Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
File: VUexftfcydHsKj_H1eeStZHqYoA.mft (raw, json)
Hash identifier: 1qCxmdsPoMaelJP5/KWa9219EPmP/JGjlLNCRM6siqw=
Subject key identifier: 55:1E:90:3F:0A:88:90:6D:3F:29:9E:4B:C3:60:9C:1B:C5:DE:63:4B
Authority key identifier: 55:47:B1:7E:D7:DC:C9:D1:EC:2A:3F:C7:D5:E7:92:B5:91:EA:62:80
Certificate issuer: /CN=5547b17ed7dcc9d1ec2a3fc7d5e792b591ea6280
Certificate serial: 01A08A8CF6B19F2D1C1BB7CD1A5D893D4F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
Manifest number: 025F
Signing time: Thu 10 Sep 2026 09:01:28 +0000
Manifest this update: Thu 10 Sep 2026 09:01:28 +0000
Manifest next update: Fri 11 Sep 2026 09:01:28 +0000
Files and hashes: 1: VUexftfcydHsKj_H1eeStZHqYoA.crl (hash: gtH0IcJRNyq6s5vhMaXpfyNeDUQ9oKQQ28WFxgJr0QE=)
2: tsIXIQRuUDBV02rdPLj6XJnzDl4.roa (hash: +5zk1WdRPKPJfJvtpk3tr0u9W43LZvbEvy4wGv4JI08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:f6:b1:9f:2d:1c:1b:b7:cd:1a:5d:89:3d:4f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5547b17ed7dcc9d1ec2a3fc7d5e792b591ea6280
Validity
Not Before: Sep 10 09:01:28 2026 GMT
Not After : Sep 11 09:01:28 2026 GMT
Subject: CN=551e903f0a88906d3f299e4bc3609c1bc5de634b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:31:3b:91:a2:c6:71:ca:c9:4f:fa:d3:28:
ba:27:ca:6a:4a:ca:ae:38:30:54:0f:8a:95:58:8d:
f1:18:81:25:6b:31:b6:64:be:d0:a3:aa:4c:33:2a:
1d:bb:a1:fe:d8:5c:93:f1:f8:b5:d0:d7:13:9e:c4:
33:26:36:98:6a:3c:3f:8a:85:56:30:31:53:40:d0:
26:78:8d:5e:45:47:84:e1:98:17:24:d5:13:36:17:
4c:38:5d:48:f0:cc:ad:e7:cf:49:de:df:8c:21:ce:
d2:62:64:9f:94:e7:46:d2:f4:4d:f1:89:06:b0:71:
cc:9a:36:dc:ed:a1:f4:5b:1d:0c:26:81:30:cf:b0:
15:3c:75:93:64:a0:9a:55:e7:72:e9:46:a5:06:d9:
54:99:09:31:4e:64:9f:92:c0:c6:bb:2a:85:e1:5d:
66:9a:3b:69:7d:e3:28:42:6f:e3:c0:04:3d:95:fe:
37:f4:05:8c:6a:c2:14:d5:db:03:c8:d6:58:11:37:
0d:70:27:3c:66:f2:c0:b6:e8:aa:e0:4b:35:6b:80:
f6:fb:81:04:5d:d3:1a:c5:69:99:0f:90:96:ca:42:
1e:1a:d7:32:d2:22:43:fe:18:e2:82:f9:f0:65:69:
ea:ee:c6:cc:16:b8:ac:22:fe:79:5c:ee:c4:3d:76:
d0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1E:90:3F:0A:88:90:6D:3F:29:9E:4B:C3:60:9C:1B:C5:DE:63:4B
X509v3 Authority Key Identifier:
keyid:55:47:B1:7E:D7:DC:C9:D1:EC:2A:3F:C7:D5:E7:92:B5:91:EA:62:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:aa:93:05:55:fa:de:5f:49:8e:33:13:8f:2c:1e:07:b0:95:
e9:e8:30:b0:b2:71:a6:63:b7:d9:c1:8f:3e:1d:8c:ea:70:87:
6e:ef:01:0d:1a:eb:1c:e6:39:3a:03:87:60:f3:b4:e4:2a:db:
e5:db:d4:fe:6f:95:39:1e:7d:d7:8d:db:3f:be:fc:8c:fc:fc:
62:16:7d:67:e2:d3:4e:f7:30:6e:cb:1a:f1:a8:20:8c:68:4c:
27:e1:b8:51:4c:a0:fb:10:9c:1c:17:a6:19:6d:a0:e9:c8:1f:
a4:0a:32:fe:3b:d6:1e:9c:0b:47:5d:31:f8:34:8f:c0:c9:08:
04:dc:d1:8e:55:34:69:38:3c:15:9c:12:81:06:b6:8b:c8:a7:
a0:3f:08:ec:34:18:89:d5:d5:60:a4:bc:60:fb:9b:bd:91:28:
b6:c8:9a:c5:d0:30:c6:d6:41:db:d7:45:a3:31:01:94:d0:49:
ee:ca:38:82:65:64:17:13:13:84:55:5e:6d:eb:41:36:61:e0:
ee:2e:30:40:e2:d5:25:a6:c0:a1:4c:ed:c2:16:65:36:a5:b8:
68:4e:f1:be:c7:33:d8:44:7b:4e:27:c4:67:64:c3:f1:b5:ad:
19:d1:ad:9b:94:30:24:b5:28:18:05:e3:1d:9b:3e:ea:5b:33:
c2:de:66:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjPaxny0cG7fNGl2JPU+ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NDdiMTdlZDdkY2M5ZDFlYzJhM2ZjN2Q1ZTc5MmI1OTFl
YTYyODAwHhcNMjYwOTEwMDkwMTI4WhcNMjYwOTExMDkwMTI4WjAzMTEwLwYDVQQD
Eyg1NTFlOTAzZjBhODg5MDZkM2YyOTllNGJjMzYwOWMxYmM1ZGU2MzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjoxO5GixnHKyU/60yi6J8pqSsqu
ODBUD4qVWI3xGIElazG2ZL7Qo6pMMyodu6H+2FyT8fi10NcTnsQzJjaYajw/ioVW
MDFTQNAmeI1eRUeE4ZgXJNUTNhdMOF1I8Myt589J3t+MIc7SYmSflOdG0vRN8YkG
sHHMmjbc7aH0Wx0MJoEwz7AVPHWTZKCaVedy6UalBtlUmQkxTmSfksDGuyqF4V1m
mjtpfeMoQm/jwAQ9lf439AWMasIU1dsDyNZYETcNcCc8ZvLAtuiq4Es1a4D2+4EE
XdMaxWmZD5CWykIeGtcy0iJD/hjigvnwZWnq7sbMFrisIv55XO7EPXbQ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUekD8KiJBtPymeS8NgnBvF3mNLMB8GA1UdIwQY
MBaAFFVHsX7X3MnR7Co/x9XnkrWR6mKAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlVleGZ0ZmN5ZEhzS2pfSDFlZVN0WkhxWW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMWRhMDYtMTk4ZS00NGJiLWIzM2Yt
MTNlMzMzZTFmYTE3LzEvVlVleGZ0ZmN5ZEhzS2pfSDFlZVN0WkhxWW9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jMWRhMDYtMTk4ZS00NGJiLWIzM2YtMTNlMzMzZTFmYTE3
LzEvVlVleGZ0ZmN5ZEhzS2pfSDFlZVN0WkhxWW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKqTBVX6
3l9JjjMTjyweB7CV6egwsLJxpmO32cGPPh2M6nCHbu8BDRrrHOY5OgOHYPO05Crb
5dvU/m+VOR59143bP778jPz8YhZ9Z+LTTvcwbssa8aggjGhMJ+G4UUyg+xCcHBem
GW2g6cgfpAoy/jvWHpwLR10x+DSPwMkIBNzRjlU0aTg8FZwSgQa2i8inoD8I7DQY
idXVYKS8YPubvZEotsiaxdAwxtZB29dFozEBlNBJ7so4gmVkFxMThFVebetBNmHg
7i4wQOLVJabAoUztwhZlNqW4aE7xvscz2ER7TifEZ2TD8bWtGdGtm5QwJLUoGAXj
HZs+6lszwt5mRA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:04 2026 by rpki-client