Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft
File: VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft (raw, json)
Hash identifier: D0TY2s2mZ/v0doJRvgpTTO+nbrlz1UcUKilurNyW5YA=
Subject key identifier: 43:5F:8F:0A:35:32:E0:D2:2A:92:23:D8:0D:E7:1F:43:E5:6E:D6:D3
Authority key identifier: 54:5A:B2:A3:71:2E:25:56:A4:43:4B:8B:AD:D6:C4:07:A5:67:31:21
Certificate issuer: /CN=545ab2a3712e2556a4434b8badd6c407a5673121
Certificate serial: 019D39AF0E568DFC84953880D687E17F697B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 13:01:06 +0000
Manifest this update: Sun 29 Mar 2026 13:01:06 +0000
Manifest next update: Mon 30 Mar 2026 13:01:06 +0000
Files and hashes: 1: VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl (hash: g5x93TMl+NBd1WVJ3tHR8XVBHpJhFkLc1TR+1/Lit0o=)
2: Vchu28hFiP2g2wl5siwgeV6-0Mo.roa (hash: nzslrPM5r0/2SJpIcbCIN9cB87EfRDEPS3VmNNiKSEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:0e:56:8d:fc:84:95:38:80:d6:87:e1:7f:69:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=545ab2a3712e2556a4434b8badd6c407a5673121
Validity
Not Before: Mar 29 13:01:06 2026 GMT
Not After : Mar 30 13:01:06 2026 GMT
Subject: CN=435f8f0a3532e0d22a9223d80de71f43e56ed6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:2f:fe:ef:a4:38:57:99:eb:97:de:e2:99:
13:93:5f:8a:ce:85:ec:60:1c:be:11:38:69:5d:0f:
0b:69:62:84:58:e0:ad:b6:38:3f:9a:18:50:77:b0:
f9:a3:bb:cb:84:3c:3f:32:a8:c2:1e:05:f5:53:76:
e7:1a:05:30:b9:19:27:bf:d0:b5:c4:1a:fd:fc:0d:
0d:2c:d6:c2:31:31:d8:89:d7:fa:a8:d6:16:04:a1:
5c:00:b4:b4:93:c9:cd:95:26:1f:37:c3:b6:08:c0:
02:31:d6:15:34:f3:27:93:34:58:76:3b:21:da:3f:
eb:dd:ad:42:6a:dd:d8:13:84:9f:62:e3:ca:f6:8c:
ad:c8:be:2a:73:d8:1a:0b:69:2d:87:2f:4d:ed:11:
8b:6e:20:d6:c3:8c:f7:63:90:0d:78:03:42:5f:b5:
cb:5e:a9:0f:86:cb:6b:47:d5:eb:50:9b:75:39:e4:
a3:b4:5d:61:56:ea:08:1a:6a:c6:46:67:0f:2d:84:
5b:bc:f5:a2:67:40:f5:0d:28:b1:34:c0:97:66:8e:
c9:7a:f4:bc:b5:2c:15:9c:d8:c0:47:75:0c:0d:44:
8d:bc:94:df:bc:ca:20:7a:b8:80:6b:97:eb:b0:3d:
d2:d0:d4:45:94:b4:33:f0:9e:b6:0f:76:dc:7e:48:
54:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5F:8F:0A:35:32:E0:D2:2A:92:23:D8:0D:E7:1F:43:E5:6E:D6:D3
X509v3 Authority Key Identifier:
keyid:54:5A:B2:A3:71:2E:25:56:A4:43:4B:8B:AD:D6:C4:07:A5:67:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ac:0d:07:ce:41:4c:f7:b1:22:3a:dd:fb:f4:d6:81:a5:29:
79:6c:96:e2:f5:92:35:d0:e1:92:19:d8:db:99:83:d3:6d:c4:
c4:7d:a4:76:53:c0:da:ea:4b:1f:0b:aa:b5:fe:c6:4b:7c:fb:
08:07:f3:61:92:53:24:6b:05:b8:40:68:8e:f7:99:83:d8:85:
b6:c4:a3:bf:87:fd:87:17:49:6c:6e:9f:d4:bf:a6:f6:d8:e4:
23:03:0e:85:ca:dc:62:5c:33:c7:e9:07:01:44:72:63:f3:c3:
cc:d5:7e:88:dc:9b:4b:0e:37:4a:93:43:7b:d6:b7:b2:20:a2:
d1:97:35:43:04:fe:b7:14:d7:e0:63:3f:a2:a8:45:8a:c5:7e:
07:1f:ba:ac:fd:77:6e:c5:05:53:8b:43:6b:16:bc:26:44:6b:
78:ec:8b:7c:81:c6:e0:a0:e8:f7:35:63:df:d7:b5:53:91:0e:
7f:5b:28:22:97:fd:b8:19:6a:1a:0b:c3:da:3e:21:b0:b3:7d:
2b:63:fb:9d:5d:f9:e7:6a:e1:e2:39:1e:6c:e0:07:a5:1f:9f:
79:2e:4c:11:11:e9:4d:79:06:ae:30:6f:e7:4e:a3:00:5a:f2:
8e:7b:d8:fe:6e:cf:3b:5e:9e:79:53:14:cb:7a:bb:6d:2b:1e:
e3:70:15:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rw5WjfyElTiA1ofhf2l7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NWFiMmEzNzEyZTI1NTZhNDQzNGI4YmFkZDZjNDA3YTU2
NzMxMjEwHhcNMjYwMzI5MTMwMTA2WhcNMjYwMzMwMTMwMTA2WjAzMTEwLwYDVQQD
Eyg0MzVmOGYwYTM1MzJlMGQyMmE5MjIzZDgwZGU3MWY0M2U1NmVkNmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4Mv/u+kOFeZ65fe4pkTk1+KzoXs
YBy+EThpXQ8LaWKEWOCttjg/mhhQd7D5o7vLhDw/MqjCHgX1U3bnGgUwuRknv9C1
xBr9/A0NLNbCMTHYidf6qNYWBKFcALS0k8nNlSYfN8O2CMACMdYVNPMnkzRYdjsh
2j/r3a1Cat3YE4SfYuPK9oytyL4qc9gaC2kthy9N7RGLbiDWw4z3Y5ANeANCX7XL
XqkPhstrR9XrUJt1OeSjtF1hVuoIGmrGRmcPLYRbvPWiZ0D1DSixNMCXZo7JevS8
tSwVnNjAR3UMDUSNvJTfvMogeriAa5frsD3S0NRFlLQz8J62D3bcfkhUHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENfjwo1MuDSKpIj2A3nH0PlbtbTMB8GA1UdIwQY
MBaAFFRasqNxLiVWpENLi63WxAelZzEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkZxeW8zRXVKVmFrUTB1THJkYkVCNlZuTVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kMmU4ZDctNTkzZi00YWZiLWI2YjMt
YjlkOGNmYzE5Y2VjLzEvVkZxeW8zRXVKVmFrUTB1THJkYkVCNlZuTVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9kMmU4ZDctNTkzZi00YWZiLWI2YjMtYjlkOGNmYzE5Y2Vj
LzEvVkZxeW8zRXVKVmFrUTB1THJkYkVCNlZuTVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHawNB85B
TPexIjrd+/TWgaUpeWyW4vWSNdDhkhnY25mD023ExH2kdlPA2upLHwuqtf7GS3z7
CAfzYZJTJGsFuEBojveZg9iFtsSjv4f9hxdJbG6f1L+m9tjkIwMOhcrcYlwzx+kH
AURyY/PDzNV+iNybSw43SpNDe9a3siCi0Zc1QwT+txTX4GM/oqhFisV+Bx+6rP13
bsUFU4tDaxa8JkRreOyLfIHG4KDo9zVj39e1U5EOf1soIpf9uBlqGgvD2j4hsLN9
K2P7nV3552rh4jkebOAHpR+feS5MERHpTXkGrjBv506jAFryjnvY/m7PO16eeVMU
y3q7bSse43AVUQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:23:46 2026 by rpki-client