Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
File: VVzAtghVz-FakevLDuWExhcRb7c.mft (raw, json)
Hash identifier: Z7cavZquo6MopM/NXY0PXTyYdxdaJR+axPQnJ2drvp8=
Subject key identifier: 46:11:C0:1C:42:82:A0:E4:49:07:16:F6:76:34:39:92:DC:64:90:A0
Authority key identifier: 55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
Certificate issuer: /CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Certificate serial: 019D3A1CC643D48C35B16EBAF55D13E5D877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
Manifest number: 0656
Signing time: Sun 29 Mar 2026 15:00:57 +0000
Manifest this update: Sun 29 Mar 2026 15:00:57 +0000
Manifest next update: Mon 30 Mar 2026 15:00:57 +0000
Files and hashes: 1: MK2noUVGla3OTUx2ogGw2XUu6Gs.roa (hash: veceQ15vq5ia7EiqoqV8aOxRd8PGbXJRsqwiJKSo+Tg=)
2: PkSRo3CWKUx4NQN2EIynL2VXNY8.roa (hash: 7UyCEKaWuR4pgq0/Sue24UhPGmnjwf7e/JUg7VpH6TM=)
3: VVzAtghVz-FakevLDuWExhcRb7c.crl (hash: Msqud8Vgw7lbnnG7bgzI4TPERKmiO9wFOCZmZMVuRak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:c6:43:d4:8c:35:b1:6e:ba:f5:5d:13:e5:d8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Validity
Not Before: Mar 29 15:00:57 2026 GMT
Not After : Mar 30 15:00:57 2026 GMT
Subject: CN=4611c01c4282a0e4490716f676343992dc6490a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:b3:5a:3b:62:16:3c:45:63:c0:81:8b:61:
4c:17:ba:08:35:ec:37:b4:f2:c4:9e:81:21:4e:28:
11:64:d1:a4:47:f2:d1:56:e0:5f:18:f1:dd:36:93:
ee:43:58:d6:ba:9e:e9:1f:0a:c7:32:f2:4a:f5:18:
93:1f:3f:71:28:2a:5c:63:ea:3c:93:c4:94:55:42:
07:d7:0e:1c:98:d8:50:61:2e:b0:e3:db:e7:8a:ab:
14:b7:9b:91:3a:7e:e4:18:74:2e:fe:89:67:a0:82:
e6:78:ef:e8:e8:4f:c2:ce:f5:6b:8c:a7:58:ba:a8:
49:52:53:ee:5f:94:7d:3a:1b:58:84:d8:9d:72:80:
0b:75:86:a0:d9:c5:bd:fd:e2:89:46:34:ca:35:38:
c0:a1:dc:1f:99:f8:d6:58:48:76:bc:62:f4:c1:9c:
89:ad:1e:7c:5c:d5:62:fa:04:26:ba:77:36:9c:b1:
0c:14:1e:1e:f9:6a:47:9e:19:b7:cd:be:18:9c:c5:
41:3a:c6:f6:ca:d4:16:f0:9e:e7:f1:62:61:7c:53:
32:5c:17:50:e1:c7:84:dc:f5:fe:4d:77:e0:2c:e9:
49:94:8b:42:5b:a0:5c:01:e5:0a:53:5e:88:0d:7c:
be:90:86:77:d5:9e:6d:ef:ac:93:ba:bb:e7:a8:a0:
c7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:11:C0:1C:42:82:A0:E4:49:07:16:F6:76:34:39:92:DC:64:90:A0
X509v3 Authority Key Identifier:
keyid:55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cb:92:aa:94:9e:ec:55:3b:ba:5b:69:e4:30:ea:38:3a:12:
57:01:58:94:d9:19:de:76:96:6c:00:62:67:b6:f0:29:fb:98:
f2:14:1f:f3:e4:04:48:fc:7b:ab:5b:8b:6c:36:b5:ca:aa:bc:
dc:8b:79:de:07:39:b1:0c:5b:35:62:f5:5e:d7:50:1a:62:4d:
b5:51:ea:f7:83:12:ce:71:dc:6c:74:20:2e:21:b0:44:a4:a9:
96:4f:1c:cc:13:29:e5:c0:13:06:8c:5d:81:14:11:c9:bb:17:
89:74:ea:0a:da:98:3b:5b:79:63:00:bc:9e:22:48:56:36:b9:
da:49:93:45:e3:76:43:6a:bf:06:46:03:0a:ae:76:6d:f4:4f:
36:05:b9:89:70:c3:4e:83:7a:1d:82:62:4f:3e:d5:d1:0a:c1:
86:8c:e9:43:ec:a1:9a:74:6b:74:d1:32:c3:82:30:f8:d8:ad:
03:e5:d9:af:d1:05:f1:1c:fc:8d:53:8c:d2:1a:3f:1d:e7:d0:
60:50:9f:14:c5:4d:ce:7a:ee:a9:c5:11:f6:52:b9:21:d6:d6:
6f:63:fb:c0:4f:c1:b8:22:69:0c:a7:21:20:e0:fb:36:af:50:
81:a0:c5:16:6b:06:84:be:63:81:53:b3:a8:30:2e:6c:58:84:
ce:99:69:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HMZD1Iw1sW669V0T5dh3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NWNjMGI2MDg1NWNmZTE1YTkxZWJjYjBlZTU4NGM2MTcx
MTZmYjcwHhcNMjYwMzI5MTUwMDU3WhcNMjYwMzMwMTUwMDU3WjAzMTEwLwYDVQQD
Eyg0NjExYzAxYzQyODJhMGU0NDkwNzE2ZjY3NjM0Mzk5MmRjNjQ5MGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6qzWjtiFjxFY8CBi2FMF7oINew3
tPLEnoEhTigRZNGkR/LRVuBfGPHdNpPuQ1jWup7pHwrHMvJK9RiTHz9xKCpcY+o8
k8SUVUIH1w4cmNhQYS6w49vniqsUt5uROn7kGHQu/olnoILmeO/o6E/CzvVrjKdY
uqhJUlPuX5R9OhtYhNidcoALdYag2cW9/eKJRjTKNTjAodwfmfjWWEh2vGL0wZyJ
rR58XNVi+gQmunc2nLEMFB4e+WpHnhm3zb4YnMVBOsb2ytQW8J7n8WJhfFMyXBdQ
4ceE3PX+TXfgLOlJlItCW6BcAeUKU16IDXy+kIZ31Z5t76yTurvnqKDH4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYRwBxCgqDkSQcW9nY0OZLcZJCgMB8GA1UdIwQY
MBaAFFVcwLYIVc/hWpHryw7lhMYXEW+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlZ6QXRnaFZ6LUZha2V2TER1V0V4aGNSYjdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81ZTlhZDctYTVmNC00Y2I0LWEzMTkt
MmYzNTJkNjRhYWM4LzEvVlZ6QXRnaFZ6LUZha2V2TER1V0V4aGNSYjdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi81ZTlhZDctYTVmNC00Y2I0LWEzMTktMmYzNTJkNjRhYWM4
LzEvVlZ6QXRnaFZ6LUZha2V2TER1V0V4aGNSYjdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8uSqpSe
7FU7ultp5DDqODoSVwFYlNkZ3naWbABiZ7bwKfuY8hQf8+QESPx7q1uLbDa1yqq8
3It53gc5sQxbNWL1XtdQGmJNtVHq94MSznHcbHQgLiGwRKSplk8czBMp5cATBoxd
gRQRybsXiXTqCtqYO1t5YwC8niJIVja52kmTReN2Q2q/BkYDCq52bfRPNgW5iXDD
ToN6HYJiTz7V0QrBhozpQ+yhmnRrdNEyw4Iw+NitA+XZr9EF8Rz8jVOM0ho/HefQ
YFCfFMVNznruqcUR9lK5IdbWb2P7wE/BuCJpDKchIOD7Nq9QgaDFFmsGhL5jgVOz
qDAubFiEzplp7A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:49:12 2026 by rpki-client