Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
File: VTq9CI9YVGJD8CJwIs20e80dfY4.mft (raw, json)
Hash identifier: xQu2XAYRg3OhVyATFvBuY0qNitd9UtiaqckcjtIg1Vw=
Subject key identifier: 26:C6:90:5C:76:87:6B:CB:31:96:C7:85:59:72:FB:66:CA:86:34:A0
Authority key identifier: 55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
Certificate issuer: /CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Certificate serial: 019D3909D239365E21DB1F7D617AF8069E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
Manifest number: 1688
Signing time: Sun 29 Mar 2026 10:00:38 +0000
Manifest this update: Sun 29 Mar 2026 10:00:38 +0000
Manifest next update: Mon 30 Mar 2026 10:00:38 +0000
Files and hashes: 1: VTq9CI9YVGJD8CJwIs20e80dfY4.crl (hash: o2IjpMHvaR4MC/qT3cnLx/vQ1eO5gKiJxR+PTdBEsMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d2:39:36:5e:21:db:1f:7d:61:7a:f8:06:9e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Validity
Not Before: Mar 29 10:00:38 2026 GMT
Not After : Mar 30 10:00:38 2026 GMT
Subject: CN=26c6905c76876bcb3196c7855972fb66ca8634a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fe:1c:e8:0b:90:72:0c:07:fa:74:2c:4b:fd:
6e:ff:70:66:d2:d4:23:66:98:36:f9:83:c1:eb:90:
9f:d7:ec:b7:68:40:c3:b9:6b:8e:f7:f4:45:93:13:
c9:c9:f8:45:aa:9f:9f:23:ed:0a:1f:10:7f:16:f2:
d5:44:b0:00:b4:a7:72:6b:24:22:6b:21:be:75:42:
aa:ab:88:a2:1d:71:b9:28:e9:78:52:88:53:33:e1:
af:d6:aa:9b:e5:2e:de:5b:85:04:5a:4d:e6:85:a6:
d1:bd:f5:02:1e:b0:bc:21:3d:cb:37:7b:a3:d3:96:
7d:79:e1:27:63:e8:71:3f:fe:f2:67:b7:d1:84:71:
53:0f:13:da:bf:6e:70:f8:7f:02:6d:76:26:44:b0:
dd:b9:6b:79:7c:38:af:65:9f:82:01:74:48:7b:8b:
c3:44:30:56:4b:e6:c5:9a:79:81:7e:03:2c:7c:3f:
41:4e:c0:21:e1:5b:13:58:d9:ff:95:da:b5:c7:cc:
53:ea:67:66:94:dd:39:e4:73:e8:d1:47:bb:80:d7:
4c:cc:f8:f1:54:8b:d6:cd:1a:01:fb:4d:29:03:67:
f5:99:9a:d2:21:8b:0c:a7:c6:75:c3:de:d8:a3:6d:
c0:46:ea:3d:fd:16:ed:da:75:63:2f:e2:1e:02:21:
b3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C6:90:5C:76:87:6B:CB:31:96:C7:85:59:72:FB:66:CA:86:34:A0
X509v3 Authority Key Identifier:
keyid:55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f6:58:a2:ea:63:fd:0a:19:89:17:04:37:35:43:d4:59:16:
75:1c:ac:b5:d4:13:ef:34:7b:d3:e4:8d:d4:6c:90:a9:9b:9a:
48:bc:12:33:ee:89:60:69:5e:e1:7a:d1:72:7d:b5:88:18:bc:
aa:e5:57:76:e0:5c:52:be:a9:59:1a:6d:8e:69:55:61:92:bd:
f4:1d:d8:c0:a3:69:12:65:b8:d7:f8:15:86:6a:db:05:63:6b:
1e:c5:71:ab:cb:52:4d:5f:dd:e0:46:54:fa:cc:a7:6f:94:b9:
40:93:7e:ab:a0:c2:d4:22:b1:0f:0d:44:21:7b:f4:09:a6:11:
0d:8b:28:41:3e:a3:0a:45:f3:01:4d:21:ad:37:d3:2e:d3:2a:
34:c5:f5:9f:b7:ba:d2:67:88:5b:06:91:24:43:59:a2:81:4a:
13:0f:49:ad:93:28:98:88:ef:7e:68:7a:eb:61:48:72:b3:19:
ec:2e:fd:84:00:a9:20:f2:a1:b1:ba:c4:0b:b3:00:ac:dc:29:
81:1d:78:96:6e:78:39:86:3e:bd:a1:00:a7:41:ff:a0:ea:40:
76:93:89:a9:b6:04:9a:07:c7:f3:36:1e:fa:68:e4:97:fe:2f:
15:e7:16:b9:37:5a:21:50:d9:d1:9a:fb:2d:f2:9e:25:4b:be:
a8:a0:46:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CdI5Nl4h2x99YXr4Bp40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1M2FiZDA4OGY1ODU0NjI0M2YwMjI3MDIyY2RiNDdiY2Qx
ZDdkOGUwHhcNMjYwMzI5MTAwMDM4WhcNMjYwMzMwMTAwMDM4WjAzMTEwLwYDVQQD
EygyNmM2OTA1Yzc2ODc2YmNiMzE5NmM3ODU1OTcyZmI2NmNhODYzNGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP4c6AuQcgwH+nQsS/1u/3Bm0tQj
Zpg2+YPB65Cf1+y3aEDDuWuO9/RFkxPJyfhFqp+fI+0KHxB/FvLVRLAAtKdyayQi
ayG+dUKqq4iiHXG5KOl4UohTM+Gv1qqb5S7eW4UEWk3mhabRvfUCHrC8IT3LN3uj
05Z9eeEnY+hxP/7yZ7fRhHFTDxPav25w+H8CbXYmRLDduWt5fDivZZ+CAXRIe4vD
RDBWS+bFmnmBfgMsfD9BTsAh4VsTWNn/ldq1x8xT6mdmlN055HPo0Ue7gNdMzPjx
VIvWzRoB+00pA2f1mZrSIYsMp8Z1w97Yo23ARuo9/Rbt2nVjL+IeAiGz/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbGkFx2h2vLMZbHhVly+2bKhjSgMB8GA1UdIwQY
MBaAFFU6vQiPWFRiQ/AicCLNtHvNHX2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQt
ZDU2NmY3M2QzZmIwLzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQtZDU2NmY3M2QzZmIw
LzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/ZYoupj
/QoZiRcENzVD1FkWdRystdQT7zR70+SN1GyQqZuaSLwSM+6JYGle4XrRcn21iBi8
quVXduBcUr6pWRptjmlVYZK99B3YwKNpEmW41/gVhmrbBWNrHsVxq8tSTV/d4EZU
+synb5S5QJN+q6DC1CKxDw1EIXv0CaYRDYsoQT6jCkXzAU0hrTfTLtMqNMX1n7e6
0meIWwaRJENZooFKEw9JrZMomIjvfmh662FIcrMZ7C79hACpIPKhsbrEC7MArNwp
gR14lm54OYY+vaEAp0H/oOpAdpOJqbYEmgfH8zYe+mjkl/4vFecWuTdaIVDZ0Zr7
LfKeJUu+qKBGJA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:09:39 2026 by rpki-client