Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.mft
File: VdODtoo-r7MMJ7oMTGnworlQ3MU.mft (raw, json)
Hash identifier: W+ZpkggDJEu0XtrlLvbopvRr2BQOUsP4bhvW5LVQn3U=
Subject key identifier: 44:E9:E6:64:37:34:B3:DA:CE:AE:FF:EC:03:8D:F4:9A:9C:7E:54:07
Authority key identifier: 55:D3:83:B6:8A:3E:AF:B3:0C:27:BA:0C:4C:69:F0:A2:B9:50:DC:C5
Certificate issuer: /CN=55d383b68a3eafb30c27ba0c4c69f0a2b950dcc5
Certificate serial: 019D37C005A8B6C44CE306E2C1BBD0D6C683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdODtoo-r7MMJ7oMTGnworlQ3MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.mft
Manifest number: 0211
Signing time: Sun 29 Mar 2026 04:00:24 +0000
Manifest this update: Sun 29 Mar 2026 04:00:24 +0000
Manifest next update: Mon 30 Mar 2026 04:00:24 +0000
Files and hashes: 1: IAxvCVI3UPW5Zbx0MrtTutGSG6g.roa (hash: R+3F/4+eKMn101ut2yIlvIZIHHLS0pZUHBZ5ScNEy3g=)
2: VdODtoo-r7MMJ7oMTGnworlQ3MU.crl (hash: kQtJutXzJrMPzBL/6squ1SOYNB6D24MKZuoTzUxWqQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdODtoo-r7MMJ7oMTGnworlQ3MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:05:a8:b6:c4:4c:e3:06:e2:c1:bb:d0:d6:c6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d383b68a3eafb30c27ba0c4c69f0a2b950dcc5
Validity
Not Before: Mar 29 04:00:24 2026 GMT
Not After : Mar 30 04:00:24 2026 GMT
Subject: CN=44e9e6643734b3daceaeffec038df49a9c7e5407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:16:fd:81:34:25:15:48:ec:9d:8b:22:5c:60:
30:c6:99:c1:3d:77:ea:b1:5c:31:3b:30:b4:b1:fb:
bd:e3:47:1b:eb:40:e9:7c:68:1d:dd:1f:72:93:fd:
88:12:f2:33:27:38:eb:72:88:ee:01:a7:19:11:88:
d1:09:76:20:2d:3e:e0:0f:1b:9e:af:fb:5f:44:df:
47:97:a1:8b:c6:6e:ec:8a:96:cd:ba:0d:81:9c:1d:
7a:ba:61:ff:75:fd:e1:72:4c:9c:83:4d:e5:e2:4b:
86:33:03:a8:2f:da:72:93:78:ea:ab:b8:27:6b:cd:
6b:e6:5c:a2:c9:b6:27:c1:71:a6:73:dd:5e:f0:f9:
64:04:be:64:9e:0d:db:ee:6c:f3:ba:2b:3f:31:fd:
87:fe:27:3e:7a:07:2b:68:0a:af:7e:9f:d9:50:e5:
96:22:2b:11:d3:89:39:46:4d:62:51:67:3b:57:0d:
ad:f9:13:29:56:3b:77:24:79:80:7a:5c:6b:ac:bf:
fc:d5:13:2b:54:e0:1d:f0:a2:07:20:de:86:77:14:
f8:31:72:04:c8:c4:6e:20:c2:8b:7c:1e:da:cf:2a:
d1:36:53:d1:1e:4b:46:05:51:63:8d:05:1f:72:0f:
0f:c4:53:bb:b6:8d:86:fb:78:ed:4a:39:99:82:d7:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E9:E6:64:37:34:B3:DA:CE:AE:FF:EC:03:8D:F4:9A:9C:7E:54:07
X509v3 Authority Key Identifier:
keyid:55:D3:83:B6:8A:3E:AF:B3:0C:27:BA:0C:4C:69:F0:A2:B9:50:DC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdODtoo-r7MMJ7oMTGnworlQ3MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fc:23:06:f3:69:10:c7:4a:8b:f4:3c:47:a3:54:35:d4:5a:
c9:16:7d:76:4d:de:3b:22:37:ed:23:ab:10:84:f8:b6:66:d4:
7c:25:5c:74:bc:cb:bd:3e:77:1b:85:fb:83:9a:ee:f7:d6:2e:
8a:cd:13:80:bf:07:0b:4a:8d:85:df:36:10:b5:90:36:08:5c:
c5:98:18:a6:64:78:9b:c7:8f:ac:c0:b8:3d:60:7c:18:a4:4f:
c4:e0:78:08:11:9c:a3:2d:fb:63:b9:2e:4a:b1:98:29:4c:be:
ff:43:47:19:7f:78:48:5c:21:d6:37:a1:02:6f:a6:fb:4e:37:
3b:7b:8f:e6:2c:ac:8b:2e:c6:ad:d7:99:12:30:48:d1:67:ec:
4b:18:f1:88:ab:d6:36:88:46:f2:0a:27:9c:1d:a0:86:f3:21:
03:c8:2d:ba:9f:9d:4c:09:2e:a1:bd:c7:b8:97:27:8d:40:f4:
cf:00:52:ae:8d:b2:80:71:72:b8:d4:6f:21:76:d3:66:48:bd:
95:d4:8e:85:0a:f7:3a:e1:5b:14:bd:89:7d:71:18:b2:4a:0f:
82:59:b4:81:21:74:d7:f4:e6:40:84:8d:18:4b:91:3f:42:e0:
a1:75:be:b9:d2:ad:ae:91:59:9a:89:e3:5b:c7:aa:f0:20:0d:
4c:a8:8e:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wAWotsRM4wbiwbvQ1saDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZDM4M2I2OGEzZWFmYjMwYzI3YmEwYzRjNjlmMGEyYjk1
MGRjYzUwHhcNMjYwMzI5MDQwMDI0WhcNMjYwMzMwMDQwMDI0WjAzMTEwLwYDVQQD
Eyg0NGU5ZTY2NDM3MzRiM2RhY2VhZWZmZWMwMzhkZjQ5YTljN2U1NDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhb9gTQlFUjsnYsiXGAwxpnBPXfq
sVwxOzC0sfu940cb60DpfGgd3R9yk/2IEvIzJzjrcojuAacZEYjRCXYgLT7gDxue
r/tfRN9Hl6GLxm7sipbNug2BnB16umH/df3hckycg03l4kuGMwOoL9pyk3jqq7gn
a81r5lyiybYnwXGmc91e8PlkBL5kng3b7mzzuis/Mf2H/ic+egcraAqvfp/ZUOWW
IisR04k5Rk1iUWc7Vw2t+RMpVjt3JHmAelxrrL/81RMrVOAd8KIHIN6GdxT4MXIE
yMRuIMKLfB7azyrRNlPRHktGBVFjjQUfcg8PxFO7to2G+3jtSjmZgtfqVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETp5mQ3NLPazq7/7AON9JqcflQHMB8GA1UdIwQY
MBaAFFXTg7aKPq+zDCe6DExp8KK5UNzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmRPRHRvby1yN01NSjdvTVRHbndvcmxRM01VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jZmQ2MDktOThjNy00NGE3LWI0ODAt
MGYwZmMzNTM0N2ZmLzEvVmRPRHRvby1yN01NSjdvTVRHbndvcmxRM01VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9jZmQ2MDktOThjNy00NGE3LWI0ODAtMGYwZmMzNTM0N2Zm
LzEvVmRPRHRvby1yN01NSjdvTVRHbndvcmxRM01VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/wjBvNp
EMdKi/Q8R6NUNdRayRZ9dk3eOyI37SOrEIT4tmbUfCVcdLzLvT53G4X7g5ru99Yu
is0TgL8HC0qNhd82ELWQNghcxZgYpmR4m8ePrMC4PWB8GKRPxOB4CBGcoy37Y7ku
SrGYKUy+/0NHGX94SFwh1jehAm+m+043O3uP5iysiy7GrdeZEjBI0WfsSxjxiKvW
NohG8gonnB2ghvMhA8gtup+dTAkuob3HuJcnjUD0zwBSro2ygHFyuNRvIXbTZki9
ldSOhQr3OuFbFL2JfXEYskoPglm0gSF01/TmQISNGEuRP0LgoXW+udKtrpFZmonj
W8eq8CANTKiOrg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:24 2026 by rpki-client