Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
File: VwFSjCouLEaRPAsoyjVw84gPGlY.mft (raw, json)
Hash identifier: gSGB+lupmtSiMgm3OCNdYMlKP8Zbg/Z6DhewnsLGB5o=
Subject key identifier: 94:28:CB:94:79:7C:3E:93:04:ED:21:4E:E2:83:90:06:FE:CF:55:8E
Authority key identifier: 57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
Certificate issuer: /CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Certificate serial: 019D3865C6FC52837D22349AA340748B48F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
Manifest number: 0C9D
Signing time: Sun 29 Mar 2026 07:01:27 +0000
Manifest this update: Sun 29 Mar 2026 07:01:27 +0000
Manifest next update: Mon 30 Mar 2026 07:01:27 +0000
Files and hashes: 1: 4tnEl1SMuQMQMWTOXvpKPQW7cfw.roa (hash: kx51H4YiIMkrkv3bmKTZf2aC2hnzQeWD1CDbPstHJs0=)
2: VwFSjCouLEaRPAsoyjVw84gPGlY.crl (hash: TC9oByrT7B7oOG4q801id9uIvNQCMw+ZkyAWqUVk9PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c6:fc:52:83:7d:22:34:9a:a3:40:74:8b:48:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Validity
Not Before: Mar 29 07:01:27 2026 GMT
Not After : Mar 30 07:01:27 2026 GMT
Subject: CN=9428cb94797c3e9304ed214ee2839006fecf558e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:b0:0a:c9:3e:e6:70:1c:5c:36:c7:20:d0:
c5:2f:7a:ca:a8:ab:97:18:aa:82:cd:1c:f2:b0:da:
d7:de:ec:41:36:49:60:05:f2:4b:7a:78:51:58:8b:
69:c8:46:18:76:c6:69:c2:e7:09:a2:f4:f1:83:b0:
30:c3:bc:40:c9:95:51:2d:15:13:e6:ca:66:19:44:
5d:de:43:5c:a4:a8:59:11:c9:6b:2a:76:de:b6:83:
93:31:b3:74:28:77:70:ff:cd:fe:85:b0:9e:b1:18:
91:69:d8:52:0e:cf:d8:ea:c8:71:4e:0a:74:a8:f0:
c3:5a:9f:db:b8:4f:25:b1:0a:80:e8:2c:d0:96:81:
81:67:a1:8a:3a:ee:7f:d4:1e:b5:a9:e3:5d:ea:67:
23:f6:27:56:74:cc:f6:de:a0:5c:d2:97:2e:1f:59:
78:f9:47:0f:4b:cf:28:6d:ff:17:1f:e8:ad:f9:5e:
68:ec:4a:e0:03:2b:77:17:95:45:7a:d6:39:30:82:
93:d3:8e:4b:df:a0:ed:58:35:ac:ae:af:46:58:35:
c2:ad:ef:aa:9f:88:76:76:66:72:0e:be:58:2d:66:
57:41:26:eb:78:71:b7:9a:71:65:5c:64:2e:b7:d4:
67:64:5b:69:a0:b3:9e:d0:30:ce:e8:ad:c7:00:a1:
98:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:28:CB:94:79:7C:3E:93:04:ED:21:4E:E2:83:90:06:FE:CF:55:8E
X509v3 Authority Key Identifier:
keyid:57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:56:09:44:0b:69:a0:71:9c:cf:ff:5e:f8:1e:a2:5f:ad:02:
1a:5d:49:f6:45:91:59:e2:02:b7:46:24:f7:49:a7:f7:59:9c:
5b:39:f0:07:32:a9:d9:01:24:37:21:5f:ea:21:3e:43:d3:ed:
74:8f:54:d1:9a:e8:5b:24:43:c5:6e:78:86:40:23:c3:81:be:
d2:71:a1:bc:65:78:66:cf:1d:e5:a0:4a:e4:a9:b1:8a:51:69:
d9:c8:0e:9a:d1:20:45:44:99:ed:36:80:69:74:ee:85:41:72:
2b:4d:cb:31:0d:76:d0:e9:93:86:c0:58:71:19:5e:bb:19:bf:
52:1c:db:6c:d8:d9:36:92:5a:4e:c4:00:6e:d9:26:de:a4:5d:
d7:b0:b4:a2:c4:5a:9a:21:08:cc:c2:f1:a8:00:66:a8:49:e3:
84:73:22:a7:b1:5a:64:9b:45:fb:78:46:f8:bc:0c:12:b1:9f:
54:67:75:10:79:42:07:bd:70:a2:a4:38:5f:23:9d:e8:d5:cd:
63:be:e6:03:73:dd:4e:59:33:1c:da:79:78:7a:8f:98:80:a5:
3c:f4:44:45:be:cb:b3:35:5a:34:0b:d5:9d:80:64:24:78:cd:
c8:c2:bf:9b:25:22:21:08:b6:c3:f8:bc:80:94:d5:ae:d7:22:
85:61:1c:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zcb8UoN9IjSao0B0i0jzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MDE1MjhjMmEyZTJjNDY5MTNjMGIyOGNhMzU3MGYzODgw
ZjFhNTYwHhcNMjYwMzI5MDcwMTI3WhcNMjYwMzMwMDcwMTI3WjAzMTEwLwYDVQQD
Eyg5NDI4Y2I5NDc5N2MzZTkzMDRlZDIxNGVlMjgzOTAwNmZlY2Y1NThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBGwCsk+5nAcXDbHINDFL3rKqKuX
GKqCzRzysNrX3uxBNklgBfJLenhRWItpyEYYdsZpwucJovTxg7Aww7xAyZVRLRUT
5spmGURd3kNcpKhZEclrKnbetoOTMbN0KHdw/83+hbCesRiRadhSDs/Y6shxTgp0
qPDDWp/buE8lsQqA6CzQloGBZ6GKOu5/1B61qeNd6mcj9idWdMz23qBc0pcuH1l4
+UcPS88obf8XH+it+V5o7ErgAyt3F5VFetY5MIKT045L36DtWDWsrq9GWDXCre+q
n4h2dmZyDr5YLWZXQSbreHG3mnFlXGQut9RnZFtpoLOe0DDO6K3HAKGYpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQoy5R5fD6TBO0hTuKDkAb+z1WOMB8GA1UdIwQY
MBaAFFcBUowqLixGkTwLKMo1cPOIDxpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVndGU2pDb3VMRWFSUEFzb3lqVnc4NGdQR2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hNDFjNmQtZjE0Mi00YzI1LTg5OTct
NjNmYWUzODlhNGRiLzEvVndGU2pDb3VMRWFSUEFzb3lqVnc4NGdQR2xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9hNDFjNmQtZjE0Mi00YzI1LTg5OTctNjNmYWUzODlhNGRi
LzEvVndGU2pDb3VMRWFSUEFzb3lqVnc4NGdQR2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlYJRAtp
oHGcz/9e+B6iX60CGl1J9kWRWeICt0Yk90mn91mcWznwBzKp2QEkNyFf6iE+Q9Pt
dI9U0ZroWyRDxW54hkAjw4G+0nGhvGV4Zs8d5aBK5KmxilFp2cgOmtEgRUSZ7TaA
aXTuhUFyK03LMQ120OmThsBYcRleuxm/UhzbbNjZNpJaTsQAbtkm3qRd17C0osRa
miEIzMLxqABmqEnjhHMip7FaZJtF+3hG+LwMErGfVGd1EHlCB71woqQ4XyOd6NXN
Y77mA3PdTlkzHNp5eHqPmIClPPRERb7LszVaNAvVnYBkJHjNyMK/myUiIQi2w/i8
gJTVrtcihWEcyA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:28 2026 by rpki-client