f:28:9c:db:67:10:d6:d4:b7:d5:a7:8a:
04:81:05:b6:1e:0b:f8:10:e8:e5:04:ba:a4:b5:26:0a:f4:a5:
4f:52:af:38:02:23:e1:b0:70:8b:1e:65:52:ac:e3:02:44:f5:
a8:34:26:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hNgo4R2Ppfq3BtsBvt2/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MGI2M2QxOWQ4NmVhMzQ1YzliNWYxNjkzMDBjM2EyOWQ0
YzMxYzQwHhcNMjYwNTEzMTIwMDUwWhcNMjYwNTE0MTIwMDUwWjAzMTEwLwYDVQQD
EygxNWE3ZGJkZDRmYmY2Y2ZjMTM0NDJmM2I3MzUwMWJkYTVjZjhmNzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnA9UXW77LK0PdMRqZoCwPbaZQ2J
VeTopsl1/B2wZgqWsQicifFpn2LqC6R9DEDwitkgtKMU2D2kDaTeNNEqydBI89F8
unmnNoH2qk93B0oH5cj7JpiWOJwv+GwJbupMwri66IuGuqyZo41djGHpkc4Lmh0L
K5uYAj+aN15Hy2cDlmWIc5kocPEyLkctyz4zk64zMNqqHIGUJ7uhb0X8dw0umUQi
ZEyUkZfDx6yydUrcLVOpYoWN4jf3Pht415aXkSNwh86yUDxs/WjvftcGM5CmvbHL
24kBb54ZmLnPfjkmM2VAirNwPFq/GZi8i7Xx1DgjoWKmeY2Uc6pbw/+J4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWn291Pv2z8E0QvO3NQG9pc+PcnMB8GA1UdIwQY
MBaAFFQLY9Gdhuo0XJtfFpMAw6KdTDHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kOTg0NzItZjBiNy00ZGYzLTkyNWIt
MDAwNGIyNzQ2MzBiLzEvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9kOTg0NzItZjBiNy00ZGYzLTkyNWItMDAwNGIyNzQ2MzBi
LzEvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJuoEdp1w
I0j5u6KIj3QJ8HeZ3N5JrIDSrkDMkQYoz88qKE6c/rg6IqZz9waRgWUKHxNXvwMg
eziaflt/vKpEsQaZXkJwmfRlOrOUP0uf2mIIsF0jw1PENbiSM+kV7FYZHoIcoKmc
RoPNaoonecx09f87Ra6ybkjFaFm2AggoC/tlOQw1HXS9gGeN/8stDzkYSE5OxDa9
vHzCA9w7ncYChuNSJqQV3aQZZifIW9WNBuCWPCBgI9bY3nKuEBZVFXXodSbfMnDF
faFwRnqUXyic22cQ1tS31aeKBIEFth4L+BDo5QS6pLUmCvSlT1KvOAIj4bBwix5l
UqzjAkT1qDQmhA==
-----END CERTIFICATE-----
Generated at Wed May 13 16:12:18 2026 by rpki-client