Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
File: VNZdBt4mXaK11YjgbfiBbvRbLhc.mft (raw, json)
Hash identifier: weR1rV65hEuQ97DFIHMvo/yLat7YKot1YeD49rugDPY=
Subject key identifier: F1:B6:D5:D4:D7:DF:0E:85:5C:4D:D6:1E:BA:10:CB:F5:EB:F3:D5:4F
Authority key identifier: 54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17
Certificate issuer: /CN=54d65d06de265da2b5d588e06df8816ef45b2e17
Certificate serial: 019D37F7220342F6B2138E4748B137BB6774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
Manifest number: 0132
Signing time: Sun 29 Mar 2026 05:00:36 +0000
Manifest this update: Sun 29 Mar 2026 05:00:36 +0000
Manifest next update: Mon 30 Mar 2026 05:00:36 +0000
Files and hashes: 1: O6tTo-EzouZEbfBpVRGby5BcpW8.roa (hash: e+5cW5Q75TnsiB3DdCMBwxBeOV1HRtuc8+8HpOCCAs0=)
2: VNZdBt4mXaK11YjgbfiBbvRbLhc.crl (hash: EM3F+TIBt3vRVXJRLEF4wTkQjs6w/QoS7fXHlyfbV6Y=)
3: VmP0ATIzlJZzuZmxdiDwxRRvSuY.asa (hash: QDqtnVv0GAfDesodj0ytNnBt7Z3JzA38fwKzHLeXSEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:22:03:42:f6:b2:13:8e:47:48:b1:37:bb:67:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d65d06de265da2b5d588e06df8816ef45b2e17
Validity
Not Before: Mar 29 05:00:36 2026 GMT
Not After : Mar 30 05:00:36 2026 GMT
Subject: CN=f1b6d5d4d7df0e855c4dd61eba10cbf5ebf3d54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:91:97:ee:3e:34:37:c5:b9:51:f5:d5:ca:
98:ba:39:9a:0c:6d:67:fb:6a:00:63:1b:4d:fe:83:
36:80:d5:d1:31:e3:d0:41:31:d2:fd:48:2f:06:f0:
a2:7a:6e:92:95:94:3c:72:ca:94:ef:e2:89:5a:fb:
be:68:9f:4b:62:52:05:ea:da:b1:94:f0:00:a5:92:
8b:69:86:60:5f:ac:10:09:a8:90:44:01:5c:3b:e6:
14:8f:ca:cc:57:13:98:a4:7f:39:f9:a6:cf:e0:5b:
76:c0:82:c4:45:83:c5:77:3e:0c:b3:8f:45:90:63:
fe:45:a1:79:21:58:b4:66:3f:6d:d2:5f:b4:f9:9d:
8e:47:be:2a:40:2d:24:69:02:e2:1d:80:39:9f:45:
7d:6a:54:5c:04:e1:2e:dd:78:8b:09:15:f0:54:d3:
96:b2:81:61:20:60:a2:a1:66:2b:fb:55:45:e6:24:
90:6c:7b:da:a4:a2:8d:39:b7:64:40:5a:22:e7:ff:
b0:04:0a:bd:3d:d6:9b:88:e3:94:3a:1d:cd:98:ae:
17:1e:3e:58:dd:f3:fe:e6:b4:3a:69:c5:8d:f3:e2:
55:76:0f:69:fa:5c:14:db:5d:84:51:29:cd:88:f4:
0e:a6:8f:12:82:6b:c4:fe:86:0e:1d:98:34:73:46:
96:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B6:D5:D4:D7:DF:0E:85:5C:4D:D6:1E:BA:10:CB:F5:EB:F3:D5:4F
X509v3 Authority Key Identifier:
keyid:54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e1:80:6c:02:19:a6:d4:31:2e:e6:3c:e4:75:6f:aa:bc:8b:
05:ea:9d:56:e0:06:56:65:a4:7e:4a:ca:ef:96:66:09:3f:33:
23:ea:28:18:86:4a:8a:a9:27:3b:8d:f0:76:70:e1:d0:dc:30:
4f:4b:bd:f7:9c:0c:52:59:72:03:8d:43:dd:9a:fe:d3:48:9b:
7d:17:81:a5:97:6e:d1:d9:77:20:02:fb:b3:14:5d:00:2c:09:
79:20:18:2e:b0:d5:ec:d7:d7:a3:d3:f4:b2:59:9c:91:f7:7b:
22:b3:a2:bb:94:de:f3:31:c9:d8:73:4f:aa:95:d4:de:20:d0:
0f:9b:94:4d:6c:89:7c:93:21:eb:3e:59:69:7d:bc:06:5d:40:
f8:66:c0:7d:11:89:4d:2a:fd:ee:da:0b:ca:0e:45:7e:6b:5c:
00:35:ff:6b:91:53:16:4e:07:0e:dc:51:06:e1:cf:4a:ec:e0:
d3:5e:0b:60:06:c5:84:80:f6:6f:d1:a6:4d:23:ce:db:ed:6a:
38:c0:ac:04:ae:ef:39:b6:33:06:f7:8d:3b:3f:55:a4:af:5f:
6a:9f:f1:64:e3:cd:0e:58:41:98:3c:0b:4f:53:0e:5f:3c:1b:
bb:54:6c:4f:d8:ec:67:10:a3:7e:01:98:e5:1c:39:2f:af:d5:
72:42:30:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039yIDQvayE45HSLE3u2d0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZDY1ZDA2ZGUyNjVkYTJiNWQ1ODhlMDZkZjg4MTZlZjQ1
YjJlMTcwHhcNMjYwMzI5MDUwMDM2WhcNMjYwMzMwMDUwMDM2WjAzMTEwLwYDVQQD
EyhmMWI2ZDVkNGQ3ZGYwZTg1NWM0ZGQ2MWViYTEwY2JmNWViZjNkNTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXSRl+4+NDfFuVH11cqYujmaDG1n
+2oAYxtN/oM2gNXRMePQQTHS/UgvBvCiem6SlZQ8csqU7+KJWvu+aJ9LYlIF6tqx
lPAApZKLaYZgX6wQCaiQRAFcO+YUj8rMVxOYpH85+abP4Ft2wILERYPFdz4Ms49F
kGP+RaF5IVi0Zj9t0l+0+Z2OR74qQC0kaQLiHYA5n0V9alRcBOEu3XiLCRXwVNOW
soFhIGCioWYr+1VF5iSQbHvapKKNObdkQFoi5/+wBAq9PdabiOOUOh3NmK4XHj5Y
3fP+5rQ6acWN8+JVdg9p+lwU212EUSnNiPQOpo8SgmvE/oYOHZg0c0aWmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPG21dTX3w6FXE3WHroQy/Xr89VPMB8GA1UdIwQY
MBaAFFTWXQbeJl2itdWI4G34gW70Wy4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk5aZEJ0NG1YYUsxMVlqZ2JmaUJidlJiTGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80ZWE4NzMtZmFmYy00MGQxLWFhZWIt
YTEzOTc4NzBiMTY2LzEvVk5aZEJ0NG1YYUsxMVlqZ2JmaUJidlJiTGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80ZWE4NzMtZmFmYy00MGQxLWFhZWItYTEzOTc4NzBiMTY2
LzEvVk5aZEJ0NG1YYUsxMVlqZ2JmaUJidlJiTGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+GAbAIZ
ptQxLuY85HVvqryLBeqdVuAGVmWkfkrK75ZmCT8zI+ooGIZKiqknO43wdnDh0Nww
T0u995wMUllyA41D3Zr+00ibfReBpZdu0dl3IAL7sxRdACwJeSAYLrDV7NfXo9P0
slmckfd7IrOiu5Te8zHJ2HNPqpXU3iDQD5uUTWyJfJMh6z5ZaX28Bl1A+GbAfRGJ
TSr97toLyg5FfmtcADX/a5FTFk4HDtxRBuHPSuzg014LYAbFhID2b9GmTSPO2+1q
OMCsBK7vObYzBveNOz9VpK9fap/xZOPNDlhBmDwLT1MOXzwbu1RsT9jsZxCjfgGY
5Rw5L6/VckIwXg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:25 2026 by rpki-client