Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier: LE4Fm39yC6F8u0awpHlICn/d3k1IinNibeNaX8cft/I=
Subject key identifier: A4:51:35:7A:B7:EB:8D:0A:59:4C:FE:84:74:C1:58:0B:44:5E:DA:D0
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial: 019D1AFF634B4D451BBDB469BB53167C97F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number: 04E9
Signing time: Mon 23 Mar 2026 14:00:37 +0000
Manifest this update: Mon 23 Mar 2026 14:00:37 +0000
Manifest next update: Tue 24 Mar 2026 14:00:37 +0000
Files and hashes: 1: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: 4efREAyXC9GIz+i1Kw//wwU6ZPFQLTEzHjzyKsiuooA=)
2: ZHhc0L728ye9C_PaxE7QKIWysf0.roa (hash: IYrJXv7Z8+WyubB49OSinWGa68suJopradNDMs9g9yQ=)
3: mUqS4S5SL9Pvq3yISShuWCb9ZtE.roa (hash: uUcTOLjK+7qjGVmB7WyFwvHdMHjyRZf2FkbrhsEB5pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:ff:63:4b:4d:45:1b:bd:b4:69:bb:53:16:7c:97:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Validity
Not Before: Mar 23 14:00:37 2026 GMT
Not After : Mar 24 14:00:37 2026 GMT
Subject: CN=a451357ab7eb8d0a594cfe8474c1580b445edad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:74:75:90:35:00:e3:da:03:c4:9d:e3:fa:b3:
95:5e:2e:73:21:41:b9:17:db:9f:22:38:2b:4d:6a:
c8:72:74:ca:63:76:95:47:ac:87:6e:e3:99:ca:63:
bf:3f:9c:87:47:e0:d8:ad:64:9a:ab:50:f5:37:36:
ec:73:a1:fc:7d:07:45:91:45:f2:49:20:a8:1a:b1:
c2:b2:49:d4:af:0f:f3:f6:2b:8b:29:40:78:25:87:
09:14:ae:9f:18:0b:2e:6d:ec:66:fd:04:8f:b1:48:
7e:6e:dc:c8:2d:61:9f:a5:04:1a:9d:a9:59:3a:fe:
e2:ec:e0:88:28:ba:8d:a6:c0:8d:0e:7d:ac:c6:69:
d1:08:7b:80:54:fb:e8:c4:25:66:34:87:b8:b4:c3:
71:8d:72:4e:21:5c:1e:42:2a:28:a0:19:3c:b4:c5:
bd:5d:38:0e:5e:02:5d:7b:19:af:ca:34:3e:57:1f:
d3:1a:32:c6:f2:d7:48:09:18:e5:2d:fc:46:7c:20:
cf:13:77:4d:be:d9:8a:4d:4e:72:55:a0:12:27:17:
43:a0:93:16:05:bc:0d:f9:f8:49:35:8a:3c:9b:3c:
65:b1:bc:d6:96:74:9a:12:c0:2d:68:af:1d:01:f8:
58:0d:93:46:c9:19:06:f4:83:10:6f:e9:62:bd:2a:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:51:35:7A:B7:EB:8D:0A:59:4C:FE:84:74:C1:58:0B:44:5E:DA:D0
X509v3 Authority Key Identifier:
keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ef:68:5c:04:b0:ae:97:12:d7:49:8b:83:b7:f5:26:fc:bd:
15:ca:40:00:2b:06:a8:0e:51:41:3f:11:1c:a0:39:70:3c:a4:
ae:1b:43:6e:a0:7c:af:c4:5d:28:cd:03:b0:04:22:9a:92:e5:
e6:9c:d8:b9:05:22:56:fa:05:c9:dd:a1:af:fc:a3:72:8b:fb:
0d:5d:a9:1f:5b:e3:5d:98:b5:25:93:ad:87:4b:9f:43:6d:52:
0a:9f:bd:ac:6a:d0:cb:2a:6c:ef:7a:89:7d:a0:d3:17:a3:e3:
1f:f7:2c:30:f3:6a:a2:ad:17:4c:69:16:64:79:9f:d7:9d:f3:
26:b4:c6:c0:7c:0b:bc:02:04:a4:ae:18:61:b2:52:7a:a1:3a:
4f:a3:1a:7c:84:93:07:c5:64:43:1e:24:03:b2:d5:cf:3a:9c:
f8:bf:0f:56:b2:c8:28:f2:b0:07:17:92:a6:34:be:8b:ed:5b:
3d:8f:e2:c1:79:76:17:44:02:65:70:4f:97:d8:fa:06:a5:b4:
aa:30:dd:3f:f7:52:7a:c6:7d:5b:2d:11:1c:20:23:3b:ef:dc:
30:a5:0e:a5:22:0c:46:d0:9c:5f:a9:d1:10:78:c8:51:8b:25:
80:42:89:5b:1c:2c:3c:9c:61:fd:ad:2e:e4:2a:65:b7:a2:eb:
a6:ef:46:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0a/2NLTUUbvbRpu1MWfJf1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzZjM2NhNzgwY2M1Nzc0NGFkYmU5MGEwZjM5NGYxZDFj
ZDcyZjMwHhcNMjYwMzIzMTQwMDM3WhcNMjYwMzI0MTQwMDM3WjAzMTEwLwYDVQQD
EyhhNDUxMzU3YWI3ZWI4ZDBhNTk0Y2ZlODQ3NGMxNTgwYjQ0NWVkYWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHR1kDUA49oDxJ3j+rOVXi5zIUG5
F9ufIjgrTWrIcnTKY3aVR6yHbuOZymO/P5yHR+DYrWSaq1D1Nzbsc6H8fQdFkUXy
SSCoGrHCsknUrw/z9iuLKUB4JYcJFK6fGAsubexm/QSPsUh+btzILWGfpQQanalZ
Ov7i7OCIKLqNpsCNDn2sxmnRCHuAVPvoxCVmNIe4tMNxjXJOIVweQioooBk8tMW9
XTgOXgJdexmvyjQ+Vx/TGjLG8tdICRjlLfxGfCDPE3dNvtmKTU5yVaASJxdDoJMW
BbwN+fhJNYo8mzxlsbzWlnSaEsAtaK8dAfhYDZNGyRkG9IMQb+livSpyNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRRNXq3640KWUz+hHTBWAtEXtrQMB8GA1UdIwQY
MBaAFFR2w8p4DMV3RK2+kKDzlPHRzXLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80MzkyODUtNzIyYS00MmRmLWIxODUt
MzAzMTUxZDc2YWNlLzEvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80MzkyODUtNzIyYS00MmRmLWIxODUtMzAzMTUxZDc2YWNl
LzEvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+9oXASw
rpcS10mLg7f1Jvy9FcpAACsGqA5RQT8RHKA5cDykrhtDbqB8r8RdKM0DsAQimpLl
5pzYuQUiVvoFyd2hr/yjcov7DV2pH1vjXZi1JZOth0ufQ21SCp+9rGrQyyps73qJ
faDTF6PjH/csMPNqoq0XTGkWZHmf153zJrTGwHwLvAIEpK4YYbJSeqE6T6MafIST
B8VkQx4kA7LVzzqc+L8PVrLIKPKwBxeSpjS+i+1bPY/iwXl2F0QCZXBPl9j6BqW0
qjDdP/dSesZ9Wy0RHCAjO+/cMKUOpSIMRtCcX6nREHjIUYslgEKJWxwsPJxh/a0u
5Cplt6Lrpu9GZg==
-----END CERTIFICATE-----
Generated at Mon Mar 23 22:47:46 2026 by rpki-client