Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
File: VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json)
Hash identifier: gPvVZI4ldgfBxW9mGLxOt/LHfEKmnFDfKfoZWUbs4KI=
Subject key identifier: 78:8A:6F:7B:3B:BF:6A:D5:06:4C:E3:79:7A:40:CA:1C:3B:F6:89:DD
Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89
Certificate serial: 019DCE62C7E8475BAF7A0CD5A3EB22B6C950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 10:01:13 +0000
Manifest this update: Mon 27 Apr 2026 10:01:13 +0000
Manifest next update: Tue 28 Apr 2026 10:01:13 +0000
Files and hashes: 1: OK14eevAKdeAPJmbmDqPtR4gKY4.roa (hash: pxijgyk5n8Xjg/9qnmaxeKyE+sgbGdhnse8g+yBaAZs=)
2: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: K3IR21oxDE9MzwHNtUWY7fjSfs8lbPp+msGcVyi0Djg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:c7:e8:47:5b:af:7a:0c:d5:a3:eb:22:b6:c9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c54067385a765b1d5617c43331956fb208e89
Validity
Not Before: Apr 27 10:01:13 2026 GMT
Not After : Apr 28 10:01:13 2026 GMT
Subject: CN=788a6f7b3bbf6ad5064ce3797a40ca1c3bf689dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a0:63:75:c4:7c:7e:d5:c0:ed:4b:42:02:26:
b0:fd:b3:c2:d2:01:ca:4c:cf:ab:b5:22:7f:e6:92:
47:6b:bf:e7:05:65:de:6e:53:f3:eb:74:56:e4:0b:
45:ad:26:81:17:37:68:38:df:19:95:b6:8c:d3:73:
34:f3:d9:e2:5c:fc:bb:8b:d5:ee:9e:69:15:b1:e9:
70:ec:cc:38:b8:6a:91:5b:72:d3:d1:8c:00:8d:58:
90:59:e7:e4:3d:25:fa:6e:04:06:c3:92:46:43:1d:
da:60:2b:30:db:01:7c:e9:dc:53:e2:4b:67:ef:3d:
33:9e:df:6a:99:de:ff:eb:58:75:aa:e2:18:66:9a:
b2:2e:fa:50:02:8f:b1:83:75:1c:cc:33:9e:e8:74:
55:ba:1c:7f:66:fc:aa:46:e6:49:71:53:9f:4a:05:
38:4e:1a:ed:ed:2c:19:e4:f1:b2:97:47:48:86:a9:
cd:b9:71:d0:e0:84:a5:1f:ed:7a:33:bc:9d:5a:b5:
b0:33:78:7d:87:4d:ce:29:a3:56:b2:b9:d4:6e:24:
ed:8d:65:86:41:ff:36:cf:99:cb:b3:e7:ed:ad:34:
6d:21:06:f0:ba:78:7f:18:22:e3:49:95:d8:98:d8:
39:e2:6b:11:98:97:93:87:aa:3e:5b:b9:13:b7:0b:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8A:6F:7B:3B:BF:6A:D5:06:4C:E3:79:7A:40:CA:1C:3B:F6:89:DD
X509v3 Authority Key Identifier:
keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:da:8b:e9:cc:4d:38:f2:67:b5:25:57:9c:ef:54:d8:7d:7f:
a5:7d:7c:67:97:46:fe:22:7c:dd:a5:d5:17:54:41:a7:0f:26:
03:68:86:07:7e:f7:ea:c1:ef:b8:c7:b5:99:d5:bd:3a:24:66:
9b:96:02:9a:a2:51:86:77:18:a0:0c:b2:34:b4:36:1e:99:88:
14:fa:1e:14:23:1c:b4:8f:99:dc:d2:ce:34:21:1d:93:3a:b3:
47:68:50:8e:d7:34:90:b1:f0:b9:46:1c:c2:d8:8f:b2:20:5c:
97:ca:1e:38:74:e3:04:dd:f1:9d:e9:25:78:75:d0:b9:e0:8f:
8b:d1:e4:e3:29:4c:5e:e7:77:19:21:44:8f:9e:d7:0e:e7:0a:
7b:7e:e5:53:e4:7d:13:0b:38:fb:c8:7f:53:30:9b:94:23:18:
95:de:a0:bb:db:77:80:72:58:74:00:c2:5e:fd:37:ef:f5:87:
4c:ee:b3:29:b3:32:18:53:2e:6b:c9:3f:ed:d0:c0:b9:fa:7d:
3f:19:34:e5:3d:1c:50:9d:eb:2e:fa:e7:c9:d0:ee:3f:cc:1e:
b3:ef:07:ce:5c:ce:c0:30:44:d1:1a:17:96:2b:d4:fc:30:11:
04:c8:44:7f:a8:84:ac:0f:d8:f3:7f:78:05:62:d1:1c:28:7c:
9b:d7:90:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OYsfoR1uvegzVo+sitslQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2M1NDA2NzM4NWE3NjViMWQ1NjE3YzQzMzMxOTU2ZmIy
MDhlODkwHhcNMjYwNDI3MTAwMTEzWhcNMjYwNDI4MTAwMTEzWjAzMTEwLwYDVQQD
Eyg3ODhhNmY3YjNiYmY2YWQ1MDY0Y2UzNzk3YTQwY2ExYzNiZjY4OWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86BjdcR8ftXA7UtCAiaw/bPC0gHK
TM+rtSJ/5pJHa7/nBWXeblPz63RW5AtFrSaBFzdoON8ZlbaM03M089niXPy7i9Xu
nmkVselw7Mw4uGqRW3LT0YwAjViQWefkPSX6bgQGw5JGQx3aYCsw2wF86dxT4ktn
7z0znt9qmd7/61h1quIYZpqyLvpQAo+xg3UczDOe6HRVuhx/ZvyqRuZJcVOfSgU4
Thrt7SwZ5PGyl0dIhqnNuXHQ4ISlH+16M7ydWrWwM3h9h03OKaNWsrnUbiTtjWWG
Qf82z5nLs+ftrTRtIQbwunh/GCLjSZXYmNg54msRmJeTh6o+W7kTtwtBMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiKb3s7v2rVBkzjeXpAyhw79ondMB8GA1UdIwQY
MBaAFFQ8VAZzhadlsdVhfEMzGVb7II6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82M2ZiZjgtNWNmZi00OTkxLThmMjct
YTQxYTQ4MzRlY2FhLzEvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82M2ZiZjgtNWNmZi00OTkxLThmMjctYTQxYTQ4MzRlY2Fh
LzEvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9qL6cxN
OPJntSVXnO9U2H1/pX18Z5dG/iJ83aXVF1RBpw8mA2iGB3736sHvuMe1mdW9OiRm
m5YCmqJRhncYoAyyNLQ2HpmIFPoeFCMctI+Z3NLONCEdkzqzR2hQjtc0kLHwuUYc
wtiPsiBcl8oeOHTjBN3xnekleHXQueCPi9Hk4ylMXud3GSFEj57XDucKe37lU+R9
Ews4+8h/UzCblCMYld6gu9t3gHJYdADCXv037/WHTO6zKbMyGFMua8k/7dDAufp9
Pxk05T0cUJ3rLvrnydDuP8wes+8HzlzOwDBE0RoXlivU/DARBMhEf6iErA/Y8394
BWLRHCh8m9eQ+w==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:05:42 2026 by rpki-client