Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
File: VFjdpvrZNtqJUgABqigr-syLguM.mft (raw, json)
Hash identifier: jxxL0oeFTpEoRXIj8osUS7w0WyXXqubXFHdOYW+6XvU=
Subject key identifier: D1:31:42:53:62:0C:70:06:B6:F0:ED:1C:16:41:65:08:6D:F3:5D:4C
Authority key identifier: 54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3
Certificate issuer: /CN=5458dda6fad936da89520001aa282bfacc8b82e3
Certificate serial: 019D3A53D8CD7C9C225C6AB3A056BB93C601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
Manifest number: 1377
Signing time: Sun 29 Mar 2026 16:01:06 +0000
Manifest this update: Sun 29 Mar 2026 16:01:06 +0000
Manifest next update: Mon 30 Mar 2026 16:01:06 +0000
Files and hashes: 1: VFjdpvrZNtqJUgABqigr-syLguM.crl (hash: W++2TEshkncK2xRJnNknKw8gOZuSCh5O2JDFHPjwn7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:d8:cd:7c:9c:22:5c:6a:b3:a0:56:bb:93:c6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5458dda6fad936da89520001aa282bfacc8b82e3
Validity
Not Before: Mar 29 16:01:06 2026 GMT
Not After : Mar 30 16:01:06 2026 GMT
Subject: CN=d1314253620c7006b6f0ed1c164165086df35d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:a7:2a:e5:20:d8:fb:e8:df:f9:e8:c4:b1:
6d:64:b8:04:be:a2:90:06:e9:71:7a:c2:3c:ef:3f:
b1:2d:0b:d4:8a:9a:b3:a0:76:39:09:d3:e4:22:55:
ec:09:4f:33:f1:e9:62:55:13:99:3b:35:76:7c:78:
58:fb:92:ac:59:07:b8:87:a7:74:c0:f4:9a:d9:77:
c3:8a:fd:ad:fa:b6:b9:51:e9:8e:87:b1:c3:50:a7:
a4:27:22:9f:3b:0f:e5:9e:9b:70:64:cf:d5:40:bf:
76:17:3a:23:5f:4d:b0:b7:36:25:b8:f8:06:2a:ca:
3d:e8:45:5e:6d:e7:ff:d9:0b:94:ba:e0:6d:c2:21:
78:b7:fd:b6:88:60:09:17:9d:44:d3:8f:4a:e6:75:
8c:93:25:cd:43:d8:d6:35:c9:9b:8b:8b:9c:0b:9e:
f4:e5:0c:f8:f2:50:07:29:5a:02:22:5b:d8:30:b5:
84:a9:4e:50:9a:a7:00:73:d1:c3:e8:e7:a4:8b:b3:
96:34:ad:6e:d7:20:f1:d0:0d:e3:29:14:53:25:f0:
ab:22:ad:94:88:db:3b:98:76:8a:e2:cb:c9:27:cc:
26:28:85:30:de:67:a7:84:be:7d:fa:3f:b5:87:03:
cf:02:5f:d3:cb:a7:f0:3f:03:9f:a0:61:01:e1:a4:
f5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:42:53:62:0C:70:06:B6:F0:ED:1C:16:41:65:08:6D:F3:5D:4C
X509v3 Authority Key Identifier:
keyid:54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:d7:07:e9:d7:26:fb:35:55:55:db:ae:60:ed:de:92:dd:7a:
a0:1a:06:4b:72:cd:6b:a9:a9:a4:b9:24:a9:19:90:94:ee:c2:
ac:be:dc:18:52:52:87:d6:c2:41:13:d7:b2:95:ab:c2:62:25:
76:74:07:7e:5e:02:78:fd:be:99:22:7c:35:ce:cc:a6:ee:a2:
9a:77:6b:c0:96:98:38:e0:43:9c:2f:47:f1:3a:5a:cc:63:0c:
e7:5b:98:1f:55:a8:a2:be:2a:f5:96:c1:f2:32:c9:25:41:72:
35:fc:d1:dc:7c:8b:ff:e8:23:63:bf:70:7d:4a:12:9a:37:5a:
91:06:3e:a8:7d:62:82:76:04:56:7d:94:e3:3a:78:e8:6a:ad:
ac:3d:f5:fa:2f:87:a0:0e:ee:ec:da:5c:5f:ea:55:d3:cc:e5:
49:c4:6d:dd:58:15:91:b3:81:20:d5:76:6c:2d:e2:58:69:f2:
83:02:66:12:bd:5e:cf:86:af:06:6c:1d:bb:4e:88:19:8c:d1:
9a:c8:a1:ad:3d:71:56:74:6a:f7:f0:41:09:91:6c:37:29:3a:
24:fd:6d:99:82:8d:2e:f5:6f:da:e9:56:98:2d:ea:0c:da:3c:
db:45:f1:7d:40:47:f5:f6:3b:62:a8:25:d3:11:b5:01:30:83:
49:ae:28:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06U9jNfJwiXGqzoFa7k8YBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NThkZGE2ZmFkOTM2ZGE4OTUyMDAwMWFhMjgyYmZhY2M4
YjgyZTMwHhcNMjYwMzI5MTYwMTA2WhcNMjYwMzMwMTYwMTA2WjAzMTEwLwYDVQQD
EyhkMTMxNDI1MzYyMGM3MDA2YjZmMGVkMWMxNjQxNjUwODZkZjM1ZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqqnKuUg2Pvo3/noxLFtZLgEvqKQ
BulxesI87z+xLQvUipqzoHY5CdPkIlXsCU8z8eliVROZOzV2fHhY+5KsWQe4h6d0
wPSa2XfDiv2t+ra5UemOh7HDUKekJyKfOw/lnptwZM/VQL92FzojX02wtzYluPgG
Kso96EVebef/2QuUuuBtwiF4t/22iGAJF51E049K5nWMkyXNQ9jWNcmbi4ucC570
5Qz48lAHKVoCIlvYMLWEqU5QmqcAc9HD6Oeki7OWNK1u1yDx0A3jKRRTJfCrIq2U
iNs7mHaK4svJJ8wmKIUw3menhL59+j+1hwPPAl/Ty6fwPwOfoGEB4aT1kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNExQlNiDHAGtvDtHBZBZQht811MMB8GA1UdIwQY
MBaAFFRY3ab62TbaiVIAAaooK/rMi4LjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkZqZHB2clpOdHFKVWdBQnFpZ3Itc3lMZ3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC80NzgxZWEtMGEzMi00M2Y5LTk4OTAt
ZGU5N2JjZDQwMzY4LzEvVkZqZHB2clpOdHFKVWdBQnFpZ3Itc3lMZ3VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC80NzgxZWEtMGEzMi00M2Y5LTk4OTAtZGU5N2JjZDQwMzY4
LzEvVkZqZHB2clpOdHFKVWdBQnFpZ3Itc3lMZ3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA19cH6dcm
+zVVVduuYO3ekt16oBoGS3LNa6mppLkkqRmQlO7CrL7cGFJSh9bCQRPXspWrwmIl
dnQHfl4CeP2+mSJ8Nc7Mpu6imndrwJaYOOBDnC9H8TpazGMM51uYH1Woor4q9ZbB
8jLJJUFyNfzR3HyL/+gjY79wfUoSmjdakQY+qH1ignYEVn2U4zp46GqtrD31+i+H
oA7u7NpcX+pV08zlScRt3VgVkbOBINV2bC3iWGnygwJmEr1ez4avBmwdu06IGYzR
msihrT1xVnRq9/BBCZFsNyk6JP1tmYKNLvVv2ulWmC3qDNo820XxfUBH9fY7Yqgl
0xG1ATCDSa4oyA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:15:37 2026 by rpki-client