Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
File: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json)
Hash identifier: vcNMH7fLtGkZgxgPizr2F3VINcauGgN9MA0OgZJn9/k=
Subject key identifier: CD:73:E7:43:45:1E:08:F1:87:CD:B8:4F:4F:EA:35:59:C5:BB:B8:24
Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Certificate issuer: /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Certificate serial: 01A08DC4859A95485E41E9FEB5AEC63F011A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
Manifest number: 1698
Signing time: Fri 11 Sep 2026 00:01:01 +0000
Manifest this update: Fri 11 Sep 2026 00:01:01 +0000
Manifest next update: Sat 12 Sep 2026 00:01:01 +0000
Files and hashes: 1: 1-Lmc2QhlCIt9CEaFf21G5Ih9JAk.roa (hash: 6iVNvhe10i4KO9IhQfbWbvNH2WkwCCWrKbOYcXZWq7g=)
2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: 0oi6aDfUMc23j0qaogl95uUyrfBj2Hrq6N8wTx0odDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:85:9a:95:48:5e:41:e9:fe:b5:ae:c6:3f:01:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Validity
Not Before: Sep 11 00:01:01 2026 GMT
Not After : Sep 12 00:01:01 2026 GMT
Subject: CN=cd73e743451e08f187cdb84f4fea3559c5bbb824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:98:f2:1f:ef:22:eb:da:fc:7b:d5:26:e3:
d2:90:6b:a8:a9:89:98:1b:d6:6e:16:d2:2f:cf:71:
2e:7f:c8:ab:a5:f4:02:93:4b:cc:ae:08:f6:95:34:
b0:53:96:da:a8:70:34:63:66:24:eb:29:d0:99:96:
8a:0b:cf:18:87:92:4b:d8:92:6f:46:b1:66:10:77:
1a:07:91:6b:c9:ba:87:2e:74:ec:da:6a:8c:f2:eb:
b4:c2:a6:d3:8e:81:24:0c:dc:c2:38:b2:09:8a:09:
a4:22:b5:5b:eb:1e:e8:55:66:00:65:18:7c:95:3a:
7f:68:31:86:99:5c:ca:e9:a5:e9:77:65:0d:02:98:
ad:eb:81:85:61:a5:a0:55:68:94:e1:57:19:90:47:
2f:e5:4e:1e:ca:e2:05:94:cf:c7:89:82:55:0f:f7:
19:8e:63:dc:df:92:df:3b:7a:64:ae:6a:18:43:61:
c0:a9:bd:66:17:35:64:db:6e:e8:ef:0f:80:f1:3c:
f8:12:34:ec:1a:c3:c0:c5:d0:cd:42:db:6f:05:69:
0c:6d:96:05:e0:32:e2:e2:d3:42:9d:a3:2e:73:8d:
54:85:11:17:51:be:12:ea:f4:28:4b:ed:93:05:41:
a2:ca:97:e2:f1:b7:d5:08:31:0c:4f:f7:78:d1:1a:
2a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:73:E7:43:45:1E:08:F1:87:CD:B8:4F:4F:EA:35:59:C5:BB:B8:24
X509v3 Authority Key Identifier:
keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ea:ba:99:c4:98:2a:40:d1:20:9f:db:7d:be:5d:71:5f:44:
cc:51:1c:9f:61:08:d3:a2:9f:a8:13:28:ef:7e:cb:c2:76:c9:
d4:68:6c:ab:ea:be:bd:8d:44:e3:6a:4f:20:a4:5a:3d:14:82:
38:35:e8:e8:e5:e7:7a:8d:16:99:76:c7:02:b5:25:8c:da:f9:
fc:ab:f8:b4:f9:e9:91:12:13:44:b3:9d:31:e5:e9:2a:e6:a5:
6a:ef:a7:82:99:99:f3:1f:3b:d2:83:2d:89:39:57:90:38:4e:
c4:43:7b:6b:61:2a:d2:a3:f9:91:2c:04:c1:31:8c:67:45:5b:
71:02:de:4f:8b:1f:da:fc:37:4c:ae:60:7f:2a:36:be:14:7c:
ba:93:50:15:eb:b0:3d:d6:05:7d:d9:c8:9c:7d:82:b8:c5:87:
fe:f1:e2:bd:d3:e8:19:b8:7c:e8:f6:02:d2:1f:3f:89:26:5d:
f4:1b:ae:35:51:bd:7a:5e:ca:50:40:d0:bc:5c:19:38:88:af:
59:82:3f:0a:25:b4:95:39:fe:f1:ac:7e:1d:41:40:4b:c4:87:
1d:ce:b5:6b:6f:58:5e:96:b2:71:73:b3:3b:f4:9b:72:02:05:
9e:77:07:f1:2d:0a:7f:f8:b8:82:08:1c:49:e4:99:73:c5:e5:
c6:5b:de:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNxIWalUheQen+ta7GPwEaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MGQ0YzU3MWQ4YmZiZmRkOGZhM2ExNzBmOTlmYjNhZmFi
NDExZDEwHhcNMjYwOTExMDAwMTAxWhcNMjYwOTEyMDAwMTAxWjAzMTEwLwYDVQQD
EyhjZDczZTc0MzQ1MWUwOGYxODdjZGI4NGY0ZmVhMzU1OWM1YmJiODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoReY8h/vIuva/HvVJuPSkGuoqYmY
G9ZuFtIvz3Euf8irpfQCk0vMrgj2lTSwU5baqHA0Y2Yk6ynQmZaKC88Yh5JL2JJv
RrFmEHcaB5FrybqHLnTs2mqM8uu0wqbTjoEkDNzCOLIJigmkIrVb6x7oVWYAZRh8
lTp/aDGGmVzK6aXpd2UNApit64GFYaWgVWiU4VcZkEcv5U4eyuIFlM/HiYJVD/cZ
jmPc35LfO3pkrmoYQ2HAqb1mFzVk227o7w+A8Tz4EjTsGsPAxdDNQttvBWkMbZYF
4DLi4tNCnaMuc41UhREXUb4S6vQoS+2TBUGiypfi8bfVCDEMT/d40RoqjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1z50NFHgjxh824T0/qNVnFu7gkMB8GA1UdIwQY
MBaAFFUNTFcdi/v92Po6Fw+Z+zr6tBHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzIt
M2Q0NmNhZjU1NzM4LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzItM2Q0NmNhZjU1NzM4
LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuq6mcSY
KkDRIJ/bfb5dcV9EzFEcn2EI06KfqBMo737LwnbJ1Ghsq+q+vY1E42pPIKRaPRSC
ODXo6OXneo0WmXbHArUljNr5/Kv4tPnpkRITRLOdMeXpKualau+ngpmZ8x870oMt
iTlXkDhOxEN7a2Eq0qP5kSwEwTGMZ0VbcQLeT4sf2vw3TK5gfyo2vhR8upNQFeuw
PdYFfdnInH2CuMWH/vHivdPoGbh86PYC0h8/iSZd9BuuNVG9el7KUEDQvFwZOIiv
WYI/CiW0lTn+8ax+HUFAS8SHHc61a29YXpaycXOzO/SbcgIFnncH8S0Kf/i4gggc
SeSZc8Xlxlve3Q==
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:08:24 2026 by rpki-client