Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
File: VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft (raw, json)
Hash identifier: njO0qOuc7S6+2gj5hZ3MZ26hylYzoQCqu0pv2PnRwkU=
Subject key identifier: B8:E4:D1:24:80:61:C3:F1:AD:02:2D:0E:FA:13:40:0A:68:39:01:50
Authority key identifier: 55:16:75:57:89:46:86:EE:0C:87:27:B9:61:CC:4B:92:30:00:5F:38
Certificate issuer: /CN=55167557894686ee0c8727b961cc4b9230005f38
Certificate serial: 01A11F3FA8ECA944231F651DB3CD24C3115F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
Manifest number: 010E
Signing time: Fri 09 Oct 2026 06:00:28 +0000
Manifest this update: Fri 09 Oct 2026 06:00:28 +0000
Manifest next update: Sat 10 Oct 2026 06:00:28 +0000
Files and hashes: 1: VRZ1V4lGhu4Mhye5YcxLkjAAXzg.crl (hash: 7XBpycAN14S3pa55hDW6lUhFKs5UagQqHaamJ7+VGtc=)
2: qjU3-mg-6plX7NPtZmDw0teXaog.roa (hash: yHPCb3W11kzbNlMZG3Tad2k2N/aaDEDcgs/PQrk8prM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:3f:a8:ec:a9:44:23:1f:65:1d:b3:cd:24:c3:11:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55167557894686ee0c8727b961cc4b9230005f38
Validity
Not Before: Oct 9 06:00:28 2026 GMT
Not After : Oct 10 06:00:28 2026 GMT
Subject: CN=b8e4d1248061c3f1ad022d0efa13400a68390150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3f:c3:f8:92:58:6f:e6:41:80:19:6e:14:75:
9c:9e:33:61:f4:10:4d:a0:8f:e9:54:ef:f3:43:7b:
5f:0a:e1:92:fb:62:73:f7:d7:0c:30:a7:b6:58:0f:
57:15:aa:01:80:22:14:5e:26:f9:d0:03:40:10:0c:
6e:56:e6:86:23:aa:d2:67:24:c3:1d:e4:7b:a8:a5:
8f:e7:e5:e9:61:a1:c1:4d:96:9c:f6:13:95:60:24:
b1:3b:c7:87:2b:d9:e4:7a:4d:87:95:77:0c:3b:2e:
31:0f:62:62:f7:5f:8b:dd:87:02:cb:40:05:7e:63:
53:69:ed:09:7a:e3:e6:e7:26:a7:fd:bd:84:66:d6:
5f:a1:a5:75:ce:92:7d:1a:97:83:57:9e:82:87:6d:
87:97:8c:c8:7d:d6:0d:09:ac:1c:5a:3d:83:c6:68:
14:fe:16:7a:09:45:4d:3f:d6:b5:7a:50:7b:94:be:
6e:d1:e5:d0:6e:ce:56:a8:7f:fb:0c:5c:6a:0c:9d:
b9:8a:3a:5e:02:6d:8b:bf:75:84:29:26:74:6f:86:
ad:c1:c8:6d:15:33:e7:2c:36:42:3a:97:dc:b4:7a:
60:5d:fc:d8:99:bb:93:a0:0f:68:6e:04:07:b4:b0:
74:68:7b:68:67:8e:23:80:c2:b6:fd:65:f2:5d:6e:
b1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E4:D1:24:80:61:C3:F1:AD:02:2D:0E:FA:13:40:0A:68:39:01:50
X509v3 Authority Key Identifier:
keyid:55:16:75:57:89:46:86:EE:0C:87:27:B9:61:CC:4B:92:30:00:5F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bd:75:f9:98:d3:59:62:b4:23:45:3f:8f:a2:3b:33:18:41:
30:eb:5f:a5:63:52:99:ce:48:bd:5a:dc:51:06:ee:08:ad:61:
e8:ed:91:60:c2:29:43:a5:29:90:30:69:1a:eb:bc:02:79:37:
e7:2d:df:6f:b8:9e:da:63:6a:ad:b2:b6:e3:fe:b5:97:df:91:
15:1c:d9:f3:ab:81:41:db:46:73:ab:e3:b3:d3:f2:71:a7:42:
d8:c8:de:db:d7:37:b7:74:c4:09:4a:2d:14:ab:3f:8b:f4:82:
cc:c6:6a:17:d5:87:f2:6c:00:87:c3:ab:71:cb:3a:f3:f9:06:
47:a6:cd:65:42:4e:6b:3a:1e:35:21:a7:86:0a:21:42:70:91:
34:bd:9a:c8:19:ba:f5:71:9d:96:38:d3:88:c3:22:2e:17:c3:
10:83:e0:aa:e1:10:38:a9:d3:65:91:63:10:68:89:1e:27:84:
1e:53:ad:60:a3:28:af:2b:c7:ba:1f:1b:70:f5:91:b6:19:8e:
c1:02:bc:94:d9:12:ec:9f:36:0e:a2:7f:e9:13:ee:42:d9:39:
0b:bf:51:a6:5f:9e:fd:84:8a:41:92:d4:65:34:5d:85:14:75:
bd:ac:dd:72:1c:ec:f1:0f:01:67:70:d2:8c:eb:ce:ee:fb:da:
db:34:29:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEfP6jsqUQjH2Uds80kwxFfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MTY3NTU3ODk0Njg2ZWUwYzg3MjdiOTYxY2M0YjkyMzAw
MDVmMzgwHhcNMjYxMDA5MDYwMDI4WhcNMjYxMDEwMDYwMDI4WjAzMTEwLwYDVQQD
EyhiOGU0ZDEyNDgwNjFjM2YxYWQwMjJkMGVmYTEzNDAwYTY4MzkwMTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj/D+JJYb+ZBgBluFHWcnjNh9BBN
oI/pVO/zQ3tfCuGS+2Jz99cMMKe2WA9XFaoBgCIUXib50ANAEAxuVuaGI6rSZyTD
HeR7qKWP5+XpYaHBTZac9hOVYCSxO8eHK9nkek2HlXcMOy4xD2Ji91+L3YcCy0AF
fmNTae0JeuPm5yan/b2EZtZfoaV1zpJ9GpeDV56Ch22Hl4zIfdYNCawcWj2DxmgU
/hZ6CUVNP9a1elB7lL5u0eXQbs5WqH/7DFxqDJ25ijpeAm2Lv3WEKSZ0b4atwcht
FTPnLDZCOpfctHpgXfzYmbuToA9obgQHtLB0aHtoZ44jgMK2/WXyXW6x5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjk0SSAYcPxrQItDvoTQApoOQFQMB8GA1UdIwQY
MBaAFFUWdVeJRobuDIcnuWHMS5IwAF84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlJaMVY0bEdodTRNaHllNVljeExrakFBWHpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80ZTI4MDgtZThmNC00MmE3LWE4Mjct
N2FiY2U2MDBjMjE4LzEvVlJaMVY0bEdodTRNaHllNVljeExrakFBWHpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80ZTI4MDgtZThmNC00MmE3LWE4MjctN2FiY2U2MDBjMjE4
LzEvVlJaMVY0bEdodTRNaHllNVljeExrakFBWHpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATb11+ZjT
WWK0I0U/j6I7MxhBMOtfpWNSmc5IvVrcUQbuCK1h6O2RYMIpQ6UpkDBpGuu8Ank3
5y3fb7ie2mNqrbK24/61l9+RFRzZ86uBQdtGc6vjs9PycadC2Mje29c3t3TECUot
FKs/i/SCzMZqF9WH8mwAh8Orccs68/kGR6bNZUJOazoeNSGnhgohQnCRNL2ayBm6
9XGdljjTiMMiLhfDEIPgquEQOKnTZZFjEGiJHieEHlOtYKMoryvHuh8bcPWRthmO
wQK8lNkS7J82DqJ/6RPuQtk5C79Rpl+e/YSKQZLUZTRdhRR1vazdchzs8Q8BZ3DS
jOvO7vva2zQpww==
-----END CERTIFICATE-----
Generated at Fri Oct 9 16:48:26 2026 by rpki-client