Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File: VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier: RJUuEkK/wzu1+D2tc1I+9yYcn+4UVXOPIO68DHJWKwA=
Subject key identifier: B7:56:C1:24:CA:7D:DB:90:78:AA:45:68:0B:37:9F:64:D0:55:D1:D2
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 01A14C870CD9B9A205F07CD00D9597AB206B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number: 1AE7
Signing time: Sun 18 Oct 2026 01:01:21 +0000
Manifest this update: Sun 18 Oct 2026 01:01:21 +0000
Manifest next update: Mon 19 Oct 2026 01:01:21 +0000
Files and hashes: 1: 7NGoj5cGztX58pAtipUcpmb4aIM.roa (hash: vlOULZs24F/kcnILYjizoe3IHDjDEgukRjmyfRx6nIw=)
2: V2ZzzbVPUiKvWiZZCU89cR5PNd0.roa (hash: A3URN1enAjnCkB6UzDkrO/J0z/XkaxyVPZWO9Xu4fHc=)
3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: 32gMyOMpQljz5+FQEixt20sy4iGmQDdir2YBdMmYD8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:87:0c:d9:b9:a2:05:f0:7c:d0:0d:95:97:ab:20:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: Oct 18 01:01:21 2026 GMT
Not After : Oct 19 01:01:21 2026 GMT
Subject: CN=b756c124ca7ddb9078aa45680b379f64d055d1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:ce:60:52:28:9e:c1:15:ca:ad:8e:5c:14:
1a:b3:88:9c:a6:99:63:0c:6f:e6:a9:55:90:0f:8d:
1e:c5:b9:5f:e7:44:14:fe:13:1e:a2:e5:8c:16:f5:
c7:99:15:be:d9:4f:21:84:0c:c4:8b:b6:05:1e:52:
f8:1f:b6:d4:1f:81:f7:75:03:dd:50:17:45:fc:96:
6f:e1:eb:de:30:3b:f9:a7:77:2d:2b:ed:7c:6f:29:
c1:69:79:bf:fe:19:f9:88:da:bb:76:8c:4d:69:6a:
64:42:2e:72:2f:f7:02:c7:ff:12:c4:a9:2b:b6:c7:
dc:3e:08:38:b6:56:88:ea:73:9e:8c:4f:a5:09:a5:
e7:71:86:5e:17:61:a9:a5:c1:9d:86:ae:f8:18:ac:
1d:67:3b:85:63:9f:42:fe:52:0e:77:81:82:45:cd:
a3:54:f5:c7:c6:19:51:06:6e:6c:9e:7f:a2:9d:84:
0f:f3:3e:f6:a2:e9:b3:22:01:3a:ba:b6:59:97:86:
30:44:a6:21:d6:7c:53:d3:8b:fc:82:81:fd:9c:b2:
a8:a1:b5:cd:1b:b8:58:68:01:f7:02:d9:19:0a:23:
3a:66:85:f1:e8:c0:78:18:dc:34:76:00:e0:56:f7:
b3:d8:2f:2d:1c:98:8a:98:2a:35:34:e9:76:72:3c:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:56:C1:24:CA:7D:DB:90:78:AA:45:68:0B:37:9F:64:D0:55:D1:D2
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6f:99:32:cd:6c:6f:0d:25:51:02:35:e5:0a:83:0a:c1:a4:
d5:90:5c:4c:87:a4:b6:e6:05:e1:c9:52:94:ee:81:4f:b2:32:
e1:11:75:8e:21:1c:56:a4:03:2b:b6:05:ef:2f:2d:34:ab:55:
81:8f:6a:b3:c6:bb:ec:ad:2e:f2:c4:28:aa:2f:a6:34:8a:70:
c3:71:e2:d2:9c:4c:73:fa:06:47:35:c2:e0:60:94:4b:b3:d0:
a4:af:95:9a:9b:77:37:90:0c:c2:22:9e:38:be:63:cf:ab:1c:
d0:3c:29:34:ae:c6:90:05:4f:24:ab:59:aa:50:f2:e1:90:84:
9e:2e:bf:60:6a:73:ff:3b:a9:f3:41:c0:7b:aa:50:69:3a:51:
9b:64:e9:44:4b:99:34:4a:2d:58:12:a5:38:4b:ff:89:27:c1:
be:c0:8e:8d:93:d2:7f:c9:8b:3a:39:d7:bb:69:06:45:3b:2f:
1c:06:70:e9:30:4f:9a:85:cc:ac:8e:31:0f:89:3a:f8:91:7d:
9a:2b:41:0b:9c:a4:fd:e2:13:f2:35:cb:a0:98:c1:fa:99:37:
a1:b8:4b:e1:31:98:b0:a6:b3:39:de:04:b0:94:51:80:4a:6e:
af:df:73:ac:5b:7f:5d:d2:a8:d2:4f:70:6a:a3:5b:0f:30:73:
d5:10:e8:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFMhwzZuaIF8HzQDZWXqyBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MmFkM2EwYjRiNzRlODVhZjU0ZjU4YWQ3NWEzMDI2Yjdk
ZjcxODEwHhcNMjYxMDE4MDEwMTIxWhcNMjYxMDE5MDEwMTIxWjAzMTEwLwYDVQQD
EyhiNzU2YzEyNGNhN2RkYjkwNzhhYTQ1NjgwYjM3OWY2NGQwNTVkMWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDPOYFIonsEVyq2OXBQas4icpplj
DG/mqVWQD40exblf50QU/hMeouWMFvXHmRW+2U8hhAzEi7YFHlL4H7bUH4H3dQPd
UBdF/JZv4eveMDv5p3ctK+18bynBaXm//hn5iNq7doxNaWpkQi5yL/cCx/8SxKkr
tsfcPgg4tlaI6nOejE+lCaXncYZeF2GppcGdhq74GKwdZzuFY59C/lIOd4GCRc2j
VPXHxhlRBm5snn+inYQP8z72oumzIgE6urZZl4YwRKYh1nxT04v8goH9nLKoobXN
G7hYaAH3AtkZCiM6ZoXx6MB4GNw0dgDgVvez2C8tHJiKmCo1NOl2cjxUrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdWwSTKfduQeKpFaAs3n2TQVdHSMB8GA1UdIwQY
MBaAFFUq06C0t06Fr1T1itdaMCa333GBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlNyVG9MUzNUb1d2VlBXSzExb3dKcmZmY1lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xNmZjZjEtNjQxMi00ZGIyLWIzYWUt
NDlhM2M0OWYzOTNjLzEvVlNyVG9MUzNUb1d2VlBXSzExb3dKcmZmY1lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8xNmZjZjEtNjQxMi00ZGIyLWIzYWUtNDlhM2M0OWYzOTNj
LzEvVlNyVG9MUzNUb1d2VlBXSzExb3dKcmZmY1lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQW+ZMs1s
bw0lUQI15QqDCsGk1ZBcTIektuYF4clSlO6BT7Iy4RF1jiEcVqQDK7YF7y8tNKtV
gY9qs8a77K0u8sQoqi+mNIpww3Hi0pxMc/oGRzXC4GCUS7PQpK+Vmpt3N5AMwiKe
OL5jz6sc0DwpNK7GkAVPJKtZqlDy4ZCEni6/YGpz/zup80HAe6pQaTpRm2TpREuZ
NEotWBKlOEv/iSfBvsCOjZPSf8mLOjnXu2kGRTsvHAZw6TBPmoXMrI4xD4k6+JF9
mitBC5yk/eIT8jXLoJjB+pk3obhL4TGYsKazOd4EsJRRgEpur99zrFt/XdKo0k9w
aqNbDzBz1RDogg==
-----END CERTIFICATE-----
Generated at Sun Oct 18 11:50:09 2026 by rpki-client