Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
File: VLjgSw4aTU46KN8V61hJPnY3frA.mft (raw, json)
Hash identifier: +uweJJBRJv2nNUd1aGwDSmPCsRIfRCbWnxUIf+OxnS4=
Subject key identifier: E5:20:D3:3B:28:A8:1C:28:6F:B1:54:B8:50:D3:ED:C6:8C:46:5F:0C
Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
Certificate issuer: /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Certificate serial: 019D38D3A9CA699698FB13BB4357ACFE815E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:01:28 +0000
Manifest this update: Sun 29 Mar 2026 09:01:28 +0000
Manifest next update: Mon 30 Mar 2026 09:01:28 +0000
Files and hashes: 1: Q56vED3-1_h936Q-ifWJs53c2GY.roa (hash: OY22bFuEd/zv+11Gst6hYDrj07QiCcY3HPOcMh0b7Ks=)
2: VLjgSw4aTU46KN8V61hJPnY3frA.crl (hash: nJg7jIseHqS9UyUSPjO/dTxfFkWRia8+CCjuZdy4W7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a9:ca:69:96:98:fb:13:bb:43:57:ac:fe:81:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Validity
Not Before: Mar 29 09:01:28 2026 GMT
Not After : Mar 30 09:01:28 2026 GMT
Subject: CN=e520d33b28a81c286fb154b850d3edc68c465f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d9:34:88:94:af:86:ee:28:93:90:87:7d:72:
5e:69:51:d5:96:74:33:e0:ca:56:51:26:3d:64:96:
46:43:87:c0:e9:c0:ea:93:0d:57:a0:15:5f:9a:c9:
e3:0b:b7:c6:da:8b:5d:d7:c1:6c:7f:ff:5a:d4:e0:
f5:a0:1c:bc:63:12:8b:a4:c9:3a:2a:6a:c2:6c:fa:
13:f8:e2:6b:48:c6:6c:37:c2:ba:22:0d:c5:34:72:
21:d5:29:26:fe:68:78:78:b6:8f:59:51:56:76:a1:
8c:40:51:52:bf:4d:f7:e0:72:9f:8d:8e:27:73:a8:
5a:ef:a6:41:2a:19:16:f2:e6:78:8a:61:58:dc:8a:
06:65:da:cf:b9:35:7a:7b:a6:9d:03:05:09:b0:65:
ca:4e:8f:de:59:4b:c8:d4:38:3f:79:e4:db:3f:8e:
91:0f:f0:f1:72:6f:a8:8a:bb:d8:f1:c8:72:6b:8b:
80:f7:5c:c0:37:ee:b3:f0:f6:21:04:c3:02:d5:0e:
8a:da:a4:ae:d8:54:db:32:05:f3:59:d1:3b:89:5c:
7f:a9:69:37:3e:31:14:8f:a8:8f:7a:23:03:44:b2:
4f:0d:b1:9e:48:04:d2:24:56:f0:a3:0a:b9:a3:a7:
58:da:0f:78:1a:49:b7:27:23:df:70:ed:e6:bb:f5:
bd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:20:D3:3B:28:A8:1C:28:6F:B1:54:B8:50:D3:ED:C6:8C:46:5F:0C
X509v3 Authority Key Identifier:
keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:49:d7:ba:53:a3:b3:d1:10:9d:03:97:99:31:bc:c4:0d:75:
8a:0f:2a:1a:61:4b:f7:c2:e1:f6:83:80:91:c3:8f:3b:ca:62:
9d:43:85:00:95:3a:a8:28:c3:12:de:09:fd:34:1c:00:40:ef:
92:64:32:fc:0f:27:c0:f5:ba:a4:64:2f:2b:5b:c0:37:11:da:
26:4e:82:04:9a:ac:f4:77:cb:35:75:74:90:38:86:72:e8:a8:
2f:89:02:6f:bb:3b:29:c4:ef:77:28:34:93:26:0b:55:d3:46:
a6:fe:dc:e1:51:13:7a:c2:2a:2d:ef:fa:bb:29:b0:0a:56:04:
35:e8:81:1a:91:c4:56:41:4d:92:3c:45:36:79:82:c5:92:0d:
11:03:74:e1:d6:01:ee:e1:56:bc:b5:c2:8b:f7:0d:2d:4a:41:
46:05:f2:70:60:ff:7e:3d:0e:5a:56:ed:6f:20:0b:f3:8a:a5:
5d:44:d7:cf:30:e1:99:18:86:a5:f5:af:d4:43:6a:53:bc:63:
8a:6b:5a:aa:0d:5c:6d:56:cf:3c:9a:51:20:27:14:49:30:ce:
3a:c5:be:bf:97:fc:9d:ea:ca:7c:90:31:1b:45:9f:ac:6e:10:
02:4b:d3:ef:4f:3d:1c:68:79:2b:83:69:06:3a:76:65:af:1f:
38:c6:b2:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0406nKaZaY+xO7Q1es/oFeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjhlMDRiMGUxYTRkNGUzYTI4ZGYxNWViNTg0OTNlNzYz
NzdlYjAwHhcNMjYwMzI5MDkwMTI4WhcNMjYwMzMwMDkwMTI4WjAzMTEwLwYDVQQD
EyhlNTIwZDMzYjI4YTgxYzI4NmZiMTU0Yjg1MGQzZWRjNjhjNDY1ZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Nk0iJSvhu4ok5CHfXJeaVHVlnQz
4MpWUSY9ZJZGQ4fA6cDqkw1XoBVfmsnjC7fG2otd18Fsf/9a1OD1oBy8YxKLpMk6
KmrCbPoT+OJrSMZsN8K6Ig3FNHIh1Skm/mh4eLaPWVFWdqGMQFFSv0334HKfjY4n
c6ha76ZBKhkW8uZ4imFY3IoGZdrPuTV6e6adAwUJsGXKTo/eWUvI1Dg/eeTbP46R
D/Dxcm+oirvY8chya4uA91zAN+6z8PYhBMMC1Q6K2qSu2FTbMgXzWdE7iVx/qWk3
PjEUj6iPeiMDRLJPDbGeSATSJFbwowq5o6dY2g94Gkm3JyPfcO3mu/W9jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUg0zsoqBwob7FUuFDT7caMRl8MMB8GA1UdIwQY
MBaAFFS44EsOGk1OOijfFetYST52N36wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxqZ1N3NGFUVTQ2S044VjYxaEpQblkzZnJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iNzJiOTctZjlhNS00NDg2LWFhYWIt
NjM5MTZmN2YxNzRiLzEvVkxqZ1N3NGFUVTQ2S044VjYxaEpQblkzZnJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9iNzJiOTctZjlhNS00NDg2LWFhYWItNjM5MTZmN2YxNzRi
LzEvVkxqZ1N3NGFUVTQ2S044VjYxaEpQblkzZnJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUnXulOj
s9EQnQOXmTG8xA11ig8qGmFL98Lh9oOAkcOPO8pinUOFAJU6qCjDEt4J/TQcAEDv
kmQy/A8nwPW6pGQvK1vANxHaJk6CBJqs9HfLNXV0kDiGcuioL4kCb7s7KcTvdyg0
kyYLVdNGpv7c4VETesIqLe/6uymwClYENeiBGpHEVkFNkjxFNnmCxZINEQN04dYB
7uFWvLXCi/cNLUpBRgXycGD/fj0OWlbtbyAL84qlXUTXzzDhmRiGpfWv1ENqU7xj
imtaqg1cbVbPPJpRICcUSTDOOsW+v5f8nerKfJAxG0WfrG4QAkvT7089HGh5K4Np
Bjp2Za8fOMayQA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:03 2026 by rpki-client