Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
File: VDxwGANHJZY6lxyWqMqrWYyuY4o.mft (raw, json)
Hash identifier: s8dKhVJH61fQMoK+NHw9JLwG7VAQk9UYwXBR3v8SvHc=
Subject key identifier: 27:74:1B:21:7B:D2:E2:64:B1:43:06:A6:3A:38:C9:A3:94:0F:18:28
Authority key identifier: 54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A
Certificate issuer: /CN=543c7018034725963a971c96a8caab598cae638a
Certificate serial: 019D1B6DB1D059A076A6045879FFC8ED51DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
Manifest number: 0675
Signing time: Mon 23 Mar 2026 16:01:06 +0000
Manifest this update: Mon 23 Mar 2026 16:01:06 +0000
Manifest next update: Tue 24 Mar 2026 16:01:06 +0000
Files and hashes: 1: 6EkJKay6ASec3Uw_czHATgEyfKA.roa (hash: 2c9WHQTBPJnNJtn4QC9p7CmncMVB1cW6dCt+0dg0vCE=)
2: VDxwGANHJZY6lxyWqMqrWYyuY4o.crl (hash: iLyFqntXK2O3Z5w4S4Tb3tZGDSN8GKXgVsxPONQMI0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 16:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:6d:b1:d0:59:a0:76:a6:04:58:79:ff:c8:ed:51:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c7018034725963a971c96a8caab598cae638a
Validity
Not Before: Mar 23 16:01:06 2026 GMT
Not After : Mar 24 16:01:06 2026 GMT
Subject: CN=27741b217bd2e264b14306a63a38c9a3940f1828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8d:51:18:8c:12:7f:b3:7f:4c:5e:4c:43:a2:
f3:cf:07:f0:b4:1c:cc:3e:5d:e3:6f:67:b9:06:0b:
a3:f9:2c:5c:6e:d3:ee:fc:df:0f:83:36:11:54:f7:
80:31:6a:49:e0:99:ac:47:1d:0c:3a:c2:34:29:21:
30:49:d7:30:8d:44:64:8d:61:70:ea:34:32:e8:4c:
62:e6:74:98:e1:11:08:85:13:4e:db:89:64:e5:81:
3e:7b:a9:26:24:78:f4:6b:90:cc:c0:4e:bf:9a:0c:
c7:99:5c:69:a6:31:7f:e4:4a:92:ef:4f:df:a1:12:
85:24:39:bf:57:44:fc:29:69:7e:92:ce:5e:96:61:
3b:d9:61:6f:c3:14:f5:6d:a6:bf:eb:81:4d:11:c1:
05:e7:b7:27:d5:db:70:97:90:d2:1b:d5:bc:f2:02:
1a:e1:7b:2a:45:b2:4d:2b:88:b3:d6:a3:93:d6:a4:
8d:d0:61:04:0a:56:6e:5b:9b:6c:89:07:33:a7:29:
a1:31:f0:5d:25:fe:12:5c:75:46:bb:c7:ba:aa:8f:
02:dc:fa:00:ca:da:da:d0:0f:a3:09:bc:2e:c0:51:
bb:d5:e4:10:d9:36:af:08:31:93:b9:70:23:39:5a:
4c:04:93:1b:42:2d:ae:2b:db:41:7a:52:d9:27:29:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:74:1B:21:7B:D2:E2:64:B1:43:06:A6:3A:38:C9:A3:94:0F:18:28
X509v3 Authority Key Identifier:
keyid:54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ed:22:b5:2e:b3:cd:b1:cb:48:ed:09:fe:80:4b:da:19:0e:
1b:a2:97:d5:97:1d:6b:f1:ea:48:b8:a3:b1:7a:32:98:15:98:
66:c8:ab:9b:9e:1f:5f:08:94:6e:26:88:0a:4b:81:c5:0e:fb:
45:97:83:06:ee:63:74:14:95:5e:88:4e:26:36:0d:27:ff:67:
16:ce:3a:59:71:7c:65:88:bf:04:a5:65:e4:a1:0e:ac:0f:b9:
2b:fc:76:22:41:46:6b:4b:98:8f:a6:26:f0:dc:49:ea:01:9e:
07:15:f9:ee:c5:ef:bb:97:cf:31:aa:92:18:6b:8b:83:c3:2d:
bc:d6:43:8e:7d:8e:8c:b0:7b:95:16:02:ac:2e:6a:c7:6c:62:
1e:cd:de:5c:49:50:9a:0f:7b:e6:f1:ea:a7:8b:5a:12:65:a4:
fd:ef:82:2b:e0:66:bf:86:4f:7c:f1:39:4d:9f:4a:5d:f9:ce:
b9:52:96:01:ac:6a:6b:45:f1:20:c8:2e:16:4b:79:31:b6:66:
24:71:a5:69:b0:12:e7:b8:bc:e2:5a:4f:4d:3d:a8:77:d0:e2:
3f:00:df:3f:38:16:11:c8:20:98:ef:aa:1b:6b:e3:ed:6e:81:
31:e3:a8:d8:13:78:df:19:9b:5f:06:f8:fa:84:f3:81:4d:07:
de:e1:a4:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0bbbHQWaB2pgRYef/I7VHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2M3MDE4MDM0NzI1OTYzYTk3MWM5NmE4Y2FhYjU5OGNh
ZTYzOGEwHhcNMjYwMzIzMTYwMTA2WhcNMjYwMzI0MTYwMTA2WjAzMTEwLwYDVQQD
EygyNzc0MWIyMTdiZDJlMjY0YjE0MzA2YTYzYTM4YzlhMzk0MGYxODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I1RGIwSf7N/TF5MQ6LzzwfwtBzM
Pl3jb2e5Bguj+SxcbtPu/N8PgzYRVPeAMWpJ4JmsRx0MOsI0KSEwSdcwjURkjWFw
6jQy6Exi5nSY4REIhRNO24lk5YE+e6kmJHj0a5DMwE6/mgzHmVxppjF/5EqS70/f
oRKFJDm/V0T8KWl+ks5elmE72WFvwxT1baa/64FNEcEF57cn1dtwl5DSG9W88gIa
4XsqRbJNK4iz1qOT1qSN0GEEClZuW5tsiQczpymhMfBdJf4SXHVGu8e6qo8C3PoA
ytra0A+jCbwuwFG71eQQ2TavCDGTuXAjOVpMBJMbQi2uK9tBelLZJykv7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCd0GyF70uJksUMGpjo4yaOUDxgoMB8GA1UdIwQY
MBaAFFQ8cBgDRyWWOpcclqjKq1mMrmOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkR4d0dBTkhKWlk2bHh5V3FNcXJXWXl1WTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81MDlkMGItYWNkMS00OTU4LWEzY2Qt
Mzc1ZjI0NDlhOGMxLzEvVkR4d0dBTkhKWlk2bHh5V3FNcXJXWXl1WTRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81MDlkMGItYWNkMS00OTU4LWEzY2QtMzc1ZjI0NDlhOGMx
LzEvVkR4d0dBTkhKWlk2bHh5V3FNcXJXWXl1WTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFO0itS6z
zbHLSO0J/oBL2hkOG6KX1Zcda/HqSLijsXoymBWYZsirm54fXwiUbiaICkuBxQ77
RZeDBu5jdBSVXohOJjYNJ/9nFs46WXF8ZYi/BKVl5KEOrA+5K/x2IkFGa0uYj6Ym
8NxJ6gGeBxX57sXvu5fPMaqSGGuLg8MtvNZDjn2OjLB7lRYCrC5qx2xiHs3eXElQ
mg975vHqp4taEmWk/e+CK+Bmv4ZPfPE5TZ9KXfnOuVKWAaxqa0XxIMguFkt5MbZm
JHGlabAS57i84lpPTT2od9DiPwDfPzgWEcggmO+qG2vj7W6BMeOo2BN43xmbXwb4
+oTzgU0H3uGkiA==
-----END CERTIFICATE-----
Generated at Mon Mar 23 22:26:30 2026 by rpki-client