
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier: cWzr2DMnkUbRhQG9ODfcOXiX4RjWKyUk/HH9Q5yYfqM=
Subject key identifier: 7C:75:CE:FF:2F:38:0E:AF:E7:92:1B:29:C8:CB:C8:ED:22:AE:D7:CC
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 01A10249334D9DEDD79C129EEC373BC518D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number: 0DD4
Signing time: Sat 03 Oct 2026 15:01:54 +0000
Manifest this update: Sat 03 Oct 2026 15:01:54 +0000
Manifest next update: Sun 04 Oct 2026 15:01:54 +0000
Files and hashes: 1: GrwS7z5skQLr1kWHFgshe5BTW1o.roa (hash: y+YqbBQOH20V6aaG8Rd/FbsV1PT5JFszmedwpyqgIUM=)
2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: 7+EXjgZIhsVNBfWPRvAUTaoyfIjtsUeaplCv8bkrE4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:49:33:4d:9d:ed:d7:9c:12:9e:ec:37:3b:c5:18:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Oct 3 15:01:54 2026 GMT
Not After : Oct 4 15:01:54 2026 GMT
Subject: CN=7c75ceff2f380eafe7921b29c8cbc8ed22aed7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ef:bd:67:b3:69:92:55:50:dd:56:2c:d0:2e:
04:28:7f:01:7e:0e:f9:4f:7e:80:18:c3:b1:55:5f:
6b:7b:42:36:ce:dd:69:08:32:e3:79:8b:fc:93:04:
10:de:08:eb:a8:58:04:13:78:4f:4b:e0:4e:ac:b8:
b1:a5:8e:bc:c7:34:77:b6:8a:32:33:b8:c9:b5:f3:
b2:b3:86:2f:c8:86:42:af:dc:ca:33:d3:53:d0:76:
cf:f2:eb:d6:87:9d:73:78:cb:13:91:c8:dc:6c:a1:
57:38:64:3d:cd:87:d1:15:13:91:7d:64:f2:27:69:
bc:24:02:1d:96:1b:90:b1:62:f1:83:ac:2d:ff:dd:
93:a9:3d:40:1d:d6:96:0b:e4:92:b0:6c:8f:bc:a8:
bd:48:5c:b7:ac:ee:4d:08:18:64:65:18:09:43:4f:
26:28:d0:60:8a:c5:60:9d:e3:01:13:6f:de:14:d8:
c2:05:80:e5:91:23:eb:a0:fa:17:be:7b:43:7c:b6:
a1:6c:f8:8d:e6:91:bc:cc:0f:22:38:98:8d:5e:61:
67:25:ec:8f:96:2c:47:9f:69:fc:3c:82:03:e7:19:
6e:52:f3:ed:ca:6d:f0:d0:1e:50:30:34:20:6b:f5:
c4:a7:84:c5:ba:bb:3e:b8:3f:e3:75:43:e8:b1:65:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:75:CE:FF:2F:38:0E:AF:E7:92:1B:29:C8:CB:C8:ED:22:AE:D7:CC
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:13:92:90:f3:c8:15:40:c2:03:73:7c:5b:db:95:9a:e4:82:
df:18:dd:24:d1:ce:a2:df:a0:f7:67:10:26:56:77:c6:65:43:
13:a7:71:e7:bd:10:c5:3c:41:76:96:0b:7c:9d:38:c3:7f:f5:
84:81:90:fe:39:14:22:2e:d0:d9:de:f8:78:f6:ff:b9:0e:54:
31:b7:85:ba:d5:5e:6f:ae:34:64:8f:ee:0d:06:15:12:de:48:
e4:65:78:45:e0:50:cb:18:7e:18:ef:51:5a:3e:e2:bc:40:75:
aa:ec:9d:52:cb:1c:93:60:9e:d3:66:f5:ac:d9:de:24:36:4f:
49:6d:c7:4d:ab:3b:6b:24:5f:84:7b:3e:fa:a7:47:f7:34:c0:
dd:c8:ec:29:ab:9d:f8:0a:16:14:36:9e:29:88:e2:77:20:14:
96:a0:b0:06:f0:77:5a:f4:e9:d2:90:98:91:63:e0:0c:2c:08:
9c:0a:08:c7:b7:57:47:e9:5c:c1:6e:ea:d4:55:f3:de:46:cd:
af:7a:97:4c:17:0f:b4:cc:88:b8:18:f3:0f:a1:f1:e6:a1:14:
1b:9c:4b:ab:40:6d:94:c6:53:fc:6e:3c:b7:ab:92:82:db:0b:
1e:90:f5:e6:68:28:20:e9:70:ea:3b:3f:45:27:fe:28:4d:ce:
26:28:a4:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECSTNNne3XnBKe7Dc7xRjVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTZjNDZkN2Q5MGZlYjRhNzI4YWYwZjhhZTExYmZhMGQ0
ZjhjYjEwHhcNMjYxMDAzMTUwMTU0WhcNMjYxMDA0MTUwMTU0WjAzMTEwLwYDVQQD
Eyg3Yzc1Y2VmZjJmMzgwZWFmZTc5MjFiMjljOGNiYzhlZDIyYWVkN2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0++9Z7NpklVQ3VYs0C4EKH8Bfg75
T36AGMOxVV9re0I2zt1pCDLjeYv8kwQQ3gjrqFgEE3hPS+BOrLixpY68xzR3tooy
M7jJtfOys4YvyIZCr9zKM9NT0HbP8uvWh51zeMsTkcjcbKFXOGQ9zYfRFRORfWTy
J2m8JAIdlhuQsWLxg6wt/92TqT1AHdaWC+SSsGyPvKi9SFy3rO5NCBhkZRgJQ08m
KNBgisVgneMBE2/eFNjCBYDlkSProPoXvntDfLahbPiN5pG8zA8iOJiNXmFnJeyP
lixHn2n8PIID5xluUvPtym3w0B5QMDQga/XEp4TFurs+uD/jdUPosWUdzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHx1zv8vOA6v55IbKcjLyO0irtfMMB8GA1UdIwQY
MBaAFFSmxG19kP60pyivD4rhG/oNT4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGIt
MGZjOWJmY2Q3NGE2LzEvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGItMGZjOWJmY2Q3NGE2
LzEvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgROSkPPI
FUDCA3N8W9uVmuSC3xjdJNHOot+g92cQJlZ3xmVDE6dx570QxTxBdpYLfJ04w3/1
hIGQ/jkUIi7Q2d74ePb/uQ5UMbeFutVeb640ZI/uDQYVEt5I5GV4ReBQyxh+GO9R
Wj7ivEB1quydUssck2Ce02b1rNneJDZPSW3HTas7ayRfhHs++qdH9zTA3cjsKaud
+AoWFDaeKYjidyAUlqCwBvB3WvTp0pCYkWPgDCwInAoIx7dXR+lcwW7q1FXz3kbN
r3qXTBcPtMyIuBjzD6Hx5qEUG5xLq0BtlMZT/G48t6uSgtsLHpD15mgoIOlw6js/
RSf+KE3OJiikxA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:39:45 2026 by rpki-client