Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File: VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier: i7devLkCqssFO3LYWwXTmIHjLMkqv/IKgOqMfnQ548A=
Subject key identifier: 25:33:42:BB:31:D8:E6:F7:08:5B:30:91:5C:CE:A0:E4:87:72:ED:12
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 019CE7B72EE4B9B22C61ED7B306800D39AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number: 0A81
Signing time: Fri 13 Mar 2026 15:01:07 +0000
Manifest this update: Fri 13 Mar 2026 15:01:07 +0000
Manifest next update: Sat 14 Mar 2026 15:01:07 +0000
Files and hashes: 1: 44eS9htfDegZUnC2w7wAUmZuaWA.roa (hash: 6w+zcuKEWJgbCaB6Bdw72Y4/uXhHkVUunNc7dMXW0G0=)
2: 60wJ4Ifb12thZkTYydBMGCHyhjU.roa (hash: loGVk4GY7PqMyMndtxYwq4ib8ZW1ZuV/iu1LnLyoy/k=)
3: BP73BKF5mJwPLLJxOSLVxLOWrtk.roa (hash: Ld3t48e3ZQBGQXb3cT/E5oe6b14FRU/wgq1qRxepE/s=)
4: HMrWWr_GpU-7TilUWTszNhM4XF4.roa (hash: ZxbJ+8rmhmPIZSt+dx++l6IVbkPcuwgYpg8+JSAPwH4=)
5: KjnHPRF-cTfafr7GSVcAiCyWeb0.roa (hash: 3qGWJTyestuh3mdWTHBj0z2W00hoEy0Lbm5OnbjIxk0=)
6: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: hl2FMjNxkLB8ohF0dg2GCluXn7liJOXbyYCnw6WeGqo=)
7: iCDpMweR3UnjQ3t5pDnJ4r1H_Z8.roa (hash: p7eqJ/28CY3BrDo7BINDBAyzyYyfthKUBP0i3u+PKTY=)
8: zSQVk9Uctt-RfcBSveyCr38CFfA.roa (hash: tRgRAlHE1zW+KtCt3216eqpIBlefLEs1R+bVPcz6sq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:b7:2e:e4:b9:b2:2c:61:ed:7b:30:68:00:d3:9a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Mar 13 15:01:07 2026 GMT
Not After : Mar 14 15:01:07 2026 GMT
Subject: CN=253342bb31d8e6f7085b30915ccea0e48772ed12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ac:0e:9f:7b:9b:d9:ef:b3:4c:d1:e5:b5:fc:
e5:3c:f0:1f:cd:88:2b:58:b6:19:cd:61:f5:52:41:
61:3a:79:03:af:ce:ec:06:07:1f:c6:cf:6c:4d:31:
4f:75:ef:b2:ba:7f:9d:5b:27:ed:f2:42:6a:e7:c8:
50:b1:12:81:00:9c:87:10:3e:54:32:c0:5b:74:c9:
cd:51:b2:e9:70:c1:42:c1:d5:c2:89:34:0a:70:76:
27:fa:dd:d7:87:ab:ae:a7:3f:1a:c8:d5:2f:bb:03:
9c:db:5a:42:c5:b0:cd:87:d3:cd:d8:28:4d:6f:fd:
f0:fd:f7:f6:d8:7f:e6:57:8c:15:6a:81:45:9d:c0:
e0:f9:4b:6e:52:d4:79:fa:f8:84:c1:c2:fa:35:9f:
94:c0:dc:7e:58:86:0b:df:f5:de:a2:4a:51:90:f8:
b9:b2:68:68:12:2c:36:9f:04:9c:3d:a5:d6:95:47:
7c:ff:65:24:66:b0:88:5f:ff:73:53:01:77:66:14:
d6:b2:9a:38:45:f6:db:54:91:49:93:e1:2e:bf:90:
22:30:c0:1b:72:72:ce:cc:6d:dd:76:a5:2d:70:12:
7d:f7:da:dd:6c:fe:de:0c:d4:c0:4e:93:fc:7f:4c:
4f:f7:64:82:0a:bc:1c:80:71:dc:0d:00:9a:58:73:
0e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:33:42:BB:31:D8:E6:F7:08:5B:30:91:5C:CE:A0:E4:87:72:ED:12
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b9:2b:00:ee:09:ab:dd:f2:de:1e:d4:41:e1:a5:13:46:31:
80:83:f9:93:0d:88:93:2d:a4:8e:00:99:20:dd:63:8e:48:55:
c0:5e:df:84:a9:f3:7c:af:6c:91:fd:67:42:42:00:9a:9d:51:
a5:b7:c0:ba:75:fc:dd:2d:3f:cb:75:2a:8a:00:f4:03:27:55:
9f:d3:29:68:0b:d4:d9:df:7e:68:c2:60:82:68:45:0d:0b:d8:
aa:8a:ad:ee:42:66:85:80:80:c1:89:f4:0b:49:eb:48:6b:ac:
27:f7:6b:17:52:dd:9f:af:6d:8b:4b:ad:32:7f:74:c6:cc:02:
64:fd:85:4a:f7:e0:3d:09:5c:b2:20:42:b0:31:2b:2c:01:2e:
57:c7:43:f8:bd:1e:29:fe:ad:78:ad:98:40:a5:29:ab:24:54:
f2:c6:ce:26:db:87:72:40:b9:5a:1f:64:91:44:ce:fd:33:67:
bc:4d:0f:4e:ba:39:70:f8:cf:1b:cd:33:46:e5:30:e0:ed:0e:
98:d6:65:3f:6e:55:fe:93:57:77:17:65:8b:d8:0e:86:b7:a7:
25:a8:73:c0:e2:b6:3b:73:81:2e:02:cc:00:05:0c:eb:a6:19:
fe:89:44:25:e5:d8:4c:88:db:93:1a:5e:e6:54:42:cf:de:8f:
ae:45:c4:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZznty7kubIsYe17MGgA05quMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2M1YzM0YTYyZmZiZWQ4ZmMwZjBlYzAxYjQyYzBjNTBl
ZTdlZjcwHhcNMjYwMzEzMTUwMTA3WhcNMjYwMzE0MTUwMTA3WjAzMTEwLwYDVQQD
EygyNTMzNDJiYjMxZDhlNmY3MDg1YjMwOTE1Y2NlYTBlNDg3NzJlZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqwOn3ub2e+zTNHltfzlPPAfzYgr
WLYZzWH1UkFhOnkDr87sBgcfxs9sTTFPde+yun+dWyft8kJq58hQsRKBAJyHED5U
MsBbdMnNUbLpcMFCwdXCiTQKcHYn+t3Xh6uupz8ayNUvuwOc21pCxbDNh9PN2ChN
b/3w/ff22H/mV4wVaoFFncDg+UtuUtR5+viEwcL6NZ+UwNx+WIYL3/XeokpRkPi5
smhoEiw2nwScPaXWlUd8/2UkZrCIX/9zUwF3ZhTWspo4RfbbVJFJk+Euv5AiMMAb
cnLOzG3ddqUtcBJ999rdbP7eDNTATpP8f0xP92SCCrwcgHHcDQCaWHMOMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUzQrsx2Ob3CFswkVzOoOSHcu0SMB8GA1UdIwQY
MBaAFFQ8XDSmL/vtj8Dw7AG0LAxQ7n73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYt
ZjRmMWY5M2UwNDY3LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYtZjRmMWY5M2UwNDY3
LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7krAO4J
q93y3h7UQeGlE0YxgIP5kw2Iky2kjgCZIN1jjkhVwF7fhKnzfK9skf1nQkIAmp1R
pbfAunX83S0/y3UqigD0AydVn9MpaAvU2d9+aMJggmhFDQvYqoqt7kJmhYCAwYn0
C0nrSGusJ/drF1Ldn69ti0utMn90xswCZP2FSvfgPQlcsiBCsDErLAEuV8dD+L0e
Kf6teK2YQKUpqyRU8sbOJtuHckC5Wh9kkUTO/TNnvE0PTro5cPjPG80zRuUw4O0O
mNZlP25V/pNXdxdli9gOhrenJahzwOK2O3OBLgLMAAUM66YZ/olEJeXYTIjbkxpe
5lRCz96PrkXE3w==
-----END CERTIFICATE-----
Generated at Fri Mar 13 16:48:00 2026 by rpki-client