Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
File: VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft (raw, json)
Hash identifier: +DDFjixa0aZMx9R5STw/HnSkNgOXrnCU/MKtWkQJRCQ=
Subject key identifier: 7D:6B:63:78:2F:84:43:37:D7:1F:F2:FB:1C:ED:49:84:DA:2F:7F:05
Authority key identifier: 54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
Certificate issuer: /CN=5420cc313d6913848e00e1ff5782e394c1f60159
Certificate serial: 01A175826DF9DF55E06DF1184FF6E004C812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
Manifest number: 02C7
Signing time: Mon 26 Oct 2026 00:00:44 +0000
Manifest this update: Mon 26 Oct 2026 00:00:44 +0000
Manifest next update: Tue 27 Oct 2026 00:00:44 +0000
Files and hashes: 1: FEZcGILq0RJkqpR3v0nAOFFCrfU.roa (hash: E1Ip63mxX4LJOavcsggcPzPHjg1eKYsarcFaMSWGofA=)
2: VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl (hash: 0lmUJYOy+djENe0w8UawQdG3RG64535FsQ0NakHz/7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:82:6d:f9:df:55:e0:6d:f1:18:4f:f6:e0:04:c8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5420cc313d6913848e00e1ff5782e394c1f60159
Validity
Not Before: Oct 26 00:00:44 2026 GMT
Not After : Oct 27 00:00:44 2026 GMT
Subject: CN=7d6b63782f844337d71ff2fb1ced4984da2f7f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:86:85:f0:16:21:cf:c3:39:43:29:d7:6f:
90:58:b0:49:e2:ce:5a:9e:57:cb:ff:83:61:fd:c7:
6b:06:62:69:94:8d:78:8c:fb:ce:c0:e6:10:1e:30:
fe:db:69:51:3d:fb:4c:61:83:8c:76:8b:c8:1c:08:
b2:75:fa:9d:de:0e:16:98:e5:84:9f:15:5d:77:00:
9e:28:52:e4:ca:2e:99:97:7a:45:0b:c2:26:95:15:
5b:76:f7:a5:a6:69:4d:10:c7:3f:f7:11:b0:9c:ff:
98:71:f9:dc:3a:6a:1e:63:97:66:4a:38:38:8e:bd:
2a:73:e9:8e:14:e5:f8:35:fa:a2:b2:63:39:1a:5c:
b3:60:c1:19:aa:e1:66:f2:a4:37:91:64:7e:77:06:
46:c0:3b:58:61:cd:d7:8c:c1:99:a8:87:fa:1c:83:
51:fb:42:e3:e7:8c:89:50:28:44:9b:9a:5e:65:80:
3a:38:c7:fb:85:6a:ba:19:84:1a:2b:39:74:5e:8f:
47:12:06:6d:e2:f0:42:dd:3c:4f:46:a1:4f:77:5c:
1b:e6:b5:40:8a:20:aa:e3:47:98:11:99:e2:54:82:
72:d6:b9:20:a0:6f:c5:00:50:59:f6:ea:90:c4:2c:
62:ad:71:4c:bd:38:7b:8e:24:38:28:b8:ef:7d:2a:
50:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6B:63:78:2F:84:43:37:D7:1F:F2:FB:1C:ED:49:84:DA:2F:7F:05
X509v3 Authority Key Identifier:
keyid:54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:77:48:aa:d3:42:7f:ef:1e:d0:40:47:79:5e:81:e9:03:27:
6a:79:9a:b3:76:f1:a4:e6:95:8c:16:d4:ad:65:d0:84:05:f5:
ae:6c:69:fc:72:c8:08:6e:ce:da:13:aa:4b:d7:33:58:c8:08:
1d:dd:01:e4:95:6f:be:bb:37:9b:d7:41:6e:9b:63:7b:c2:8c:
81:86:b3:1d:11:b7:11:61:f6:a7:16:e8:9c:0a:ff:ea:3f:ea:
60:2e:ea:0e:7d:fc:5d:50:5c:c2:8b:89:87:15:ac:34:45:61:
7b:bd:89:f8:51:08:ba:03:0c:11:14:62:b8:95:67:ce:74:75:
cf:e5:5d:77:3f:b7:65:71:bb:10:81:5b:0a:17:91:70:e7:0b:
b7:2a:9a:96:c3:ad:8a:81:49:7c:b7:a3:1d:24:6f:85:8d:56:
6b:0d:c7:b0:8e:e5:d5:a0:5c:8b:84:e0:dd:b1:6a:46:06:f5:
db:16:fa:e5:76:cc:9f:04:ed:a4:d0:68:30:0d:6e:d8:25:da:
57:cf:1e:e5:5e:f1:29:fd:03:ee:ea:f5:ba:da:6d:cc:b5:40:
8e:04:27:1c:56:55:c4:0a:bd:d2:31:0b:d8:4e:6d:08:f7:7e:
1b:1d:08:19:20:0a:92:e1:9c:7a:25:72:4b:ec:b9:2b:2f:86:
aa:41:1c:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF1gm3531XgbfEYT/bgBMgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MjBjYzMxM2Q2OTEzODQ4ZTAwZTFmZjU3ODJlMzk0YzFm
NjAxNTkwHhcNMjYxMDI2MDAwMDQ0WhcNMjYxMDI3MDAwMDQ0WjAzMTEwLwYDVQQD
Eyg3ZDZiNjM3ODJmODQ0MzM3ZDcxZmYyZmIxY2VkNDk4NGRhMmY3ZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWGGhfAWIc/DOUMp12+QWLBJ4s5a
nlfL/4Nh/cdrBmJplI14jPvOwOYQHjD+22lRPftMYYOMdovIHAiydfqd3g4WmOWE
nxVddwCeKFLkyi6Zl3pFC8ImlRVbdvelpmlNEMc/9xGwnP+YcfncOmoeY5dmSjg4
jr0qc+mOFOX4NfqismM5GlyzYMEZquFm8qQ3kWR+dwZGwDtYYc3XjMGZqIf6HINR
+0Lj54yJUChEm5peZYA6OMf7hWq6GYQaKzl0Xo9HEgZt4vBC3TxPRqFPd1wb5rVA
iiCq40eYEZniVIJy1rkgoG/FAFBZ9uqQxCxirXFMvTh7jiQ4KLjvfSpQDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1rY3gvhEM31x/y+xztSYTaL38FMB8GA1UdIwQY
MBaAFFQgzDE9aROEjgDh/1eC45TB9gFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkNETU1UMXBFNFNPQU9IX1Y0TGpsTUgyQVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jM2MyNDYtYjg3ZS00MGUwLTkyNDYt
ZjBkNWE5YmU3YzJiLzEvVkNETU1UMXBFNFNPQU9IX1Y0TGpsTUgyQVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jM2MyNDYtYjg3ZS00MGUwLTkyNDYtZjBkNWE5YmU3YzJi
LzEvVkNETU1UMXBFNFNPQU9IX1Y0TGpsTUgyQVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXdIqtNC
f+8e0EBHeV6B6QMnanmas3bxpOaVjBbUrWXQhAX1rmxp/HLICG7O2hOqS9czWMgI
Hd0B5JVvvrs3m9dBbptje8KMgYazHRG3EWH2pxbonAr/6j/qYC7qDn38XVBcwouJ
hxWsNEVhe72J+FEIugMMERRiuJVnznR1z+Vddz+3ZXG7EIFbCheRcOcLtyqalsOt
ioFJfLejHSRvhY1Waw3HsI7l1aBci4Tg3bFqRgb12xb65XbMnwTtpNBoMA1u2CXa
V88e5V7xKf0D7ur1utptzLVAjgQnHFZVxAq90jEL2E5tCPd+Gx0IGSAKkuGceiVy
S+y5Ky+GqkEcHg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 09:55:33 2026 by rpki-client