Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
File: VrVQVQ1WQYCx333rW1jTprES5-M.mft (raw, json)
Hash identifier: CrJKmaXQW8g64hyOIUJnuZynuk2RjFHkdcg20xcwxNk=
Subject key identifier: C9:08:76:0D:60:4A:9E:1E:09:8E:DE:A9:3C:5E:38:D3:60:B2:08:74
Authority key identifier: 56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
Certificate issuer: /CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Certificate serial: 019D9B5088859E0C8D461079664755AAF2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
Manifest number: 0E58
Signing time: Fri 17 Apr 2026 12:00:39 +0000
Manifest this update: Fri 17 Apr 2026 12:00:39 +0000
Manifest next update: Sat 18 Apr 2026 12:00:39 +0000
Files and hashes: 1: 6wW52SOqWXrfAlhosP3ynpLxyA0.roa (hash: FwT8E7oaMMyN8V9+/04Bhii7J8JtbQGmipn/OxYLQDA=)
2: VrVQVQ1WQYCx333rW1jTprES5-M.crl (hash: H6b6rRJMF9mvHf1sMU/Cep9EnQrnuPVuuGffDcdZAK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:88:85:9e:0c:8d:46:10:79:66:47:55:aa:f2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Validity
Not Before: Apr 17 12:00:39 2026 GMT
Not After : Apr 18 12:00:39 2026 GMT
Subject: CN=c908760d604a9e1e098edea93c5e38d360b20874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:98:c0:7b:08:06:eb:08:f8:4f:d4:78:80:
a8:dc:ea:26:3a:1d:21:32:44:a4:51:83:47:6f:15:
f3:9f:d1:bc:9a:86:97:1c:b5:92:31:6d:86:d4:ef:
be:7d:f6:46:bc:0a:4a:92:95:03:bd:e3:8a:ed:3a:
c0:2e:03:f1:73:84:5c:26:45:64:a8:72:ba:87:f3:
98:4b:81:db:2d:37:5b:c1:f7:d5:fa:35:ad:af:b1:
f5:a2:d5:2a:2c:e6:11:26:79:25:2d:76:76:28:4b:
bd:7a:30:26:53:8b:71:9e:5e:ca:be:8d:38:f9:8a:
e5:ad:b7:b7:5b:b0:98:97:84:52:99:98:98:f8:4f:
5c:8d:35:f9:19:09:fb:04:a6:a5:13:06:03:d8:a5:
3f:db:28:e0:9a:43:61:c2:60:bf:73:a1:6f:81:4c:
3d:f5:12:f7:4b:2f:60:5e:3c:b9:96:27:80:a8:b5:
58:94:fd:40:82:dd:7e:33:c2:cc:ac:28:64:cd:dd:
09:45:aa:d4:3e:2c:36:c9:30:1e:11:00:c6:07:82:
9f:bf:54:8b:af:dd:68:07:c0:6b:f4:92:ff:a1:c0:
9f:98:69:ce:69:99:21:c7:c6:f3:76:ac:17:e6:0a:
1a:1b:45:fb:70:e2:fc:db:4f:23:a8:e4:f9:18:be:
b4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:08:76:0D:60:4A:9E:1E:09:8E:DE:A9:3C:5E:38:D3:60:B2:08:74
X509v3 Authority Key Identifier:
keyid:56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ad:e9:38:39:e1:f6:55:22:7f:1b:80:0f:ca:b7:19:c9:fd:
df:f8:63:4a:dd:8a:d4:bb:bc:15:a7:b1:d0:7f:95:a5:de:78:
87:56:14:91:d2:15:f0:24:43:8e:03:27:5f:ac:65:95:6a:53:
0f:b9:1d:ef:c1:d1:0a:74:97:29:f1:8c:a2:db:ab:41:c7:b2:
d7:89:a3:b6:3d:59:f4:3e:2a:4e:c0:fe:54:bc:8a:31:14:4a:
f8:ae:17:97:aa:e6:91:a9:d6:9f:70:f5:f8:78:43:8a:bd:ba:
f2:ba:02:00:c7:fd:38:b4:ad:37:c5:00:65:67:f3:0e:86:5c:
76:c6:72:04:ac:08:98:d6:78:0d:93:b6:2e:ca:aa:26:40:c3:
54:a5:80:b6:8c:be:b3:a5:ff:8c:9b:18:89:44:e1:51:c3:1b:
e5:b7:04:6e:88:61:93:ed:c8:5c:ef:7d:c2:bb:44:4f:bd:d4:
14:1f:1f:83:fd:3a:79:1e:9c:5a:9e:05:ec:a8:48:ae:f5:e1:
5f:50:82:5b:f4:7f:20:92:8c:ec:c3:89:a2:0f:16:a5:e3:b9:
5e:77:c9:1e:1e:32:74:a1:0c:11:f8:67:bd:58:0d:fa:15:ce:
02:73:62:d1:e3:f3:dc:85:01:43:15:a4:84:0b:cb:38:6f:68:
8c:d9:c4:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUIiFngyNRhB5ZkdVqvLhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YjU1MDU1MGQ1NjQxODBiMWRmN2RlYjViNThkM2E2YjEx
MmU3ZTMwHhcNMjYwNDE3MTIwMDM5WhcNMjYwNDE4MTIwMDM5WjAzMTEwLwYDVQQD
EyhjOTA4NzYwZDYwNGE5ZTFlMDk4ZWRlYTkzYzVlMzhkMzYwYjIwODc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYGYwHsIBusI+E/UeICo3OomOh0h
MkSkUYNHbxXzn9G8moaXHLWSMW2G1O++ffZGvApKkpUDveOK7TrALgPxc4RcJkVk
qHK6h/OYS4HbLTdbwffV+jWtr7H1otUqLOYRJnklLXZ2KEu9ejAmU4txnl7Kvo04
+Yrlrbe3W7CYl4RSmZiY+E9cjTX5GQn7BKalEwYD2KU/2yjgmkNhwmC/c6FvgUw9
9RL3Sy9gXjy5lieAqLVYlP1Agt1+M8LMrChkzd0JRarUPiw2yTAeEQDGB4Kfv1SL
r91oB8Br9JL/ocCfmGnOaZkhx8bzdqwX5goaG0X7cOL8208jqOT5GL60VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkIdg1gSp4eCY7eqTxeONNgsgh0MB8GA1UdIwQY
MBaAFFa1UFUNVkGAsd9961tY06axEufjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJWUVZRMVdRWUN4MzMzclcxalRwckVTNS1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iZWFkN2YtNDgwZC00ODQxLWI3N2Qt
ZjBlYjEzMTBlN2E3LzEvVnJWUVZRMVdRWUN4MzMzclcxalRwckVTNS1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iZWFkN2YtNDgwZC00ODQxLWI3N2QtZjBlYjEzMTBlN2E3
LzEvVnJWUVZRMVdRWUN4MzMzclcxalRwckVTNS1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG63pODnh
9lUifxuAD8q3Gcn93/hjSt2K1Lu8Faex0H+Vpd54h1YUkdIV8CRDjgMnX6xllWpT
D7kd78HRCnSXKfGMoturQcey14mjtj1Z9D4qTsD+VLyKMRRK+K4Xl6rmkanWn3D1
+HhDir268roCAMf9OLStN8UAZWfzDoZcdsZyBKwImNZ4DZO2LsqqJkDDVKWAtoy+
s6X/jJsYiUThUcMb5bcEbohhk+3IXO99wrtET73UFB8fg/06eR6cWp4F7KhIrvXh
X1CCW/R/IJKM7MOJog8WpeO5XnfJHh4ydKEMEfhnvVgN+hXOAnNi0ePz3IUBQxWk
hAvLOG9ojNnE1w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:08 2026 by rpki-client