Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier: Jyiz6MFbAVK26rDfGW1h4Qn766N5QYeXFajtk2Uo2Uo=
Subject key identifier: 32:0C:9F:2F:F3:86:F6:DB:1B:76:9A:F6:BF:D2:89:A3:35:97:1F:F9
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 019D27721DD6D5367B37F61C40E3DA3422DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number: 0BD5
Signing time: Thu 26 Mar 2026 00:01:23 +0000
Manifest this update: Thu 26 Mar 2026 00:01:23 +0000
Manifest next update: Fri 27 Mar 2026 00:01:23 +0000
Files and hashes: 1: GrwS7z5skQLr1kWHFgshe5BTW1o.roa (hash: y+YqbBQOH20V6aaG8Rd/FbsV1PT5JFszmedwpyqgIUM=)
2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: hqqz3QNi0LI2QxVmeDMq2iruENWaxatLPAEGW5FLitc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:1d:d6:d5:36:7b:37:f6:1c:40:e3:da:34:22:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Mar 26 00:01:23 2026 GMT
Not After : Mar 27 00:01:23 2026 GMT
Subject: CN=320c9f2ff386f6db1b769af6bfd289a335971ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:fe:61:69:3c:47:f7:46:2b:82:a5:fb:ae:
96:01:6e:e3:61:12:9b:51:d5:b1:b6:c6:93:e9:e6:
35:71:64:2f:58:b2:b3:cb:3e:37:5d:5b:8e:d1:fa:
6a:06:f6:bc:e3:25:08:7a:c4:cb:e0:68:7c:7c:f2:
29:57:ab:9a:a4:ac:8a:77:16:6e:e6:ee:8e:81:f2:
da:fe:78:53:cc:e9:b5:80:ab:60:14:69:ab:95:4e:
55:54:86:cc:31:c0:85:8d:9b:0a:87:1d:eb:1e:dd:
e7:74:bf:00:89:9f:eb:03:48:a0:a5:1f:43:a6:a2:
d2:6c:bf:fc:c0:e0:47:9b:03:e3:d8:9e:ff:5f:f0:
3f:c2:ba:06:0a:6b:77:b4:f7:e6:00:20:ee:67:fb:
80:2e:a5:16:2f:50:33:30:fd:e2:b1:da:ca:3e:5d:
76:89:50:13:a0:0c:37:18:72:9b:5a:fc:8b:c7:e4:
da:f9:6e:26:c6:0f:b4:a7:5c:68:04:fd:c5:43:0f:
68:98:ac:3c:8f:41:ff:a9:cc:76:1c:e6:95:80:a9:
ae:9c:24:93:56:c5:ba:13:a7:8b:db:bb:05:4e:57:
d4:e9:a0:1c:ac:79:a6:81:1d:9d:00:1f:07:ed:a3:
59:e1:f9:d5:b5:e0:45:c9:26:1c:5e:5f:5c:86:d8:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0C:9F:2F:F3:86:F6:DB:1B:76:9A:F6:BF:D2:89:A3:35:97:1F:F9
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:57:64:80:cd:4b:28:86:e1:df:3d:e3:cb:b3:eb:d5:2a:59:
5b:48:3f:0c:01:a2:33:0d:64:28:d2:d6:3f:f1:a9:cc:e9:be:
8b:6f:be:f4:30:f4:f5:f5:77:8f:fb:67:c3:bf:0d:57:4c:79:
81:9c:1e:d6:0f:3e:cc:a7:45:e8:b6:31:2d:ff:0c:be:49:8f:
f0:6f:68:12:2d:f5:84:28:6b:14:93:c4:b3:e6:f3:b6:44:bd:
6f:01:3a:2e:cf:cd:76:fd:52:d0:4d:41:3d:ca:6d:9c:ab:2f:
92:3c:57:a9:43:6d:38:75:64:99:0c:de:df:d5:5b:ac:da:ba:
18:d4:69:ee:cb:72:ae:df:ab:8e:07:83:d4:7a:73:6e:9b:dd:
b3:36:34:ff:b7:4a:bd:02:b7:a7:59:0f:8c:60:ff:2b:93:fd:
30:2c:41:a5:f0:d7:8f:15:89:aa:90:76:8b:67:f9:07:42:42:
f9:1f:f5:0a:ea:47:ed:fb:65:05:c8:a8:41:c1:14:6d:51:30:
2d:73:0e:24:1e:29:9a:2f:80:e6:fd:b8:4d:14:3a:cc:6f:fb:
49:aa:16:26:57:8b:c9:47:3b:b4:e1:cc:ed:1f:af:e6:71:6b:
fb:1a:9f:99:88:da:d7:a7:a5:35:2b:53:8e:f5:af:36:48:f7:
c4:79:7e:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nch3W1TZ7N/YcQOPaNCLcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTZjNDZkN2Q5MGZlYjRhNzI4YWYwZjhhZTExYmZhMGQ0
ZjhjYjEwHhcNMjYwMzI2MDAwMTIzWhcNMjYwMzI3MDAwMTIzWjAzMTEwLwYDVQQD
EygzMjBjOWYyZmYzODZmNmRiMWI3NjlhZjZiZmQyODlhMzM1OTcxZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6j+YWk8R/dGK4Kl+66WAW7jYRKb
UdWxtsaT6eY1cWQvWLKzyz43XVuO0fpqBva84yUIesTL4Gh8fPIpV6uapKyKdxZu
5u6OgfLa/nhTzOm1gKtgFGmrlU5VVIbMMcCFjZsKhx3rHt3ndL8AiZ/rA0igpR9D
pqLSbL/8wOBHmwPj2J7/X/A/wroGCmt3tPfmACDuZ/uALqUWL1AzMP3isdrKPl12
iVAToAw3GHKbWvyLx+Ta+W4mxg+0p1xoBP3FQw9omKw8j0H/qcx2HOaVgKmunCST
VsW6E6eL27sFTlfU6aAcrHmmgR2dAB8H7aNZ4fnVteBFySYcXl9chtit9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIMny/zhvbbG3aa9r/SiaM1lx/5MB8GA1UdIwQY
MBaAFFSmxG19kP60pyivD4rhG/oNT4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGIt
MGZjOWJmY2Q3NGE2LzEvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGItMGZjOWJmY2Q3NGE2
LzEvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVdkgM1L
KIbh3z3jy7Pr1SpZW0g/DAGiMw1kKNLWP/GpzOm+i2++9DD09fV3j/tnw78NV0x5
gZwe1g8+zKdF6LYxLf8MvkmP8G9oEi31hChrFJPEs+bztkS9bwE6Ls/Ndv1S0E1B
PcptnKsvkjxXqUNtOHVkmQze39VbrNq6GNRp7styrt+rjgeD1HpzbpvdszY0/7dK
vQK3p1kPjGD/K5P9MCxBpfDXjxWJqpB2i2f5B0JC+R/1CupH7ftlBcioQcEUbVEw
LXMOJB4pmi+A5v24TRQ6zG/7SaoWJleLyUc7tOHM7R+v5nFr+xqfmYja16elNStT
jvWvNkj3xHl+IQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:49 2026 by rpki-client