Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
File: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json)
Hash identifier: OJA8EcJshvIor9ca8ioDipeiIdW24pYlf2e36yQFdEQ=
Subject key identifier: DE:FB:39:08:82:6E:CB:8E:90:A0:66:8A:20:65:5A:07:99:8E:E3:DE
Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Certificate issuer: /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Certificate serial: 01A1908C303D6410A2DA3ABB74B9AB491065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
Manifest number: 171E
Signing time: Sat 31 Oct 2026 06:01:08 +0000
Manifest this update: Sat 31 Oct 2026 06:01:08 +0000
Manifest next update: Sun 01 Nov 2026 06:01:08 +0000
Files and hashes: 1: 1-Lmc2QhlCIt9CEaFf21G5Ih9JAk.roa (hash: 6iVNvhe10i4KO9IhQfbWbvNH2WkwCCWrKbOYcXZWq7g=)
2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: CsFIcuT08Dy04XsLHFSN1OPyxHbvdVD+9wP0R027ccY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:8c:30:3d:64:10:a2:da:3a:bb:74:b9:ab:49:10:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Validity
Not Before: Oct 31 06:01:08 2026 GMT
Not After : Nov 1 06:01:08 2026 GMT
Subject: CN=defb3908826ecb8e90a0668a20655a07998ee3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:4c:54:f3:51:8f:c7:0b:65:f5:1b:a2:0f:
9e:05:3e:93:cd:7a:9a:27:ee:5a:f0:2b:c7:c4:45:
97:a9:3a:33:5d:a6:5d:b0:47:7e:85:04:7b:6c:28:
5c:83:17:14:02:16:57:62:2a:e0:94:ad:6d:38:2d:
78:94:ee:6a:87:e5:dc:eb:3e:59:70:58:da:4f:a9:
97:81:62:10:f9:8a:4b:c4:d6:93:3b:e2:19:a7:9b:
68:2b:df:2e:b3:4e:cb:0e:e7:31:82:7c:07:e1:60:
fe:ea:3e:54:b2:e6:96:52:6d:9f:21:0f:bb:9e:95:
2b:f1:37:7f:00:ff:5f:31:9c:0d:86:9a:86:be:f4:
4d:27:ed:ce:da:13:5d:8c:c2:d9:0e:18:50:8d:0f:
3d:a3:84:e9:2c:fd:64:be:95:65:3e:54:f4:44:b6:
b4:17:0c:f2:5f:87:65:e5:de:f0:5e:0a:6b:a5:f9:
ea:de:9b:e9:a5:fb:63:51:0e:bf:03:eb:13:d6:ac:
5b:56:37:c6:a0:61:bc:7b:63:36:04:4b:d5:4d:99:
5b:a6:6b:7f:4f:bd:73:ac:02:0e:7a:b7:a9:33:26:
e9:02:ed:c2:64:a8:d6:2b:6b:04:c6:b9:92:47:7a:
8c:97:8b:ca:f4:88:b7:7c:22:94:b7:7b:dd:0c:2f:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FB:39:08:82:6E:CB:8E:90:A0:66:8A:20:65:5A:07:99:8E:E3:DE
X509v3 Authority Key Identifier:
keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:49:5a:42:96:10:ea:80:6d:b9:55:57:ae:39:22:63:77:92:
44:43:6b:e8:ab:1d:b1:b3:67:04:ae:5d:88:b9:2b:ac:64:31:
91:f2:91:a3:c8:10:76:4a:a7:f3:aa:9b:37:8c:91:e7:47:aa:
2c:16:d3:8b:8b:0d:dd:e0:79:96:0e:f1:d3:c7:be:9c:21:72:
d0:9d:3a:49:ac:af:02:8b:04:41:ee:43:b7:ed:d9:72:96:79:
c1:bd:40:09:12:17:25:d5:24:b7:e7:b5:46:df:27:4e:68:a0:
5d:64:4a:05:fc:d7:2d:65:58:f2:ba:54:dd:03:5d:06:56:17:
d8:a8:2a:f2:c0:29:06:c1:e2:f0:8b:b3:72:93:63:67:9a:15:
11:54:49:b1:5b:06:92:57:3a:63:df:19:48:a3:a4:7a:d0:5e:
a4:fe:55:59:82:c1:e7:f6:ef:af:7a:e9:4d:31:f4:6d:dc:1e:
1b:6b:5a:d4:c9:e7:85:ae:f0:cc:d1:f2:aa:54:67:ac:d8:e2:
c9:24:81:b0:cc:bb:f1:d4:4b:e8:f3:e7:20:a9:99:48:4a:c1:
d0:eb:14:8f:04:f8:2d:15:c7:0a:72:58:8c:b9:84:1b:b9:37:
6d:33:9d:55:d9:72:67:8f:01:72:24:06:59:a1:f9:63:98:95:
9c:61:a5:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGQjDA9ZBCi2jq7dLmrSRBlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MGQ0YzU3MWQ4YmZiZmRkOGZhM2ExNzBmOTlmYjNhZmFi
NDExZDEwHhcNMjYxMDMxMDYwMTA4WhcNMjYxMTAxMDYwMTA4WjAzMTEwLwYDVQQD
EyhkZWZiMzkwODgyNmVjYjhlOTBhMDY2OGEyMDY1NWEwNzk5OGVlM2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3tMVPNRj8cLZfUbog+eBT6TzXqa
J+5a8CvHxEWXqTozXaZdsEd+hQR7bChcgxcUAhZXYirglK1tOC14lO5qh+Xc6z5Z
cFjaT6mXgWIQ+YpLxNaTO+IZp5toK98us07LDucxgnwH4WD+6j5UsuaWUm2fIQ+7
npUr8Td/AP9fMZwNhpqGvvRNJ+3O2hNdjMLZDhhQjQ89o4TpLP1kvpVlPlT0RLa0
FwzyX4dl5d7wXgprpfnq3pvppftjUQ6/A+sT1qxbVjfGoGG8e2M2BEvVTZlbpmt/
T71zrAIOerepMybpAu3CZKjWK2sExrmSR3qMl4vK9Ii3fCKUt3vdDC8yBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN77OQiCbsuOkKBmiiBlWgeZjuPeMB8GA1UdIwQY
MBaAFFUNTFcdi/v92Po6Fw+Z+zr6tBHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzIt
M2Q0NmNhZjU1NzM4LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzItM2Q0NmNhZjU1NzM4
LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUlaQpYQ
6oBtuVVXrjkiY3eSRENr6KsdsbNnBK5diLkrrGQxkfKRo8gQdkqn86qbN4yR50eq
LBbTi4sN3eB5lg7x08e+nCFy0J06SayvAosEQe5Dt+3ZcpZ5wb1ACRIXJdUkt+e1
Rt8nTmigXWRKBfzXLWVY8rpU3QNdBlYX2Kgq8sApBsHi8IuzcpNjZ5oVEVRJsVsG
klc6Y98ZSKOketBepP5VWYLB5/bvr3rpTTH0bdweG2ta1Mnnha7wzNHyqlRnrNji
ySSBsMy78dRL6PPnIKmZSErB0OsUjwT4LRXHCnJYjLmEG7k3bTOdVdlyZ48BciQG
WaH5Y5iVnGGl7Q==
-----END CERTIFICATE-----
Generated at Sat Oct 31 12:41:26 2026 by rpki-client