Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
File: VHhB7v8gx4sz1BHa5RppKtuJLjE.mft (raw, json)
Hash identifier: gc7yOGi9hDZf0sMP5crWJULnqYGpmxbui09nWTKuyHo=
Subject key identifier: DF:BD:CD:B6:EA:35:BE:D7:7A:42:67:7A:B0:2C:2E:B0:3D:2B:FA:C7
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial: 019DCE99AA3E72DE6D892635E0399E3BBBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
Manifest number: 0DED
Signing time: Mon 27 Apr 2026 11:01:10 +0000
Manifest this update: Mon 27 Apr 2026 11:01:10 +0000
Manifest next update: Tue 28 Apr 2026 11:01:10 +0000
Files and hashes: 1: M-FsfGOycf9jYfp9tqtSOE1tveg.roa (hash: KbWLzZCgilO6OBGCbfqwG+EF0N+c9KwghmXNtRevPUA=)
2: OC1nyRt0bfVZANX8lUlsmij_SRQ.roa (hash: Rdwkl90u1nSZHEd8rY7u8aTFZGWKHVXtuaJS4W++hPQ=)
3: VHhB7v8gx4sz1BHa5RppKtuJLjE.crl (hash: buRK6rPo13VUS96ouaRBFzCwshVCw+7PM/RAPhIPafc=)
4: VdXuk6Srl_KiWlPIXVl9CuQOU5I.roa (hash: LHcWGrhhqmQEefD63qRAeICnBie6NA3TujUcOgPmo8Q=)
5: X8URGrQy5lQVgKZucRbyZdlIJ0A.roa (hash: v3GGPEKUSmn7q4SXBMTsOj2RRQGTLoKv6ZyqiXOL8do=)
6: tEALMFY5mRNnPeI1w2B4fh6s5fw.roa (hash: OpvOgmRGG0JJ9f1GQilIMwIzyL+4wnLk8rAzuKjlbwM=)
7: tM3rrLe-_dhZ0LqNTWbRHwcH0a0.roa (hash: mCMHaaXhfT9VeDu9M4tgELO+5HgeDqSNi4Gr5v6WmTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:aa:3e:72:de:6d:89:26:35:e0:39:9e:3b:bb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
Validity
Not Before: Apr 27 11:01:10 2026 GMT
Not After : Apr 28 11:01:10 2026 GMT
Subject: CN=dfbdcdb6ea35bed77a42677ab02c2eb03d2bfac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:66:73:52:8c:ea:f9:fd:4f:c8:d8:12:ef:
c3:fb:48:e1:60:f1:53:33:54:0d:d5:ad:75:23:2d:
af:50:d4:ff:f6:1c:a6:d8:dd:d2:da:3a:73:7f:fe:
3b:21:a3:b1:79:01:d1:32:46:75:ae:39:cf:f1:4c:
9c:21:e9:04:ac:10:48:f7:6c:92:ce:21:15:07:ef:
64:d6:53:1e:c3:a3:c8:d7:d7:4a:81:d2:5e:99:4c:
71:95:96:51:3d:30:12:f7:fb:56:db:e5:fd:49:7d:
53:ea:cb:47:5d:ce:bf:fa:db:dd:46:73:89:60:25:
ca:ba:7f:3e:6e:1a:d6:a6:fe:fe:68:d9:d9:0e:85:
1b:86:19:e4:29:d3:bd:87:89:b1:5f:67:38:81:a7:
0c:6d:34:09:b6:7b:2c:84:c7:c9:0b:d0:75:db:be:
10:35:16:58:9f:d3:ff:58:2f:d8:50:a0:0c:78:de:
b2:c3:5a:14:31:01:46:b3:12:ba:12:9c:df:7d:70:
39:cb:18:51:01:28:ad:ed:af:11:19:8d:3b:18:19:
94:57:b5:62:63:0c:2d:fa:5f:9a:94:c1:f9:f2:03:
58:ab:9d:9a:49:b8:1d:b0:71:bb:ae:d6:d3:bc:02:
6d:a9:64:cf:bf:bd:cd:14:9e:07:25:6f:3b:30:fe:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BD:CD:B6:EA:35:BE:D7:7A:42:67:7A:B0:2C:2E:B0:3D:2B:FA:C7
X509v3 Authority Key Identifier:
keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2f:87:c5:c5:b8:40:f6:bc:b3:30:76:27:01:88:4a:60:a5:
a2:bc:d6:d0:97:6c:42:06:09:99:cf:03:43:d1:83:d5:e2:04:
c0:d0:b2:77:c6:98:d1:0a:9d:26:1c:3a:0f:79:ff:53:ce:42:
4b:ca:59:3f:f6:0c:4a:fb:58:29:3d:8a:ed:6d:a1:1f:7b:4b:
28:30:39:20:84:72:79:33:f4:4e:5b:e5:96:ca:f8:5f:cc:1e:
4e:59:26:f0:a0:b3:4e:04:98:33:b8:04:18:35:1b:64:c4:a6:
9f:cc:14:e0:6c:d9:ad:13:c1:48:b5:8b:d6:1c:88:eb:50:aa:
84:a7:9f:f4:0f:99:db:11:73:57:5d:02:fb:e3:ca:67:15:d7:
95:e0:c0:3e:c8:20:34:62:e3:5c:28:78:c6:18:0f:cf:55:43:
32:10:d4:c9:35:9a:f8:1e:ec:1e:db:ae:14:f9:02:c7:65:0c:
72:5a:0e:a5:5a:ea:ce:e0:87:45:a7:2e:06:09:59:91:19:db:
c5:77:15:a6:9e:7e:44:27:ac:c9:16:fa:ec:4e:97:f9:76:e9:
45:98:62:07:c5:54:77:0e:52:29:33:0f:66:cc:45:80:07:a0:
19:67:fd:c3:62:8f:88:be:30:f3:cf:ea:b7:2b:9d:f8:48:76:
b6:31:73:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Omao+ct5tiSY14DmeO7v7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Nzg0MWVlZmYyMGM3OGIzM2Q0MTFkYWU1MWE2OTJhZGI4
OTJlMzEwHhcNMjYwNDI3MTEwMTEwWhcNMjYwNDI4MTEwMTEwWjAzMTEwLwYDVQQD
EyhkZmJkY2RiNmVhMzViZWQ3N2E0MjY3N2FiMDJjMmViMDNkMmJmYWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEVmc1KM6vn9T8jYEu/D+0jhYPFT
M1QN1a11Iy2vUNT/9hym2N3S2jpzf/47IaOxeQHRMkZ1rjnP8UycIekErBBI92yS
ziEVB+9k1lMew6PI19dKgdJemUxxlZZRPTAS9/tW2+X9SX1T6stHXc6/+tvdRnOJ
YCXKun8+bhrWpv7+aNnZDoUbhhnkKdO9h4mxX2c4gacMbTQJtnsshMfJC9B1274Q
NRZYn9P/WC/YUKAMeN6yw1oUMQFGsxK6EpzffXA5yxhRASit7a8RGY07GBmUV7Vi
Ywwt+l+alMH58gNYq52aSbgdsHG7rtbTvAJtqWTPv73NFJ4HJW87MP7enQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+9zbbqNb7XekJnerAsLrA9K/rHMB8GA1UdIwQY
MBaAFFR4Qe7/IMeLM9QR2uUaaSrbiS4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmIt
MzY2YmExNzAwZmUwLzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmItMzY2YmExNzAwZmUw
LzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHy+HxcW4
QPa8szB2JwGISmClorzW0JdsQgYJmc8DQ9GD1eIEwNCyd8aY0QqdJhw6D3n/U85C
S8pZP/YMSvtYKT2K7W2hH3tLKDA5IIRyeTP0Tlvllsr4X8weTlkm8KCzTgSYM7gE
GDUbZMSmn8wU4GzZrRPBSLWL1hyI61CqhKef9A+Z2xFzV10C++PKZxXXleDAPsgg
NGLjXCh4xhgPz1VDMhDUyTWa+B7sHtuuFPkCx2UMcloOpVrqzuCHRacuBglZkRnb
xXcVpp5+RCesyRb67E6X+XbpRZhiB8VUdw5SKTMPZsxFgAegGWf9w2KPiL4w88/q
tyud+Eh2tjFzTQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 15:08:47 2026 by rpki-client