Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
File: VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft (raw, json)
Hash identifier: 9JSuX6Ec5TAeiXZUnITVkeNX2xH5YixxLnmm+ldCXno=
Subject key identifier: 50:33:67:95:22:C4:EA:4D:97:A5:45:22:EC:0B:A3:16:4F:6D:DD:D0
Authority key identifier: 54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
Certificate issuer: /CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Certificate serial: 019DCD500B8AC7AC9B423154472BD3931067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
Manifest number: 0800
Signing time: Mon 27 Apr 2026 05:01:08 +0000
Manifest this update: Mon 27 Apr 2026 05:01:08 +0000
Manifest next update: Tue 28 Apr 2026 05:01:08 +0000
Files and hashes: 1: VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl (hash: wgM3aKNU6eYKZqSMN7D4mOJ0YS6IryL6sPI1YY9LB5E=)
2: ygA-wG9tjRbJFuLnohuNyXMjfgQ.roa (hash: mYTcv7dGzDKbqrjt808JcooFhDSFlGdRfp8YaG3pmNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:50:0b:8a:c7:ac:9b:42:31:54:47:2b:d3:93:10:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Validity
Not Before: Apr 27 05:01:08 2026 GMT
Not After : Apr 28 05:01:08 2026 GMT
Subject: CN=5033679522c4ea4d97a54522ec0ba3164f6dddd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fd:c6:53:af:b3:d9:32:3a:47:2a:c1:fd:a7:
27:5d:89:c7:56:99:55:ef:55:7b:65:cc:09:85:d8:
3c:ae:19:ac:8d:18:44:d1:b5:aa:20:e7:aa:40:81:
21:c5:cc:25:92:26:0b:bf:6e:82:23:b9:94:c8:cd:
77:28:f4:46:78:e4:47:f9:d0:b3:d5:83:16:51:2e:
1f:fd:25:32:fb:71:8b:c2:6a:71:f9:84:2e:7f:35:
88:3a:00:4e:19:09:27:52:16:d2:70:52:23:d7:a9:
01:8b:7d:c0:94:3d:16:c8:b4:55:b5:c2:16:99:f7:
81:64:1e:67:c3:5d:62:6e:e4:f5:12:77:c1:fc:ce:
0d:90:72:8e:03:82:e2:8f:95:d0:18:fe:e9:b9:15:
ae:67:1d:b5:cc:cb:b7:13:49:4b:3c:35:ef:ec:76:
fd:de:86:b0:0f:7b:87:df:80:d9:45:3b:4a:a3:13:
e3:d6:da:8a:b4:0f:2c:a8:9f:a7:a7:13:ca:20:08:
0c:93:16:53:76:d6:46:e0:3b:f7:c7:c1:da:27:f1:
18:8a:d5:0c:77:91:af:c4:68:42:d0:69:dd:65:bd:
d3:fd:ad:79:00:4b:8e:f3:2a:75:2e:d5:5f:5b:ed:
3d:47:4e:64:f4:fd:52:06:c0:3e:b6:98:2b:61:d0:
e0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:33:67:95:22:C4:EA:4D:97:A5:45:22:EC:0B:A3:16:4F:6D:DD:D0
X509v3 Authority Key Identifier:
keyid:54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:cd:a1:3b:9b:60:80:54:1c:81:12:6b:ac:e2:e4:46:07:75:
13:1f:4d:bd:81:e6:45:5b:a3:d0:da:fa:08:af:aa:b4:a1:9d:
b9:5a:ae:f4:bc:b0:c6:1a:a4:49:1e:48:f9:23:f3:f3:24:ba:
7d:16:e0:18:58:e0:15:16:97:7f:e9:62:86:64:a9:a6:96:1a:
c3:a1:6d:13:9e:3e:a2:1a:5c:1d:f1:58:35:c1:af:47:a4:34:
47:ed:7a:da:7f:40:7a:ae:ec:2e:90:27:47:e2:f7:55:b6:61:
62:02:4a:75:be:bd:a6:a0:6d:45:a9:2f:c1:53:7d:53:f6:df:
59:78:d6:c2:10:0a:b6:82:77:50:74:f0:ed:e6:f6:7c:4e:03:
25:8c:a2:67:bd:05:8e:b5:8f:90:db:d8:7d:db:5d:bc:10:31:
0a:d6:0f:34:4b:e3:f1:8c:3e:3d:7b:0d:9b:f8:ee:16:88:2e:
15:8a:f3:4c:c4:1d:32:b7:88:96:42:f0:ec:58:15:90:7d:cc:
80:e6:09:3b:eb:86:88:24:cf:db:bc:23:23:92:aa:b7:a7:63:
5e:53:89:d8:93:da:01:08:35:b4:b4:ac:94:6b:43:71:61:ea:
c1:e2:1e:e5:11:1c:70:30:ee:f4:db:fc:2c:16:c8:2f:f7:2b:
ba:b3:0d:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NUAuKx6ybQjFURyvTkxBnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YmJkYjJkOTgwYWMwYTgyN2MwY2M2ZWQwZjkwNjc0OWNi
MmNlYTEwHhcNMjYwNDI3MDUwMTA4WhcNMjYwNDI4MDUwMTA4WjAzMTEwLwYDVQQD
Eyg1MDMzNjc5NTIyYzRlYTRkOTdhNTQ1MjJlYzBiYTMxNjRmNmRkZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v3GU6+z2TI6RyrB/acnXYnHVplV
71V7ZcwJhdg8rhmsjRhE0bWqIOeqQIEhxcwlkiYLv26CI7mUyM13KPRGeORH+dCz
1YMWUS4f/SUy+3GLwmpx+YQufzWIOgBOGQknUhbScFIj16kBi33AlD0WyLRVtcIW
mfeBZB5nw11ibuT1EnfB/M4NkHKOA4Lij5XQGP7puRWuZx21zMu3E0lLPDXv7Hb9
3oawD3uH34DZRTtKoxPj1tqKtA8sqJ+npxPKIAgMkxZTdtZG4Dv3x8HaJ/EYitUM
d5GvxGhC0GndZb3T/a15AEuO8yp1LtVfW+09R05k9P1SBsA+tpgrYdDgYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAzZ5UixOpNl6VFIuwLoxZPbd3QMB8GA1UdIwQY
MBaAFFS72y2YCsCoJ8DMbtD5BnScss6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC80NjJhZTQtZmVkYi00OTQwLTk5ZDQt
ZjM4NTU5YmU4MGU5LzEvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC80NjJhZTQtZmVkYi00OTQwLTk5ZDQtZjM4NTU5YmU4MGU5
LzEvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKc2hO5tg
gFQcgRJrrOLkRgd1Ex9NvYHmRVuj0Nr6CK+qtKGduVqu9LywxhqkSR5I+SPz8yS6
fRbgGFjgFRaXf+lihmSpppYaw6FtE54+ohpcHfFYNcGvR6Q0R+162n9Aeq7sLpAn
R+L3VbZhYgJKdb69pqBtRakvwVN9U/bfWXjWwhAKtoJ3UHTw7eb2fE4DJYyiZ70F
jrWPkNvYfdtdvBAxCtYPNEvj8Yw+PXsNm/juFoguFYrzTMQdMreIlkLw7FgVkH3M
gOYJO+uGiCTP27wjI5Kqt6djXlOJ2JPaAQg1tLSslGtDcWHqweIe5REccDDu9Nv8
LBbIL/crurMN+w==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:54:25 2026 by rpki-client