Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
File: VhxILbWscM1l8s5s5ffiW4929Gk.mft (raw, json)
Hash identifier: JHuZ8SCRmGNzByc/5usZ0/ccaysJbee9XEp6TDSxnYo=
Subject key identifier: D5:5E:C6:F4:5B:0F:DE:65:79:81:E0:B5:60:90:39:68:D7:2C:74:FA
Authority key identifier: 56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
Certificate issuer: /CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Certificate serial: 019D3A5476F5DAD8F0B7829D462F690CCAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
Manifest number: 0C65
Signing time: Sun 29 Mar 2026 16:01:47 +0000
Manifest this update: Sun 29 Mar 2026 16:01:47 +0000
Manifest next update: Mon 30 Mar 2026 16:01:47 +0000
Files and hashes: 1: VhxILbWscM1l8s5s5ffiW4929Gk.crl (hash: 3zkB3WTHu0gDJGlhNPe8vPdk+zjbGQ8j0gkCh+4HRjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:76:f5:da:d8:f0:b7:82:9d:46:2f:69:0c:ca:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Validity
Not Before: Mar 29 16:01:47 2026 GMT
Not After : Mar 30 16:01:47 2026 GMT
Subject: CN=d55ec6f45b0fde657981e0b560903968d72c74fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9b:21:ba:fd:ea:d9:78:0d:19:15:9f:0d:56:
b9:af:45:cf:ad:26:40:c8:ca:54:52:38:c0:7a:9d:
92:33:23:2c:2d:32:40:be:4a:f1:09:94:a7:11:db:
14:90:eb:83:64:39:ba:32:60:c4:9e:d6:10:5b:8a:
70:a5:ce:66:40:0a:c0:29:30:0c:ce:06:6e:28:38:
61:b8:5f:7f:aa:8c:1a:d3:91:5f:02:90:aa:5b:ac:
f4:3f:b6:4a:40:ef:1b:1c:59:6d:00:9d:bc:ed:54:
e1:51:64:e1:84:cc:da:00:31:fc:71:64:a4:b6:26:
cf:e8:1c:02:86:a2:40:c7:6d:17:0e:e7:89:c8:03:
fd:20:dc:ba:20:c4:1c:cd:cf:09:d1:07:65:82:04:
c5:91:eb:2e:34:f3:98:c4:f4:9b:91:13:dd:36:e5:
0f:9f:e5:c4:88:3c:9e:ae:e2:a3:1a:47:46:2d:e5:
24:36:3d:34:25:f1:3c:39:21:f1:a9:6a:5f:81:f2:
77:4e:ba:e2:a5:c7:b4:66:8d:2c:df:79:4f:45:32:
5f:58:76:57:a3:ad:ae:96:6d:df:e5:85:1c:20:cd:
2d:ed:11:cf:a9:2a:0d:d2:9e:d2:03:48:8b:95:36:
92:fb:4c:7b:3f:4a:6a:1d:d4:4f:d2:ca:9b:4b:21:
8b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5E:C6:F4:5B:0F:DE:65:79:81:E0:B5:60:90:39:68:D7:2C:74:FA
X509v3 Authority Key Identifier:
keyid:56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:60:f1:6f:65:0c:68:33:0a:b7:c5:03:c1:7c:2b:bb:be:98:
c7:77:31:ca:f6:9c:20:d1:85:3f:36:d0:9d:ed:a6:ac:e9:b6:
64:7b:42:21:b0:f9:12:56:43:2a:60:16:0c:32:4c:e9:27:c9:
d4:43:f8:13:00:da:66:97:18:7b:9f:9f:d7:18:6d:d3:bc:17:
be:08:29:ea:13:3f:3a:6a:73:26:ab:d3:42:c6:70:0f:73:dc:
1a:2a:06:d0:bc:ec:f0:c5:39:e4:a3:01:ce:9c:c9:e9:0f:43:
d3:c8:78:67:45:e9:9f:9b:79:bb:20:27:be:8e:6e:90:07:19:
76:4c:eb:7e:9c:93:99:65:33:36:16:0c:77:b9:9e:90:68:53:
5b:8a:38:c6:b1:62:a4:70:0e:04:d9:f8:af:6b:2c:eb:6a:dc:
38:3e:fe:bd:10:68:d2:9d:11:88:78:6a:38:5c:87:3d:6d:99:
ab:9d:cf:07:9d:8c:04:4b:5e:b0:dd:f1:67:86:d8:f2:cd:49:
99:d6:1d:f4:f2:a9:4b:31:47:d6:9b:84:d4:15:e2:b9:04:2e:
60:ce:06:71:bc:0b:69:f0:15:24:ec:09:df:f6:eb:9b:93:b6:
46:f1:43:f0:0e:dc:22:43:56:62:10:68:9e:fb:88:65:15:6c:
4f:eb:e5:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VHb12tjwt4KdRi9pDMqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MWM0ODJkYjVhYzcwY2Q2NWYyY2U2Y2U1ZjdlMjViOGY3
NmY0NjkwHhcNMjYwMzI5MTYwMTQ3WhcNMjYwMzMwMTYwMTQ3WjAzMTEwLwYDVQQD
EyhkNTVlYzZmNDViMGZkZTY1Nzk4MWUwYjU2MDkwMzk2OGQ3MmM3NGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJshuv3q2XgNGRWfDVa5r0XPrSZA
yMpUUjjAep2SMyMsLTJAvkrxCZSnEdsUkOuDZDm6MmDEntYQW4pwpc5mQArAKTAM
zgZuKDhhuF9/qowa05FfApCqW6z0P7ZKQO8bHFltAJ287VThUWThhMzaADH8cWSk
tibP6BwChqJAx20XDueJyAP9INy6IMQczc8J0QdlggTFkesuNPOYxPSbkRPdNuUP
n+XEiDyeruKjGkdGLeUkNj00JfE8OSHxqWpfgfJ3Trripce0Zo0s33lPRTJfWHZX
o62ulm3f5YUcIM0t7RHPqSoN0p7SA0iLlTaS+0x7P0pqHdRP0sqbSyGL/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVexvRbD95leYHgtWCQOWjXLHT6MB8GA1UdIwQY
MBaAFFYcSC21rHDNZfLObOX34luPdvRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmh4SUxiV3NjTTFsOHM1czVmZmlXNDkyOUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lZGFmOTktNmY5NC00ZTJjLTg2NTQt
MGRmYjg0NzE4ZWRmLzEvVmh4SUxiV3NjTTFsOHM1czVmZmlXNDkyOUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lZGFmOTktNmY5NC00ZTJjLTg2NTQtMGRmYjg0NzE4ZWRm
LzEvVmh4SUxiV3NjTTFsOHM1czVmZmlXNDkyOUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2Dxb2UM
aDMKt8UDwXwru76Yx3cxyvacINGFPzbQne2mrOm2ZHtCIbD5ElZDKmAWDDJM6SfJ
1EP4EwDaZpcYe5+f1xht07wXvggp6hM/OmpzJqvTQsZwD3PcGioG0Lzs8MU55KMB
zpzJ6Q9D08h4Z0Xpn5t5uyAnvo5ukAcZdkzrfpyTmWUzNhYMd7mekGhTW4o4xrFi
pHAOBNn4r2ss62rcOD7+vRBo0p0RiHhqOFyHPW2Zq53PB52MBEtesN3xZ4bY8s1J
mdYd9PKpSzFH1puE1BXiuQQuYM4GcbwLafAVJOwJ3/brm5O2RvFD8A7cIkNWYhBo
nvuIZRVsT+vlbg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:18 2026 by rpki-client