Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
File: VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json)
Hash identifier: iei0BW/vFQiPu/9wxAUe943O27xel73bLQDfI5NhC38=
Subject key identifier: 70:5A:C2:BB:05:32:A8:2E:1D:FB:BA:FD:67:35:D9:96:1F:B0:54:FE
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Certificate issuer: /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial: 019D37C0801EE2B136EC4945CD414800706B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 04:00:55 +0000
Manifest this update: Sun 29 Mar 2026 04:00:55 +0000
Manifest next update: Mon 30 Mar 2026 04:00:55 +0000
Files and hashes: 1: 6X4Jk6qo75EQY5AqZ7LyaMmPOj4.roa (hash: mTjThBJAOSa8qyri48cjOYYkA9lZErxqgqTP6n0jrYU=)
2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: 06u4dUcGApI2XzKd9SsFnKGk14TBl7FsfpKq1jsg38U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:80:1e:e2:b1:36:ec:49:45:cd:41:48:00:70:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Validity
Not Before: Mar 29 04:00:55 2026 GMT
Not After : Mar 30 04:00:55 2026 GMT
Subject: CN=705ac2bb0532a82e1dfbbafd6735d9961fb054fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:a2:d0:d8:6a:c9:3a:a5:f3:00:b5:18:dd:
2f:4e:79:db:10:94:22:e2:5d:da:ce:6e:31:c3:4d:
d6:08:11:5a:dc:52:75:36:b6:56:8e:a7:f6:0a:79:
62:b3:59:b3:1e:db:d7:2a:73:63:62:84:70:9d:46:
b5:38:65:c3:8e:3a:8c:89:67:66:03:5d:30:ad:85:
20:fa:d2:ab:ae:44:36:26:9e:8c:9e:7b:90:c9:b6:
4c:78:80:48:22:cd:f1:38:c4:63:fb:5b:da:b1:d2:
7a:4b:1e:51:42:ec:97:1c:d2:d4:3b:36:e0:80:27:
f1:fb:c8:5b:ec:06:3e:c7:e8:25:eb:22:d2:8d:f6:
1f:d8:2f:dc:7f:16:21:2e:78:5a:e9:37:ad:67:06:
7c:c9:e9:1d:97:19:78:ba:8c:c8:0e:73:a5:04:0b:
ab:7e:bc:e3:54:3d:df:34:d8:69:66:46:bb:47:da:
8a:25:2c:af:65:1d:4b:57:7f:e3:ce:49:b5:80:da:
9b:ea:d5:84:6a:50:ee:9b:7d:31:00:57:c5:fd:4a:
d8:63:72:e0:6e:fa:eb:53:25:de:a1:1e:f1:ea:84:
d9:2e:38:b6:ce:2a:51:49:b6:c4:e0:21:8a:33:02:
9f:cc:22:5b:e4:55:de:23:9c:af:2e:e1:e3:5f:2c:
bc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5A:C2:BB:05:32:A8:2E:1D:FB:BA:FD:67:35:D9:96:1F:B0:54:FE
X509v3 Authority Key Identifier:
keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:22:63:db:43:17:a5:d1:9e:2a:e8:6b:4c:3d:8c:9a:fa:c4:
46:a3:29:b6:60:68:44:2c:c1:09:8d:d8:12:f6:9d:ac:4f:fc:
74:18:02:91:e1:d8:b7:c1:68:fb:55:c9:df:ed:0e:96:ac:98:
5b:d5:6d:c3:74:82:8e:56:78:94:c0:f5:3f:78:e7:75:88:be:
3f:8a:d1:99:2d:87:d5:88:be:4c:9f:e0:8b:3e:44:ad:ba:d2:
52:f0:95:45:43:d6:14:4d:72:b8:4e:74:1a:ee:ed:9b:fe:a9:
c4:c5:57:7a:68:0e:7f:81:68:42:75:a4:bf:e6:33:2d:a5:36:
85:03:ef:83:10:d9:c5:da:2a:90:08:ef:1d:89:03:33:90:15:
ea:08:a8:30:3a:02:50:95:0d:e0:e4:a7:e2:97:b6:09:50:fc:
79:8a:9a:5f:52:db:31:31:44:99:6e:c2:25:59:4e:6c:7f:6d:
e8:74:03:8d:2d:96:25:39:17:6b:53:89:e3:71:df:ca:3e:2d:
b5:67:e0:26:66:b8:69:d7:b5:3b:fe:bc:58:8b:80:15:6d:82:
32:04:87:63:3c:0c:94:78:93:8e:43:9b:b1:54:01:1e:7e:99:
d3:a5:3f:f2:2f:8b:ec:35:48:f1:ec:31:a9:94:12:43:fe:1f:
c2:5d:35:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wIAe4rE27ElFzUFIAHBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MmM5YTFjOWM0ZmY3OTNlODg4YmQ1ODNkY2E5ODE1Y2M0
NTc0YzAwHhcNMjYwMzI5MDQwMDU1WhcNMjYwMzMwMDQwMDU1WjAzMTEwLwYDVQQD
Eyg3MDVhYzJiYjA1MzJhODJlMWRmYmJhZmQ2NzM1ZDk5NjFmYjA1NGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHui0NhqyTql8wC1GN0vTnnbEJQi
4l3azm4xw03WCBFa3FJ1NrZWjqf2Cnlis1mzHtvXKnNjYoRwnUa1OGXDjjqMiWdm
A10wrYUg+tKrrkQ2Jp6MnnuQybZMeIBIIs3xOMRj+1vasdJ6Sx5RQuyXHNLUOzbg
gCfx+8hb7AY+x+gl6yLSjfYf2C/cfxYhLnha6TetZwZ8yekdlxl4uozIDnOlBAur
frzjVD3fNNhpZka7R9qKJSyvZR1LV3/jzkm1gNqb6tWEalDum30xAFfF/UrYY3Lg
bvrrUyXeoR7x6oTZLji2zipRSbbE4CGKMwKfzCJb5FXeI5yvLuHjXyy83wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBawrsFMqguHfu6/Wc12ZYfsFT+MB8GA1UdIwQY
MBaAFFUsmhycT/eT6Ii9WD3KmBXMRXTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81YmNlYTUtOGU0NS00NThhLWIwMzEt
Yjc4ZmY4MGE4MDI3LzEvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi81YmNlYTUtOGU0NS00NThhLWIwMzEtYjc4ZmY4MGE4MDI3
LzEvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGiJj20MX
pdGeKuhrTD2MmvrERqMptmBoRCzBCY3YEvadrE/8dBgCkeHYt8Fo+1XJ3+0OlqyY
W9Vtw3SCjlZ4lMD1P3jndYi+P4rRmS2H1Yi+TJ/giz5ErbrSUvCVRUPWFE1yuE50
Gu7tm/6pxMVXemgOf4FoQnWkv+YzLaU2hQPvgxDZxdoqkAjvHYkDM5AV6gioMDoC
UJUN4OSn4pe2CVD8eYqaX1LbMTFEmW7CJVlObH9t6HQDjS2WJTkXa1OJ43Hfyj4t
tWfgJma4ade1O/68WIuAFW2CMgSHYzwMlHiTjkObsVQBHn6Z06U/8i+L7DVI8ewx
qZQSQ/4fwl019g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:42 2026 by rpki-client