Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
File: VHKdSdKy4Au8soU6dMvA6UZz8BI.mft (raw, json)
Hash identifier: G+lhNPtJk+Hy/l6xFP6GCs5okuNRSGW6Ek97wi0L2Sc=
Subject key identifier: 1C:A1:DB:13:5D:49:3E:20:2A:85:0A:FA:61:5F:16:05:76:A8:8A:0E
Authority key identifier: 54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12
Certificate issuer: /CN=54729d49d2b2e00bbcb2853a74cbc0e94673f012
Certificate serial: 01A17CCEE2310812048E817638ABCCA38AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
Manifest number: 1AA1
Signing time: Tue 27 Oct 2026 10:01:35 +0000
Manifest this update: Tue 27 Oct 2026 10:01:35 +0000
Manifest next update: Wed 28 Oct 2026 10:01:35 +0000
Files and hashes: 1: VHKdSdKy4Au8soU6dMvA6UZz8BI.crl (hash: dVYLZd54A3IpdKg12lDgXTKecvOdYNpdOWfmrxqOoGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:e2:31:08:12:04:8e:81:76:38:ab:cc:a3:8a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54729d49d2b2e00bbcb2853a74cbc0e94673f012
Validity
Not Before: Oct 27 10:01:35 2026 GMT
Not After : Oct 28 10:01:35 2026 GMT
Subject: CN=1ca1db135d493e202a850afa615f160576a88a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0d:32:19:f4:3c:ca:27:68:af:9e:d9:5d:ad:
a2:aa:e3:df:40:21:13:ac:27:e4:ae:6f:d6:db:dd:
2d:9f:de:58:6b:4a:a1:56:00:8e:4d:5f:e3:76:0d:
c5:17:65:64:90:0e:21:9e:c9:eb:56:52:49:7e:8f:
2e:da:e8:ab:8c:aa:09:5f:df:5c:b6:a2:a1:99:a4:
f6:0f:ec:29:95:59:6a:b2:6f:32:0e:a7:f4:95:f4:
ec:1a:4e:ee:f6:1f:60:22:69:4b:49:f5:4e:e6:42:
03:21:2a:1a:7f:ce:d6:c9:40:82:87:95:75:41:b8:
59:31:01:df:fb:e6:ca:8a:dc:aa:39:1b:e3:bd:60:
d6:98:92:33:88:ff:c4:90:e2:09:66:71:72:7b:ff:
23:5e:0d:69:05:79:b5:2e:c2:96:d6:c1:c4:13:ef:
84:e4:f2:44:3f:f0:17:28:fa:cc:db:63:30:25:1f:
05:81:02:72:1c:18:58:24:25:7a:b0:ed:4c:5c:0a:
13:17:21:5d:5d:15:0c:3b:96:e2:e6:c0:96:d2:7b:
7d:19:39:5a:a8:a2:af:ca:54:3e:2f:c0:9b:15:b5:
5b:07:ae:64:7b:36:8d:e7:dc:0f:42:1b:e8:c8:19:
bd:7b:aa:50:24:f8:51:25:c6:24:92:45:db:62:45:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A1:DB:13:5D:49:3E:20:2A:85:0A:FA:61:5F:16:05:76:A8:8A:0E
X509v3 Authority Key Identifier:
keyid:54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bc:ac:cc:01:a0:02:ba:e2:1c:e1:44:bf:0f:34:ac:6e:af:
d4:e1:04:55:43:0d:c0:9c:d3:ea:6c:71:e0:80:dd:3f:bf:f6:
50:32:f8:70:29:b6:2a:e4:6c:d8:98:42:10:9c:fa:dc:64:76:
25:69:07:74:c0:57:41:bb:c6:3c:4f:75:1f:5b:b5:ad:25:13:
81:9c:66:31:ca:bd:42:55:4f:50:5d:bc:6a:55:a5:05:e8:5c:
a6:df:24:dc:7e:1e:74:74:2c:1a:be:49:26:f1:c1:1f:91:97:
08:f6:c5:a4:7b:72:b3:66:9b:65:e8:e8:6c:57:ee:07:f6:5f:
11:c9:47:0b:1f:a1:e3:45:5a:d6:79:24:58:cc:20:9c:3a:73:
78:f9:43:33:55:af:4e:e1:23:e3:3b:c5:7d:59:42:a0:9b:98:
0a:e7:34:35:bf:c0:74:bd:e1:3c:27:58:09:4a:09:a8:f1:ab:
90:60:23:23:4e:78:43:3a:09:4d:59:27:1c:fd:c9:7a:df:5c:
a4:93:a5:b0:a0:9b:bf:12:e0:5c:6d:73:cc:de:54:a3:ac:3a:
ee:17:f2:cd:13:bd:e7:92:71:91:22:9a:cc:81:46:0b:95:d2:
16:df:4b:bd:87:8c:13:fa:bc:25:6f:5d:c5:9c:e8:a3:1b:4c:
68:c6:df:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8zuIxCBIEjoF2OKvMo4q5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzI5ZDQ5ZDJiMmUwMGJiY2IyODUzYTc0Y2JjMGU5NDY3
M2YwMTIwHhcNMjYxMDI3MTAwMTM1WhcNMjYxMDI4MTAwMTM1WjAzMTEwLwYDVQQD
EygxY2ExZGIxMzVkNDkzZTIwMmE4NTBhZmE2MTVmMTYwNTc2YTg4YTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Q0yGfQ8yidor57ZXa2iquPfQCET
rCfkrm/W290tn95Ya0qhVgCOTV/jdg3FF2VkkA4hnsnrVlJJfo8u2uirjKoJX99c
tqKhmaT2D+wplVlqsm8yDqf0lfTsGk7u9h9gImlLSfVO5kIDISoaf87WyUCCh5V1
QbhZMQHf++bKityqORvjvWDWmJIziP/EkOIJZnFye/8jXg1pBXm1LsKW1sHEE++E
5PJEP/AXKPrM22MwJR8FgQJyHBhYJCV6sO1MXAoTFyFdXRUMO5bi5sCW0nt9GTla
qKKvylQ+L8CbFbVbB65kezaN59wPQhvoyBm9e6pQJPhRJcYkkkXbYkU0IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByh2xNdST4gKoUK+mFfFgV2qIoOMB8GA1UdIwQY
MBaAFFRynUnSsuALvLKFOnTLwOlGc/ASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhLZFNkS3k0QXU4c29VNmRNdkE2VVp6OEJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMTVlZjctYjhmZS00NjU5LTk2OTgt
MGZjMDYwMjIwNjI5LzEvVkhLZFNkS3k0QXU4c29VNmRNdkE2VVp6OEJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9hMTVlZjctYjhmZS00NjU5LTk2OTgtMGZjMDYwMjIwNjI5
LzEvVkhLZFNkS3k0QXU4c29VNmRNdkE2VVp6OEJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7yszAGg
ArriHOFEvw80rG6v1OEEVUMNwJzT6mxx4IDdP7/2UDL4cCm2KuRs2JhCEJz63GR2
JWkHdMBXQbvGPE91H1u1rSUTgZxmMcq9QlVPUF28alWlBehcpt8k3H4edHQsGr5J
JvHBH5GXCPbFpHtys2abZejobFfuB/ZfEclHCx+h40Va1nkkWMwgnDpzePlDM1Wv
TuEj4zvFfVlCoJuYCuc0Nb/AdL3hPCdYCUoJqPGrkGAjI054QzoJTVknHP3Jet9c
pJOlsKCbvxLgXG1zzN5Uo6w67hfyzRO955JxkSKazIFGC5XSFt9LvYeME/q8JW9d
xZzooxtMaMbf9Q==
-----END CERTIFICATE-----
Generated at Tue Oct 27 18:15:32 2026 by rpki-client