Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
File: VcQvLHehgijJ-pqzeYQmYNB5KQg.mft (raw, json)
Hash identifier: 39/p1MYXl0nYBtZYRsPDwH1Azfc9SpHApL73ew+VfpY=
Subject key identifier: E9:7C:A4:FB:09:AB:A3:BD:23:5E:E5:76:6E:49:AE:22:0D:AE:24:16
Authority key identifier: 55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
Certificate issuer: /CN=55c42f2c77a18228c9fa9ab379842660d0792908
Certificate serial: 019D37C04913FC51D6BBF02B1C0D52245D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
Manifest number: 0855
Signing time: Sun 29 Mar 2026 04:00:41 +0000
Manifest this update: Sun 29 Mar 2026 04:00:41 +0000
Manifest next update: Mon 30 Mar 2026 04:00:41 +0000
Files and hashes: 1: VcQvLHehgijJ-pqzeYQmYNB5KQg.crl (hash: YCUi/bOPTU3Yfytb5x+LfSDGxVWAJKCjckoPKKvvUuI=)
2: idK5B-35fGEZjMNSUixFte8StUg.roa (hash: o+imY86byxVHx6nQNSFLkdJSif7vfSM95dWpYG48qWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:49:13:fc:51:d6:bb:f0:2b:1c:0d:52:24:5d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c42f2c77a18228c9fa9ab379842660d0792908
Validity
Not Before: Mar 29 04:00:41 2026 GMT
Not After : Mar 30 04:00:41 2026 GMT
Subject: CN=e97ca4fb09aba3bd235ee5766e49ae220dae2416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:6d:b8:38:e6:dd:15:95:44:a0:fa:df:18:
cb:c5:14:77:43:ca:85:b4:da:75:76:d0:af:58:f5:
bb:ab:e6:b3:63:51:79:30:6c:dc:53:d6:bd:c0:8e:
92:d2:b3:8c:4e:de:96:53:0b:af:29:bc:b1:53:a8:
8b:75:b4:3f:fd:d4:df:d1:93:0e:b4:4d:2f:69:84:
fb:09:4c:50:1c:df:3d:30:9b:13:fb:e3:25:de:ea:
3c:e9:b6:46:12:aa:72:65:43:60:77:d6:2b:e3:ea:
05:ff:a3:18:92:a3:53:a3:df:f3:06:57:43:9e:3c:
a8:3e:c5:00:d8:af:14:f3:d4:37:f6:df:9d:e7:75:
e8:62:0a:c2:d7:c7:4b:b3:2e:cb:2f:ee:b5:e3:48:
bf:3e:3c:1a:1e:95:d3:cd:59:fb:e2:5d:75:b8:94:
24:d4:b2:61:21:e6:2a:ba:42:62:67:76:a5:c6:31:
cb:a4:73:41:fb:a4:7e:27:58:ea:50:29:e8:57:d8:
30:e6:8a:de:3b:8e:93:e3:4e:7c:24:9c:32:d4:d0:
e0:fb:4c:2b:e8:4e:fc:69:d2:d6:da:aa:9c:e7:0c:
60:e2:11:37:c4:5e:03:9b:3b:75:04:66:e8:0f:e1:
f5:be:c4:57:12:88:a0:65:ba:1f:fd:1c:18:00:53:
3b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7C:A4:FB:09:AB:A3:BD:23:5E:E5:76:6E:49:AE:22:0D:AE:24:16
X509v3 Authority Key Identifier:
keyid:55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b9:f8:9c:47:43:b1:4c:2e:32:12:1e:91:1b:e4:8c:7a:89:
99:ee:35:9b:43:49:73:58:c0:fb:19:89:29:9d:86:76:ed:c9:
a4:ed:ca:5d:8d:ae:e3:f9:93:ee:4f:35:41:80:eb:eb:f7:b5:
5a:14:d3:98:7e:21:a5:9d:67:29:12:6a:ed:f4:9f:9e:85:5b:
d9:22:a7:88:80:b3:67:f3:4c:7b:b5:87:50:26:8b:d3:42:ca:
b1:26:79:a5:63:11:e4:93:ca:94:d8:4b:fb:ea:0d:72:d0:8c:
6f:90:73:d7:72:e7:6e:12:b1:cb:39:12:a6:9e:d1:ba:c6:6b:
fa:e7:6d:f6:a0:b3:cb:ad:eb:e3:20:5c:a1:09:53:7c:94:a4:
c9:ff:80:3b:47:65:25:4a:59:41:10:72:4b:c0:3d:7f:9b:fc:
b3:47:7d:de:e6:25:5a:48:33:e6:85:f2:47:22:79:6b:2a:9d:
ae:0d:29:c8:61:09:02:7d:7c:ed:93:90:29:ac:ef:58:9e:70:
fb:0f:50:35:91:62:4c:93:ef:9b:02:80:b8:52:5f:85:29:55:
79:b3:dc:26:a1:78:d5:d8:a5:61:26:23:8b:3e:1f:c7:61:f2:
87:15:56:bf:10:f0:04:74:bd:26:64:83:d9:78:7a:2e:d9:8e:
04:79:83:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wEkT/FHWu/ArHA1SJF0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YzQyZjJjNzdhMTgyMjhjOWZhOWFiMzc5ODQyNjYwZDA3
OTI5MDgwHhcNMjYwMzI5MDQwMDQxWhcNMjYwMzMwMDQwMDQxWjAzMTEwLwYDVQQD
EyhlOTdjYTRmYjA5YWJhM2JkMjM1ZWU1NzY2ZTQ5YWUyMjBkYWUyNDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0ptuDjm3RWVRKD63xjLxRR3Q8qF
tNp1dtCvWPW7q+azY1F5MGzcU9a9wI6S0rOMTt6WUwuvKbyxU6iLdbQ//dTf0ZMO
tE0vaYT7CUxQHN89MJsT++Ml3uo86bZGEqpyZUNgd9Yr4+oF/6MYkqNTo9/zBldD
njyoPsUA2K8U89Q39t+d53XoYgrC18dLsy7LL+6140i/PjwaHpXTzVn74l11uJQk
1LJhIeYqukJiZ3alxjHLpHNB+6R+J1jqUCnoV9gw5oreO46T4058JJwy1NDg+0wr
6E78adLW2qqc5wxg4hE3xF4Dmzt1BGboD+H1vsRXEoigZbof/RwYAFM7BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOl8pPsJq6O9I17ldm5JriINriQWMB8GA1UdIwQY
MBaAFFXELyx3oYIoyfqas3mEJmDQeSkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmNRdkxIZWhnaWpKLXBxemVZUW1ZTkI1S1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83MzE1MWQtYjExYy00MWM1LTllYmUt
MDA3Y2Y2NmM2ZjM5LzEvVmNRdkxIZWhnaWpKLXBxemVZUW1ZTkI1S1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My83MzE1MWQtYjExYy00MWM1LTllYmUtMDA3Y2Y2NmM2ZjM5
LzEvVmNRdkxIZWhnaWpKLXBxemVZUW1ZTkI1S1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbn4nEdD
sUwuMhIekRvkjHqJme41m0NJc1jA+xmJKZ2Gdu3JpO3KXY2u4/mT7k81QYDr6/e1
WhTTmH4hpZ1nKRJq7fSfnoVb2SKniICzZ/NMe7WHUCaL00LKsSZ5pWMR5JPKlNhL
++oNctCMb5Bz13LnbhKxyzkSpp7RusZr+udt9qCzy63r4yBcoQlTfJSkyf+AO0dl
JUpZQRByS8A9f5v8s0d93uYlWkgz5oXyRyJ5ayqdrg0pyGEJAn187ZOQKazvWJ5w
+w9QNZFiTJPvmwKAuFJfhSlVebPcJqF41dilYSYjiz4fx2HyhxVWvxDwBHS9JmSD
2Xh6LtmOBHmDGg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:22 2026 by rpki-client