Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
File: VEbfB_88sm389O64dh-wFsr3-e4.mft (raw, json)
Hash identifier: 547rnNwYliOLik2d6iK9XPTUV6zO59lECVZrfWexTgA=
Subject key identifier: FC:83:1E:4A:61:B5:29:36:31:43:8C:68:69:1A:41:2C:80:75:7E:18
Authority key identifier: 54:46:DF:07:FF:3C:B2:6D:FC:F4:EE:B8:76:1F:B0:16:CA:F7:F9:EE
Certificate issuer: /CN=5446df07ff3cb26dfcf4eeb8761fb016caf7f9ee
Certificate serial: 019D39AF0A74CB90B3F69C57041944C54421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
Manifest number: 0283
Signing time: Sun 29 Mar 2026 13:01:05 +0000
Manifest this update: Sun 29 Mar 2026 13:01:05 +0000
Manifest next update: Mon 30 Mar 2026 13:01:05 +0000
Files and hashes: 1: VEbfB_88sm389O64dh-wFsr3-e4.crl (hash: w6YsyyozTEr5ly1Skv9ruOHJxjaoEpZR7T6zrmVloB8=)
2: XerDxKv88GRxs9ZkYhrJ-uj7FmE.roa (hash: +QfXYiGvQiBZ0Keb856JGIixLSseope7ht1TwdKxQc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:0a:74:cb:90:b3:f6:9c:57:04:19:44:c5:44:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5446df07ff3cb26dfcf4eeb8761fb016caf7f9ee
Validity
Not Before: Mar 29 13:01:05 2026 GMT
Not After : Mar 30 13:01:05 2026 GMT
Subject: CN=fc831e4a61b5293631438c68691a412c80757e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:ff:5e:2d:de:e7:c0:96:e2:db:b5:0f:1e:
c2:3b:50:9f:ca:3a:8a:08:dd:29:97:56:32:07:5d:
df:a5:66:cc:cc:bd:e4:01:2c:bc:fa:7b:3c:eb:29:
d1:76:49:14:5c:af:82:48:7e:fd:c2:d9:e2:e6:0b:
0d:bb:af:bf:e8:e4:44:04:2a:50:bc:73:2a:a8:cb:
d6:c5:5d:e4:1f:50:c3:36:b1:4e:a3:51:d0:83:18:
28:1c:2f:3e:4a:86:fb:68:11:05:f1:7b:10:1b:ed:
ac:2b:64:77:fa:eb:59:59:ff:f1:4a:a7:d8:38:c0:
90:87:f5:7c:d6:e9:b6:5b:7e:d7:76:f6:62:a8:81:
f8:5e:19:58:14:6d:5e:3f:f3:17:86:f5:ac:73:3c:
d7:9d:ec:56:97:02:62:63:0b:33:fe:61:1d:91:e1:
7d:eb:88:f3:f5:76:42:5b:22:1a:3e:f3:87:34:37:
7c:80:54:8f:b7:31:20:68:6c:41:38:0a:86:aa:9d:
df:07:12:4f:79:43:3a:cb:45:51:c6:ce:71:32:5b:
8b:fe:72:21:bd:cd:ab:a0:be:c5:59:a9:02:07:42:
03:c0:0c:15:8f:1b:9a:4d:f6:af:85:6a:15:d1:69:
27:86:78:6a:d9:9d:a6:b1:2d:6c:02:ba:37:da:78:
da:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:83:1E:4A:61:B5:29:36:31:43:8C:68:69:1A:41:2C:80:75:7E:18
X509v3 Authority Key Identifier:
keyid:54:46:DF:07:FF:3C:B2:6D:FC:F4:EE:B8:76:1F:B0:16:CA:F7:F9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cb:27:e3:20:7c:54:0e:74:64:05:28:30:46:59:b3:37:36:
74:61:1c:4d:86:c8:c7:1e:a0:23:d8:7c:13:91:24:24:83:4c:
eb:4b:55:f9:28:ca:f4:11:33:8c:c2:8b:3a:64:17:9f:b7:c1:
cb:cb:77:5c:41:00:cd:b0:6b:ae:37:76:0c:c4:ad:9a:65:d8:
16:31:a0:1a:26:39:03:fa:56:5a:b2:02:fa:e7:46:60:b5:f1:
af:ac:ad:eb:db:26:8c:99:6e:f7:61:1b:64:9f:8b:5e:c1:48:
ae:c7:03:15:73:f3:5b:35:25:3f:c1:42:32:90:40:14:e1:31:
de:5b:45:42:a7:cd:03:52:45:78:01:ca:5f:75:0c:94:86:9e:
95:ee:6c:99:a1:7f:09:e0:1e:0c:70:01:49:f9:75:a9:24:c8:
79:70:48:a9:18:11:18:53:83:76:f6:4c:77:e3:82:13:04:6f:
e5:59:1f:f7:55:c2:7c:49:58:54:79:b4:7e:c1:68:e4:03:c0:
5b:25:d6:8d:4a:2e:34:d3:5a:9b:f1:0f:ec:bb:6a:18:4e:13:
d2:e9:ad:2a:de:f9:8a:85:a0:83:7a:ea:7b:43:bb:ff:be:2d:
3c:f1:7b:2a:e9:fe:db:99:16:b4:56:63:64:3e:57:18:48:7e:
21:40:3e:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rwp0y5Cz9pxXBBlExUQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NDZkZjA3ZmYzY2IyNmRmY2Y0ZWViODc2MWZiMDE2Y2Fm
N2Y5ZWUwHhcNMjYwMzI5MTMwMTA1WhcNMjYwMzMwMTMwMTA1WjAzMTEwLwYDVQQD
EyhmYzgzMWU0YTYxYjUyOTM2MzE0MzhjNjg2OTFhNDEyYzgwNzU3ZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYL/Xi3e58CW4tu1Dx7CO1CfyjqK
CN0pl1YyB13fpWbMzL3kASy8+ns86ynRdkkUXK+CSH79wtni5gsNu6+/6OREBCpQ
vHMqqMvWxV3kH1DDNrFOo1HQgxgoHC8+Sob7aBEF8XsQG+2sK2R3+utZWf/xSqfY
OMCQh/V81um2W37XdvZiqIH4XhlYFG1eP/MXhvWsczzXnexWlwJiYwsz/mEdkeF9
64jz9XZCWyIaPvOHNDd8gFSPtzEgaGxBOAqGqp3fBxJPeUM6y0VRxs5xMluL/nIh
vc2roL7FWakCB0IDwAwVjxuaTfavhWoV0Wknhnhq2Z2msS1sAro32njaCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyDHkphtSk2MUOMaGkaQSyAdX4YMB8GA1UdIwQY
MBaAFFRG3wf/PLJt/PTuuHYfsBbK9/nuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkViZkJfODhzbTM4OU82NGRoLXdGc3IzLWU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zZjg1ZGEtMzExZi00NWI0LWE3NDct
NTY1NjBiMjZhMGRiLzEvVkViZkJfODhzbTM4OU82NGRoLXdGc3IzLWU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zZjg1ZGEtMzExZi00NWI0LWE3NDctNTY1NjBiMjZhMGRi
LzEvVkViZkJfODhzbTM4OU82NGRoLXdGc3IzLWU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcsn4yB8
VA50ZAUoMEZZszc2dGEcTYbIxx6gI9h8E5EkJINM60tV+SjK9BEzjMKLOmQXn7fB
y8t3XEEAzbBrrjd2DMStmmXYFjGgGiY5A/pWWrIC+udGYLXxr6yt69smjJlu92Eb
ZJ+LXsFIrscDFXPzWzUlP8FCMpBAFOEx3ltFQqfNA1JFeAHKX3UMlIaele5smaF/
CeAeDHABSfl1qSTIeXBIqRgRGFODdvZMd+OCEwRv5Vkf91XCfElYVHm0fsFo5APA
WyXWjUouNNNam/EP7LtqGE4T0umtKt75ioWgg3rqe0O7/74tPPF7Kun+25kWtFZj
ZD5XGEh+IUA+FA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:30 2026 by rpki-client