Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
File: VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft (raw, json)
Hash identifier: IU+z9OsTXN2F6nMDpRurdbMFv8LndCW36S5MXxEH3/k=
Subject key identifier: 35:98:D8:47:67:A9:4F:08:F7:87:2B:DE:D8:C3:34:87:39:5C:47:7D
Authority key identifier: 54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
Certificate issuer: /CN=5420cc313d6913848e00e1ff5782e394c1f60159
Certificate serial: 019EB68ED0B764F12285E8B295D5128AA50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
Manifest number: 015B
Signing time: Thu 11 Jun 2026 12:01:13 +0000
Manifest this update: Thu 11 Jun 2026 12:01:13 +0000
Manifest next update: Fri 12 Jun 2026 12:01:13 +0000
Files and hashes: 1: FEZcGILq0RJkqpR3v0nAOFFCrfU.roa (hash: E1Ip63mxX4LJOavcsggcPzPHjg1eKYsarcFaMSWGofA=)
2: VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl (hash: LieoSJB1uj5HG7dx63vGQ9jiAKfhd5Obra4BZti/7nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:8e:d0:b7:64:f1:22:85:e8:b2:95:d5:12:8a:a5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5420cc313d6913848e00e1ff5782e394c1f60159
Validity
Not Before: Jun 11 12:01:13 2026 GMT
Not After : Jun 12 12:01:13 2026 GMT
Subject: CN=3598d84767a94f08f7872bded8c33487395c477d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:bb:e7:e0:bc:15:f4:09:e9:73:c8:36:02:
78:6d:7f:7c:9a:6c:da:bd:93:3c:84:a3:3f:19:bb:
72:28:d1:e1:53:70:8c:69:74:f6:2c:d9:ae:5a:00:
a5:26:74:3d:f7:34:36:18:e2:91:24:91:14:1d:29:
a4:e8:7f:4b:63:c7:f5:99:d1:81:c5:12:56:e4:1a:
d2:02:cc:42:76:b2:7b:c3:f9:9f:f7:6e:66:ed:29:
0a:41:9d:7e:a0:b3:96:d4:34:95:f8:bf:d6:84:44:
fd:68:c2:47:f3:86:cc:09:46:46:0c:1f:82:d6:08:
9c:e4:2c:ac:e1:c2:07:c1:10:a7:cb:8a:c9:a2:09:
25:3e:8f:e2:86:bd:fc:b6:7a:8a:a7:96:5c:40:ba:
01:01:26:90:c8:50:d9:94:a6:db:c3:25:ce:b6:03:
d5:e4:25:6b:83:ff:0c:ef:80:71:6b:76:98:72:ee:
d1:af:24:b6:34:5f:a1:61:a8:4a:18:38:ec:fd:98:
9a:95:24:18:53:3f:8e:e6:bf:0a:bf:21:24:9b:0f:
c6:19:2f:35:3e:89:04:31:9b:9c:30:ae:73:22:77:
0d:2d:16:e5:93:a7:1c:ad:74:84:6c:2b:57:2b:d0:
af:45:3f:0d:6a:90:fc:db:97:64:a8:83:5a:00:2c:
bf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:98:D8:47:67:A9:4F:08:F7:87:2B:DE:D8:C3:34:87:39:5C:47:7D
X509v3 Authority Key Identifier:
keyid:54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:66:a7:85:3f:d2:99:20:f9:72:92:bd:ff:42:1a:3d:0d:c5:
22:41:29:33:42:7e:d4:44:1f:cf:0e:ce:1f:b3:6c:6c:b4:9d:
38:62:b4:ed:cd:b3:10:12:f7:d2:b7:26:9b:b1:05:d7:b3:eb:
4a:4e:82:4d:ac:83:9c:fb:a7:6c:4f:ce:0e:71:49:c8:9a:7d:
ba:01:43:9b:0e:bd:27:dd:2d:bf:cb:5a:22:88:3b:ae:15:19:
1f:d1:87:25:03:66:7f:cb:03:f0:e0:0a:93:06:1f:78:19:ca:
43:14:b3:86:ca:6e:61:9e:09:e5:5d:36:ad:5a:70:eb:b2:c7:
e3:d9:bc:65:27:5a:3e:7b:1d:d3:84:5a:84:e3:ab:63:df:5c:
97:01:e7:d8:5b:fb:e8:b2:ec:78:c4:95:9f:9b:69:ce:2d:4d:
99:de:fe:61:cb:ea:f3:13:6c:ba:11:59:0a:3b:d8:20:e6:ac:
51:fb:cf:49:b9:80:73:01:e8:ea:45:c0:18:06:d0:c8:6d:ae:
52:17:a3:15:d5:2d:a7:17:84:9a:49:79:81:59:6e:c1:46:31:
0b:bd:82:52:75:94:cc:07:40:de:93:12:4e:08:ce:fd:89:0c:
6c:cf:70:2d:ff:cf:e2:4d:57:2b:2e:b1:31:05:99:f5:7e:15:
ae:32:2c:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62jtC3ZPEiheiyldUSiqUPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MjBjYzMxM2Q2OTEzODQ4ZTAwZTFmZjU3ODJlMzk0YzFm
NjAxNTkwHhcNMjYwNjExMTIwMTEzWhcNMjYwNjEyMTIwMTEzWjAzMTEwLwYDVQQD
EygzNTk4ZDg0NzY3YTk0ZjA4Zjc4NzJiZGVkOGMzMzQ4NzM5NWM0NzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVG75+C8FfQJ6XPINgJ4bX98mmza
vZM8hKM/GbtyKNHhU3CMaXT2LNmuWgClJnQ99zQ2GOKRJJEUHSmk6H9LY8f1mdGB
xRJW5BrSAsxCdrJ7w/mf925m7SkKQZ1+oLOW1DSV+L/WhET9aMJH84bMCUZGDB+C
1gic5Cys4cIHwRCny4rJogklPo/ihr38tnqKp5ZcQLoBASaQyFDZlKbbwyXOtgPV
5CVrg/8M74Bxa3aYcu7RryS2NF+hYahKGDjs/ZialSQYUz+O5r8KvyEkmw/GGS81
PokEMZucMK5zIncNLRblk6ccrXSEbCtXK9CvRT8NapD825dkqINaACy/RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWY2EdnqU8I94cr3tjDNIc5XEd9MB8GA1UdIwQY
MBaAFFQgzDE9aROEjgDh/1eC45TB9gFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkNETU1UMXBFNFNPQU9IX1Y0TGpsTUgyQVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jM2MyNDYtYjg3ZS00MGUwLTkyNDYt
ZjBkNWE5YmU3YzJiLzEvVkNETU1UMXBFNFNPQU9IX1Y0TGpsTUgyQVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jM2MyNDYtYjg3ZS00MGUwLTkyNDYtZjBkNWE5YmU3YzJi
LzEvVkNETU1UMXBFNFNPQU9IX1Y0TGpsTUgyQVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGanhT/S
mSD5cpK9/0IaPQ3FIkEpM0J+1EQfzw7OH7NsbLSdOGK07c2zEBL30rcmm7EF17Pr
Sk6CTayDnPunbE/ODnFJyJp9ugFDmw69J90tv8taIog7rhUZH9GHJQNmf8sD8OAK
kwYfeBnKQxSzhspuYZ4J5V02rVpw67LH49m8ZSdaPnsd04RahOOrY99clwHn2Fv7
6LLseMSVn5tpzi1Nmd7+Ycvq8xNsuhFZCjvYIOasUfvPSbmAcwHo6kXAGAbQyG2u
UhejFdUtpxeEmkl5gVluwUYxC72CUnWUzAdA3pMSTgjO/YkMbM9wLf/P4k1XKy6x
MQWZ9X4VrjIseA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 20:48:34 2026 by rpki-client