Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File: VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier: gATMcYB9sluWDznCHBvAyeIbrGv8DuYUYHlIaelnoAE=
Subject key identifier: 71:16:6D:69:07:EA:EF:5E:94:6D:7C:B9:19:26:DD:F9:D7:69:3F:FB
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 01A1A63874930CE913B243047F532AE07FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number: 0CF7
Signing time: Wed 04 Nov 2026 11:01:20 +0000
Manifest this update: Wed 04 Nov 2026 11:01:20 +0000
Manifest next update: Thu 05 Nov 2026 11:01:20 +0000
Files and hashes: 1: 44eS9htfDegZUnC2w7wAUmZuaWA.roa (hash: 6w+zcuKEWJgbCaB6Bdw72Y4/uXhHkVUunNc7dMXW0G0=)
2: 60wJ4Ifb12thZkTYydBMGCHyhjU.roa (hash: loGVk4GY7PqMyMndtxYwq4ib8ZW1ZuV/iu1LnLyoy/k=)
3: BP73BKF5mJwPLLJxOSLVxLOWrtk.roa (hash: Ld3t48e3ZQBGQXb3cT/E5oe6b14FRU/wgq1qRxepE/s=)
4: KjnHPRF-cTfafr7GSVcAiCyWeb0.roa (hash: 3qGWJTyestuh3mdWTHBj0z2W00hoEy0Lbm5OnbjIxk0=)
5: LW7rb0AaEUjbPH9dnaOyHTBi76E.roa (hash: p1ZkXmO8OLBHzuVbdIzp+e8cKBOvTv26ZXhPyk/iQ9g=)
6: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: 3UTHhKbrKFBTvIsf3WYKGcIwUETLn3vgZHHzQc996ps=)
7: erW8LenmE07YpIlq2UiaPLbTHRY.roa (hash: ryAYbA45+mCp7UF8NMvRhWhwCEVlA2MdeLlfo2S/HmM=)
8: iCDpMweR3UnjQ3t5pDnJ4r1H_Z8.roa (hash: p7eqJ/28CY3BrDo7BINDBAyzyYyfthKUBP0i3u+PKTY=)
9: zSQVk9Uctt-RfcBSveyCr38CFfA.roa (hash: tRgRAlHE1zW+KtCt3216eqpIBlefLEs1R+bVPcz6sq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:38:74:93:0c:e9:13:b2:43:04:7f:53:2a:e0:7f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Nov 4 11:01:20 2026 GMT
Not After : Nov 5 11:01:20 2026 GMT
Subject: CN=71166d6907eaef5e946d7cb91926ddf9d7693ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:08:05:d2:0c:75:f8:7c:0b:56:60:02:b7:
8b:36:a7:d7:c9:fc:01:f3:18:90:c8:8e:f7:a0:35:
3c:1b:fb:83:3a:df:9f:1b:3a:a6:03:37:a1:27:5a:
c4:78:99:7e:5a:10:f4:e3:fc:11:bc:6e:bd:dc:65:
65:02:35:e7:cd:9f:5c:58:17:3f:2c:73:ad:0c:d1:
df:17:41:e8:6e:52:73:2b:97:b5:e5:63:51:62:47:
07:33:2b:37:6c:62:d6:64:c4:c9:7f:12:95:16:62:
5d:e4:cc:79:7e:00:62:93:97:73:cf:81:74:66:bd:
f9:51:94:1d:e8:57:80:2b:26:2b:2a:1e:65:65:87:
64:b1:1f:fd:8a:70:89:46:72:91:7c:7b:22:79:d6:
db:a0:96:e5:6d:ab:36:e5:d9:f7:f3:24:bb:98:f9:
81:aa:58:e1:c5:f3:49:da:02:47:00:02:d3:20:e6:
6e:00:a1:e4:62:ad:74:ff:0e:58:e0:ce:ae:51:b4:
b2:6b:45:7b:da:df:19:4e:eb:7f:4c:2d:ad:33:65:
b8:df:e7:ed:f9:7d:04:27:0e:b3:bb:73:0e:7f:d7:
50:1a:76:16:e5:b4:dd:91:01:6a:3a:d2:b4:9d:f0:
28:74:2d:d0:77:18:a7:19:d9:c5:ed:ee:02:da:d2:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:16:6D:69:07:EA:EF:5E:94:6D:7C:B9:19:26:DD:F9:D7:69:3F:FB
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:55:ec:bb:ce:24:b9:b7:8c:1e:27:cf:00:27:52:41:e0:39:
7c:aa:64:99:3f:02:72:bd:c8:44:51:7d:07:14:84:ae:09:77:
a0:cf:05:d8:c9:1d:86:63:9d:a2:bf:59:53:91:61:8a:2d:3c:
aa:8b:d9:92:6c:6a:04:03:1c:e8:29:e7:f5:94:83:4c:4c:c4:
93:56:47:ec:fb:5c:a9:77:87:6b:03:8d:fd:6b:0c:6b:41:3b:
d9:64:4c:46:10:1d:3d:08:7d:81:ed:43:4e:8c:26:41:68:c0:
b7:bf:f3:ab:71:db:7b:de:b0:10:62:71:07:91:00:60:79:61:
0f:01:e0:b3:b9:b6:3a:08:39:b0:ee:af:ff:99:9d:3d:a7:b8:
a2:e8:77:6e:04:aa:c6:b4:de:ba:17:36:67:4f:96:03:b7:21:
ca:c1:6b:1c:12:9b:4c:d1:fa:06:85:e3:9b:d6:b7:3b:e9:32:
8a:14:a5:07:b2:00:63:e9:06:c9:f8:45:3d:48:d3:35:87:20:
07:5c:25:17:75:7f:8c:32:3e:cd:bf:d5:e5:78:45:65:96:c1:
1d:d7:0a:18:f3:ae:ea:13:fa:51:f1:f7:08:f2:46:1e:d7:15:
51:9f:4d:71:75:7d:60:c1:39:c7:75:21:5c:41:28:31:28:5d:
2b:cb:d3:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGmOHSTDOkTskMEf1Mq4H/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2M1YzM0YTYyZmZiZWQ4ZmMwZjBlYzAxYjQyYzBjNTBl
ZTdlZjcwHhcNMjYxMTA0MTEwMTIwWhcNMjYxMTA1MTEwMTIwWjAzMTEwLwYDVQQD
Eyg3MTE2NmQ2OTA3ZWFlZjVlOTQ2ZDdjYjkxOTI2ZGRmOWQ3NjkzZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDgIBdIMdfh8C1ZgAreLNqfXyfwB
8xiQyI73oDU8G/uDOt+fGzqmAzehJ1rEeJl+WhD04/wRvG693GVlAjXnzZ9cWBc/
LHOtDNHfF0HoblJzK5e15WNRYkcHMys3bGLWZMTJfxKVFmJd5Mx5fgBik5dzz4F0
Zr35UZQd6FeAKyYrKh5lZYdksR/9inCJRnKRfHsiedbboJblbas25dn38yS7mPmB
qljhxfNJ2gJHAALTIOZuAKHkYq10/w5Y4M6uUbSya0V72t8ZTut/TC2tM2W43+ft
+X0EJw6zu3MOf9dQGnYW5bTdkQFqOtK0nfAodC3QdxinGdnF7e4C2tJXswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEWbWkH6u9elG18uRkm3fnXaT/7MB8GA1UdIwQY
MBaAFFQ8XDSmL/vtj8Dw7AG0LAxQ7n73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYt
ZjRmMWY5M2UwNDY3LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYtZjRmMWY5M2UwNDY3
LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFXsu84k
ubeMHifPACdSQeA5fKpkmT8Ccr3IRFF9BxSErgl3oM8F2MkdhmOdor9ZU5Fhii08
qovZkmxqBAMc6Cnn9ZSDTEzEk1ZH7PtcqXeHawON/WsMa0E72WRMRhAdPQh9ge1D
TowmQWjAt7/zq3Hbe96wEGJxB5EAYHlhDwHgs7m2Ogg5sO6v/5mdPae4ouh3bgSq
xrTeuhc2Z0+WA7chysFrHBKbTNH6BoXjm9a3O+kyihSlB7IAY+kGyfhFPUjTNYcg
B1wlF3V/jDI+zb/V5XhFZZbBHdcKGPOu6hP6UfH3CPJGHtcVUZ9NcXV9YME5x3Uh
XEEoMShdK8vTrA==
-----END CERTIFICATE-----
Generated at Wed Nov 4 20:11:45 2026 by rpki-client