Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
File: VEbfB_88sm389O64dh-wFsr3-e4.mft (raw, json)
Hash identifier: 1aHTX/ySmURRuvuOz/EMrL5u6BkGo/+VjVsF6VS8lQE=
Subject key identifier: BB:B1:64:24:25:AD:B1:CF:63:C3:15:F4:74:B5:65:12:B6:03:81:FE
Authority key identifier: 54:46:DF:07:FF:3C:B2:6D:FC:F4:EE:B8:76:1F:B0:16:CA:F7:F9:EE
Certificate issuer: /CN=5446df07ff3cb26dfcf4eeb8761fb016caf7f9ee
Certificate serial: 019D265EE08920A437800C47836F96D1256B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
Manifest number: 0279
Signing time: Wed 25 Mar 2026 19:00:45 +0000
Manifest this update: Wed 25 Mar 2026 19:00:45 +0000
Manifest next update: Thu 26 Mar 2026 19:00:45 +0000
Files and hashes: 1: VEbfB_88sm389O64dh-wFsr3-e4.crl (hash: dlnX0wd93ocxO1n3c1kSEACvUfTB+BelvEXRfa5eKAQ=)
2: XerDxKv88GRxs9ZkYhrJ-uj7FmE.roa (hash: +QfXYiGvQiBZ0Keb856JGIixLSseope7ht1TwdKxQc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:e0:89:20:a4:37:80:0c:47:83:6f:96:d1:25:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5446df07ff3cb26dfcf4eeb8761fb016caf7f9ee
Validity
Not Before: Mar 25 19:00:45 2026 GMT
Not After : Mar 26 19:00:45 2026 GMT
Subject: CN=bbb1642425adb1cf63c315f474b56512b60381fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bc:9f:ab:b4:d1:27:69:87:57:f4:26:90:02:
b5:9a:3a:2c:7f:f1:dd:79:0e:05:0e:62:c2:43:43:
58:fb:0d:62:d0:b9:4c:5e:c4:77:9c:36:b8:6e:da:
bb:f4:3a:53:b1:ca:2e:ff:48:4e:d3:01:14:e1:0a:
c0:ef:40:c9:a4:84:bf:2f:27:3f:47:b3:78:2a:43:
6f:1c:6b:57:a0:82:52:a2:0b:cf:10:ac:9c:65:1f:
ea:0c:27:d3:e8:d9:46:25:75:c6:66:88:d0:38:d2:
99:46:d7:39:b9:cd:67:59:42:ae:5e:8e:84:ef:46:
46:ec:60:b2:ec:7c:85:23:61:6c:be:af:22:e9:35:
d9:48:f0:61:ea:31:be:56:47:08:dd:14:d6:4b:21:
4f:57:6e:86:61:66:d8:d5:c1:cd:5f:eb:f5:9e:d3:
2b:32:5f:0c:47:1d:1a:31:95:ef:9f:55:1b:6e:20:
5b:50:32:57:4b:cf:fc:d5:71:2b:d9:d3:b7:89:48:
56:dd:7f:54:4c:e1:73:41:b3:3c:9f:2d:e7:25:89:
8e:cd:b8:9a:46:66:8c:16:6c:25:5c:49:9c:4c:0f:
61:0c:c6:82:44:3d:e6:eb:9d:a9:6c:7d:33:05:37:
ae:8e:01:2b:3a:d8:18:0a:56:36:df:33:b0:1e:a1:
b2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B1:64:24:25:AD:B1:CF:63:C3:15:F4:74:B5:65:12:B6:03:81:FE
X509v3 Authority Key Identifier:
keyid:54:46:DF:07:FF:3C:B2:6D:FC:F4:EE:B8:76:1F:B0:16:CA:F7:F9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3e:84:49:a7:cb:13:33:f5:5d:5f:11:66:9e:90:55:c6:14:
9c:9c:f1:15:41:89:7d:05:33:65:57:71:10:f2:a3:e4:26:86:
e7:a7:1e:2f:46:ba:8d:56:a3:1d:0f:7f:30:09:1f:dd:99:e2:
7e:b1:f8:66:eb:a5:68:9f:01:b4:16:cb:ee:87:3d:6c:64:ab:
df:7e:fa:ad:88:73:48:fb:97:3e:7c:b7:ad:0e:72:48:8f:06:
8a:61:b8:97:3f:b4:3c:73:dd:1e:f0:6c:cb:be:61:b1:9f:b4:
c1:c2:55:1a:e4:c0:76:59:cb:d9:6b:d5:30:5a:69:e6:d6:57:
df:18:4a:7c:db:71:26:96:ce:d7:53:cc:54:6d:3c:7c:93:65:
89:02:1f:63:75:9f:78:a0:fc:77:df:5e:57:99:d7:1b:58:ac:
94:57:4a:6a:21:51:1c:56:88:1b:3a:26:29:ca:5c:15:77:10:
5b:94:db:82:b7:ec:cc:ca:fe:f2:76:4b:6b:9c:9d:31:78:93:
40:a1:55:cd:bf:5c:4d:58:de:8b:72:bb:4a:55:4c:3d:90:ff:
49:2d:88:2d:94:30:3b:0b:1a:04:2c:04:e9:e9:0e:59:0c:d8:
1f:0f:c6:3e:b4:e2:63:41:42:11:74:09:8c:ea:60:84:d0:34:
42:08:5e:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXuCJIKQ3gAxHg2+W0SVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NDZkZjA3ZmYzY2IyNmRmY2Y0ZWViODc2MWZiMDE2Y2Fm
N2Y5ZWUwHhcNMjYwMzI1MTkwMDQ1WhcNMjYwMzI2MTkwMDQ1WjAzMTEwLwYDVQQD
EyhiYmIxNjQyNDI1YWRiMWNmNjNjMzE1ZjQ3NGI1NjUxMmI2MDM4MWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Lyfq7TRJ2mHV/QmkAK1mjosf/Hd
eQ4FDmLCQ0NY+w1i0LlMXsR3nDa4btq79DpTscou/0hO0wEU4QrA70DJpIS/Lyc/
R7N4KkNvHGtXoIJSogvPEKycZR/qDCfT6NlGJXXGZojQONKZRtc5uc1nWUKuXo6E
70ZG7GCy7HyFI2Fsvq8i6TXZSPBh6jG+VkcI3RTWSyFPV26GYWbY1cHNX+v1ntMr
Ml8MRx0aMZXvn1UbbiBbUDJXS8/81XEr2dO3iUhW3X9UTOFzQbM8ny3nJYmOzbia
RmaMFmwlXEmcTA9hDMaCRD3m652pbH0zBTeujgErOtgYClY23zOwHqGyUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuxZCQlrbHPY8MV9HS1ZRK2A4H+MB8GA1UdIwQY
MBaAFFRG3wf/PLJt/PTuuHYfsBbK9/nuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkViZkJfODhzbTM4OU82NGRoLXdGc3IzLWU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zZjg1ZGEtMzExZi00NWI0LWE3NDct
NTY1NjBiMjZhMGRiLzEvVkViZkJfODhzbTM4OU82NGRoLXdGc3IzLWU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zZjg1ZGEtMzExZi00NWI0LWE3NDctNTY1NjBiMjZhMGRi
LzEvVkViZkJfODhzbTM4OU82NGRoLXdGc3IzLWU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdT6ESafL
EzP1XV8RZp6QVcYUnJzxFUGJfQUzZVdxEPKj5CaG56ceL0a6jVajHQ9/MAkf3Zni
frH4ZuulaJ8BtBbL7oc9bGSr3376rYhzSPuXPny3rQ5ySI8GimG4lz+0PHPdHvBs
y75hsZ+0wcJVGuTAdlnL2WvVMFpp5tZX3xhKfNtxJpbO11PMVG08fJNliQIfY3Wf
eKD8d99eV5nXG1islFdKaiFRHFaIGzomKcpcFXcQW5TbgrfszMr+8nZLa5ydMXiT
QKFVzb9cTVjei3K7SlVMPZD/SS2ILZQwOwsaBCwE6ekOWQzYHw/GPrTiY0FCEXQJ
jOpghNA0Qghexw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:28 2026 by rpki-client