Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
File: VbU-iTBDTHKlgHoFUIK5hZmycH8.mft (raw, json)
Hash identifier: JVmRXWMR2dM70eXWkUCYZqQLaybmjmsgO0g2m+tN+58=
Subject key identifier: 4B:EA:98:38:BB:35:30:5F:F6:12:92:BE:1F:29:29:CA:4A:6C:00:C8
Authority key identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
Certificate issuer: /CN=55b53e8930434c72a5807a055082b98599b2707f
Certificate serial: 019E30A97561075DAD151E61428A1EF882EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
Manifest number: 0491
Signing time: Sat 16 May 2026 12:01:12 +0000
Manifest this update: Sat 16 May 2026 12:01:12 +0000
Manifest next update: Sun 17 May 2026 12:01:12 +0000
Files and hashes: 1: VbU-iTBDTHKlgHoFUIK5hZmycH8.crl (hash: MaW266dWpBn3mx4eC/6m9w4NtxTb3M9zRSiGjftwyfA=)
2: YjCGgAmzduZSK_5-gRARaBbNei0.roa (hash: jfHZjRD1+MaIdb39vxs02Km81VVmAsPrQrgbVdWjjqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:75:61:07:5d:ad:15:1e:61:42:8a:1e:f8:82:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b53e8930434c72a5807a055082b98599b2707f
Validity
Not Before: May 16 12:01:12 2026 GMT
Not After : May 17 12:01:12 2026 GMT
Subject: CN=4bea9838bb35305ff61292be1f2929ca4a6c00c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:c3:5d:0b:bf:46:1c:48:c0:be:aa:66:9d:
1a:46:c5:50:4b:cf:ec:09:83:c1:83:9c:70:99:2d:
2f:2d:e0:1d:02:6b:3f:12:ad:84:e0:4c:7c:28:53:
04:f7:f4:53:e6:2d:a8:13:50:d5:0e:fe:52:a4:b2:
a8:6a:05:19:5c:23:e6:82:83:01:e7:f7:c5:6d:5b:
15:d1:27:90:7f:50:47:c3:19:90:0e:50:13:c7:78:
c3:5c:83:e9:7c:4a:7e:cd:15:44:1e:c8:08:1c:9e:
45:a2:da:b6:76:5f:6e:19:80:28:0c:62:46:89:a2:
29:f5:a4:97:2d:ae:0c:91:ea:b2:26:97:72:f8:6a:
e2:bb:ac:c6:a2:1c:f3:c7:5e:39:37:aa:67:07:40:
cf:c7:e1:9a:60:6e:12:cc:ed:fe:e3:bb:d6:55:00:
fc:f0:73:9b:52:60:3f:ec:de:fe:fd:30:00:1b:8e:
4f:7b:5a:72:89:67:7f:e1:cc:74:97:7f:1e:12:2d:
1c:18:72:12:2f:5c:b7:2e:a0:b5:cf:c7:f9:3a:33:
50:df:86:3e:ce:9b:b1:aa:09:c7:99:1b:da:cd:6d:
0c:df:2b:a2:49:da:04:16:e0:63:0a:e9:29:23:71:
a0:d9:6c:0b:d3:26:2f:88:df:65:85:b2:5d:5b:fe:
61:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EA:98:38:BB:35:30:5F:F6:12:92:BE:1F:29:29:CA:4A:6C:00:C8
X509v3 Authority Key Identifier:
keyid:55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f4:0d:02:bb:c4:e4:f8:8d:6a:0b:c2:f4:c1:86:ba:99:27:
f6:cb:f6:a3:66:94:57:d2:b1:bc:1e:d6:0c:a8:dc:85:99:c7:
af:99:20:11:08:aa:2a:16:fe:fc:ce:9a:33:b9:f7:a2:9e:19:
26:62:12:b3:ad:d8:07:f2:7c:b7:8f:8d:06:25:ee:67:6a:55:
f6:94:32:53:db:2c:50:1b:72:41:24:c8:37:01:7e:46:3b:a6:
94:e0:f6:d5:9f:82:52:a6:95:8c:e5:9d:53:27:93:d0:75:df:
5e:21:11:ea:ec:8b:d4:b1:f4:11:20:f9:2a:19:18:c6:8c:99:
e2:77:09:a9:67:3d:0f:fb:e8:7a:5d:19:d4:4b:4d:c9:4a:87:
75:a9:0b:d2:be:55:51:40:1f:95:f2:80:c3:e3:2b:da:7b:ed:
ee:61:98:36:69:2b:68:2a:e2:e5:a3:0e:9a:22:d5:0e:4a:9c:
86:3c:c6:68:7d:8c:4e:ad:25:85:aa:cc:79:c3:af:48:f4:5d:
43:83:2f:e0:af:9b:a8:1b:dd:49:66:17:76:d5:87:a5:1b:0c:
6c:65:23:a5:ba:be:68:cd:18:29:0b:17:e9:78:5b:28:52:d8:
d7:27:ea:23:e5:32:3b:ed:6d:28:fa:4e:8f:c2:d6:35:a1:a7:
fe:4b:08:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqXVhB12tFR5hQooe+ILrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YjUzZTg5MzA0MzRjNzJhNTgwN2EwNTUwODJiOTg1OTli
MjcwN2YwHhcNMjYwNTE2MTIwMTEyWhcNMjYwNTE3MTIwMTEyWjAzMTEwLwYDVQQD
Eyg0YmVhOTgzOGJiMzUzMDVmZjYxMjkyYmUxZjI5MjljYTRhNmMwMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmXDXQu/RhxIwL6qZp0aRsVQS8/s
CYPBg5xwmS0vLeAdAms/Eq2E4Ex8KFME9/RT5i2oE1DVDv5SpLKoagUZXCPmgoMB
5/fFbVsV0SeQf1BHwxmQDlATx3jDXIPpfEp+zRVEHsgIHJ5Fotq2dl9uGYAoDGJG
iaIp9aSXLa4MkeqyJpdy+Griu6zGohzzx145N6pnB0DPx+GaYG4SzO3+47vWVQD8
8HObUmA/7N7+/TAAG45Pe1pyiWd/4cx0l38eEi0cGHISL1y3LqC1z8f5OjNQ34Y+
zpuxqgnHmRvazW0M3yuiSdoEFuBjCukpI3Gg2WwL0yYviN9lhbJdW/5hcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvqmDi7NTBf9hKSvh8pKcpKbADIMB8GA1UdIwQY
MBaAFFW1PokwQ0xypYB6BVCCuYWZsnB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJVLWlUQkRUSEtsZ0hvRlVJSzVoWm15Y0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iM2ZkZDctMDg4YS00ZjYyLThjMmEt
OTQ1NDA3YTAxN2IyLzEvVmJVLWlUQkRUSEtsZ0hvRlVJSzVoWm15Y0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iM2ZkZDctMDg4YS00ZjYyLThjMmEtOTQ1NDA3YTAxN2Iy
LzEvVmJVLWlUQkRUSEtsZ0hvRlVJSzVoWm15Y0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPQNArvE
5PiNagvC9MGGupkn9sv2o2aUV9KxvB7WDKjchZnHr5kgEQiqKhb+/M6aM7n3op4Z
JmISs63YB/J8t4+NBiXuZ2pV9pQyU9ssUBtyQSTINwF+RjumlOD21Z+CUqaVjOWd
UyeT0HXfXiER6uyL1LH0ESD5KhkYxoyZ4ncJqWc9D/voel0Z1EtNyUqHdakL0r5V
UUAflfKAw+Mr2nvt7mGYNmkraCri5aMOmiLVDkqchjzGaH2MTq0lharMecOvSPRd
Q4Mv4K+bqBvdSWYXdtWHpRsMbGUjpbq+aM0YKQsX6XhbKFLY1yfqI+UyO+1tKPpO
j8LWNaGn/ksIfQ==
-----END CERTIFICATE-----
Generated at Sat May 16 22:01:47 2026 by rpki-client