Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
File: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft (raw, json)
Hash identifier: ndjI1jAt/+qDwN6B1+9j1g09Hj7n8m1ETkFo5cuxdbg=
Subject key identifier: B7:AE:79:71:4D:45:37:A1:CE:E4:2C:45:1D:F3:1B:99:4F:0B:DC:99
Authority key identifier: 56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C
Certificate issuer: /CN=5647798f253c724eb07f2e8ad8c2ed949436499c
Certificate serial: 019CAD90281E6F4D5BDB8CE7100E2FB3AD0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
Manifest number: 0335
Signing time: Mon 02 Mar 2026 08:00:31 +0000
Manifest this update: Mon 02 Mar 2026 08:00:31 +0000
Manifest next update: Tue 03 Mar 2026 08:00:31 +0000
Files and hashes: 1: 1MRUxxI-MJ5URuxEnbVPosa96BE.roa (hash: ybJfJTh+qledOSXFQ1Rpq1+qpwILYkG/vUQqmage5L0=)
2: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl (hash: ZNjNWlThjuCcrv3+Fv+7aijikR5bQSjoDmsgvC3+liA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:28:1e:6f:4d:5b:db:8c:e7:10:0e:2f:b3:ad:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5647798f253c724eb07f2e8ad8c2ed949436499c
Validity
Not Before: Mar 2 08:00:31 2026 GMT
Not After : Mar 3 08:00:31 2026 GMT
Subject: CN=b7ae79714d4537a1cee42c451df31b994f0bdc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:94:8f:9a:47:c5:48:80:92:db:8a:6d:41:7c:
50:34:18:36:95:b2:9a:d4:21:1b:41:ea:1e:0e:98:
24:9e:3d:c0:12:01:fe:b1:be:fd:d4:ea:57:86:67:
a1:c5:bf:e4:60:9e:70:5f:6c:b7:d2:d5:93:8b:3e:
3b:39:a3:d3:e9:4a:73:1d:28:db:48:0f:1e:96:24:
d4:48:3a:2f:aa:9c:c4:25:8c:af:05:20:61:b4:23:
eb:2d:38:a2:3d:1b:95:60:d2:d7:39:45:9c:41:8c:
c4:32:6a:ab:19:20:7b:c6:8f:b6:76:be:60:7a:4a:
78:30:2e:a0:bf:33:c4:b6:f7:1c:0c:ca:74:eb:8c:
0e:7b:57:f1:77:af:38:0e:ba:2f:81:f6:68:4e:61:
16:3f:d9:b7:e1:ae:8f:6e:3d:72:3a:b4:d0:6d:c0:
ca:1f:2f:a0:8b:b8:d9:d5:20:1e:8d:cc:b4:ea:de:
4b:4b:73:d0:17:9c:41:b5:44:79:63:e4:b5:19:24:
e3:b4:a7:80:fb:42:a1:56:1b:96:ff:54:20:a8:c6:
90:29:16:e5:c6:cc:81:14:2d:da:b5:42:25:92:e9:
1a:8f:56:6b:c1:e7:7c:89:1d:b2:32:e0:d3:5b:e6:
70:80:8a:4d:4c:c8:ca:85:ab:11:03:13:5b:e8:6e:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AE:79:71:4D:45:37:A1:CE:E4:2C:45:1D:F3:1B:99:4F:0B:DC:99
X509v3 Authority Key Identifier:
keyid:56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:03:76:6f:d3:d3:17:e4:b6:83:ab:92:8f:0f:73:f6:32:0a:
fd:88:b6:32:6f:e5:fd:a1:68:b1:10:cb:b2:72:9e:dd:ce:b4:
b3:de:cf:80:2f:2a:23:84:68:b1:f6:27:46:ba:bf:06:55:1d:
f7:1c:31:5f:e6:56:f3:9c:e7:52:54:34:e9:b5:f0:82:e6:9f:
f9:33:31:0d:f5:d7:dd:08:f3:a7:ad:49:e7:7d:06:5f:9f:69:
fd:05:54:96:ac:81:4c:18:ec:9b:41:b4:b6:45:df:df:1b:33:
5a:35:b5:c9:8b:23:10:05:30:d9:4e:c7:67:56:09:9a:2f:46:
43:8e:c2:9d:f6:d5:c2:88:d7:82:9e:ef:76:c2:cc:f9:64:d6:
d1:c8:4b:5a:56:74:6f:37:99:e4:57:da:c4:15:26:39:cc:74:
85:a0:0a:24:95:29:e7:53:64:93:1f:41:53:85:ea:41:c5:7d:
40:a3:87:69:d8:7b:03:5c:b2:41:89:b7:68:00:11:34:26:84:
90:e2:8d:ee:36:ee:6c:07:4e:b5:38:b5:69:7b:a3:5a:6d:69:
dd:c9:37:77:e0:64:fb:25:2c:63:fa:94:2f:31:54:e8:5b:eb:
f2:4a:39:0f:94:53:e4:b5:44:e9:74:c0:fb:47:dc:07:4d:d1:
bf:07:d3:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkCgeb01b24znEA4vs60PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NDc3OThmMjUzYzcyNGViMDdmMmU4YWQ4YzJlZDk0OTQz
NjQ5OWMwHhcNMjYwMzAyMDgwMDMxWhcNMjYwMzAzMDgwMDMxWjAzMTEwLwYDVQQD
EyhiN2FlNzk3MTRkNDUzN2ExY2VlNDJjNDUxZGYzMWI5OTRmMGJkYzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZSPmkfFSICS24ptQXxQNBg2lbKa
1CEbQeoeDpgknj3AEgH+sb791OpXhmehxb/kYJ5wX2y30tWTiz47OaPT6UpzHSjb
SA8eliTUSDovqpzEJYyvBSBhtCPrLTiiPRuVYNLXOUWcQYzEMmqrGSB7xo+2dr5g
ekp4MC6gvzPEtvccDMp064wOe1fxd684DrovgfZoTmEWP9m34a6Pbj1yOrTQbcDK
Hy+gi7jZ1SAejcy06t5LS3PQF5xBtUR5Y+S1GSTjtKeA+0KhVhuW/1QgqMaQKRbl
xsyBFC3atUIlkukaj1Zrwed8iR2yMuDTW+ZwgIpNTMjKhasRAxNb6G7VCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeueXFNRTehzuQsRR3zG5lPC9yZMB8GA1UdIwQY
MBaAFFZHeY8lPHJOsH8uitjC7ZSUNkmcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80YzRmNjYtOTAzOS00ZmIxLWJkNDkt
MWE0YjZlZGIwM2E3LzEvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC80YzRmNjYtOTAzOS00ZmIxLWJkNDktMWE0YjZlZGIwM2E3
LzEvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwN2b9PT
F+S2g6uSjw9z9jIK/Yi2Mm/l/aFosRDLsnKe3c60s97PgC8qI4RosfYnRrq/BlUd
9xwxX+ZW85znUlQ06bXwguaf+TMxDfXX3Qjzp61J530GX59p/QVUlqyBTBjsm0G0
tkXf3xszWjW1yYsjEAUw2U7HZ1YJmi9GQ47CnfbVwojXgp7vdsLM+WTW0chLWlZ0
bzeZ5FfaxBUmOcx0haAKJJUp51Nkkx9BU4XqQcV9QKOHadh7A1yyQYm3aAARNCaE
kOKN7jbubAdOtTi1aXujWm1p3ck3d+Bk+yUsY/qULzFU6Fvr8ko5D5RT5LVE6XTA
+0fcB03RvwfTyQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:12 2026 by rpki-client