Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
File: VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft (raw, json)
Hash identifier: z0JwHXLqxr40HueER3nUvMr8vVn7XV20FuwoPAgF3lw=
Subject key identifier: 15:86:85:31:60:5A:A1:5A:ED:98:BA:15:ED:AD:93:A8:0C:6E:A4:A3
Authority key identifier: 54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D
Certificate issuer: /CN=54495a2f41cd105aef06f2870a76339801edb90d
Certificate serial: 019CAC7DCD38DE0B37180D575B9AD563A38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
Manifest number: 0437
Signing time: Mon 02 Mar 2026 03:00:51 +0000
Manifest this update: Mon 02 Mar 2026 03:00:51 +0000
Manifest next update: Tue 03 Mar 2026 03:00:51 +0000
Files and hashes: 1: 24NDosuGOzoLKVetD4UFYNcQ4SA.roa (hash: x73nU2X10gXdOf1oB089+xGubJOyS5xtYbEaoPCCv+4=)
2: VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl (hash: FPrR1qrXtnuC5bokIn/20jrDe8yK0Sa0sXvRLkk0MO4=)
3: ixPSDov5is1CTdWPuI6nUpxYEdo.roa (hash: j30+Tn85DLKw4a0VclBr/LX3MiFqXcwbshmPsr6R/Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:cd:38:de:0b:37:18:0d:57:5b:9a:d5:63:a3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54495a2f41cd105aef06f2870a76339801edb90d
Validity
Not Before: Mar 2 03:00:51 2026 GMT
Not After : Mar 3 03:00:51 2026 GMT
Subject: CN=15868531605aa15aed98ba15edad93a80c6ea4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4e:99:9c:04:b9:d3:b3:fd:44:40:f9:a2:99:
fc:97:e6:ec:f5:66:80:2d:dc:3f:ee:07:d9:5d:06:
65:59:f7:bd:74:26:59:44:6f:b7:27:6f:0c:26:78:
64:af:0d:a2:38:69:35:b5:13:17:31:29:ad:d9:bd:
bd:6e:3b:cf:00:a9:93:0b:ed:bb:ee:a6:03:99:5b:
4d:03:1f:1a:49:22:ab:11:e8:2b:62:d5:06:5b:91:
6a:25:79:bc:9f:c5:cc:c3:7d:aa:2d:30:81:c1:55:
16:b7:9b:ec:5d:1b:d1:9f:d0:c8:e9:72:b0:63:5d:
e0:dc:d5:1b:6a:b2:a2:91:cc:ca:19:fe:c1:69:06:
48:b5:db:11:d2:ec:08:62:b6:df:cc:31:4b:8c:6c:
5c:e3:3b:95:10:08:25:a2:9a:56:7d:16:3c:a7:8a:
40:60:a1:91:c3:74:9c:e9:0c:36:a9:a6:26:86:4d:
4a:a7:28:0a:eb:78:73:6a:78:f5:9a:23:d7:b9:79:
b8:5b:3e:c9:04:d5:76:2f:97:7d:4e:36:f1:78:1c:
e0:f4:bf:4c:51:eb:56:74:7a:04:e5:55:ab:ec:c1:
f7:81:63:5f:ee:a3:11:ad:1c:39:1f:4e:d0:b1:b3:
67:22:98:c9:d4:9a:fd:9b:f0:40:9b:96:2d:ab:fe:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:86:85:31:60:5A:A1:5A:ED:98:BA:15:ED:AD:93:A8:0C:6E:A4:A3
X509v3 Authority Key Identifier:
keyid:54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:52:73:3a:bb:3c:9d:d9:08:53:4e:83:27:ff:09:47:4c:26:
30:33:48:ba:78:4e:28:34:c0:08:45:74:24:01:5d:a4:b8:9f:
ab:00:a8:77:6e:b8:d1:26:24:89:f3:3f:c6:b8:ba:f0:bf:11:
2b:eb:a8:e5:e5:7a:ab:f2:c8:5c:3e:1c:c6:96:e5:6d:77:6d:
8e:11:7a:f1:6f:ce:15:64:03:9e:ad:47:c1:da:ec:09:5b:af:
b2:7e:01:95:52:a5:77:72:d6:5b:4d:d9:52:df:23:8e:9f:6e:
45:df:7b:76:be:db:bd:ea:09:0a:99:e7:8e:aa:e3:a7:11:51:
47:52:97:0a:f7:ca:72:6b:33:21:7d:11:ee:9d:7d:88:3a:4e:
92:ac:9b:5d:21:df:a9:ec:15:80:b8:6f:c8:ba:c3:e5:a6:c4:
48:ef:4a:71:4f:54:5b:df:8d:6d:12:33:a0:08:62:d4:27:69:
de:32:bd:89:6b:cd:e4:ea:e4:c0:df:28:5e:d5:29:28:47:26:
5c:92:a3:0b:ce:f0:fa:19:88:56:71:4f:65:c8:4d:57:a7:97:
03:49:13:d0:db:19:9f:1c:3b:d5:2f:0d:4f:9d:42:1f:c3:2a:
30:20:9a:54:6c:fa:b4:ad:0e:73:1e:b1:9b:20:1c:63:9a:6d:
c6:42:95:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfc043gs3GA1XW5rVY6OOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NDk1YTJmNDFjZDEwNWFlZjA2ZjI4NzBhNzYzMzk4MDFl
ZGI5MGQwHhcNMjYwMzAyMDMwMDUxWhcNMjYwMzAzMDMwMDUxWjAzMTEwLwYDVQQD
EygxNTg2ODUzMTYwNWFhMTVhZWQ5OGJhMTVlZGFkOTNhODBjNmVhNGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA706ZnAS507P9RED5opn8l+bs9WaA
Ldw/7gfZXQZlWfe9dCZZRG+3J28MJnhkrw2iOGk1tRMXMSmt2b29bjvPAKmTC+27
7qYDmVtNAx8aSSKrEegrYtUGW5FqJXm8n8XMw32qLTCBwVUWt5vsXRvRn9DI6XKw
Y13g3NUbarKikczKGf7BaQZItdsR0uwIYrbfzDFLjGxc4zuVEAgloppWfRY8p4pA
YKGRw3Sc6Qw2qaYmhk1KpygK63hzanj1miPXuXm4Wz7JBNV2L5d9TjbxeBzg9L9M
UetWdHoE5VWr7MH3gWNf7qMRrRw5H07QsbNnIpjJ1Jr9m/BAm5Ytq/7jWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWGhTFgWqFa7Zi6Fe2tk6gMbqSjMB8GA1UdIwQY
MBaAFFRJWi9BzRBa7wbyhwp2M5gB7bkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVsYUwwSE5FRnJ2QnZLSENuWXptQUh0dVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9kNjdhNTgtMzgwZi00MjdhLTg0OWEt
Zjk5NDBmYTFlMTA4LzEvVkVsYUwwSE5FRnJ2QnZLSENuWXptQUh0dVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9kNjdhNTgtMzgwZi00MjdhLTg0OWEtZjk5NDBmYTFlMTA4
LzEvVkVsYUwwSE5FRnJ2QnZLSENuWXptQUh0dVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1JzOrs8
ndkIU06DJ/8JR0wmMDNIunhOKDTACEV0JAFdpLifqwCod2640SYkifM/xri68L8R
K+uo5eV6q/LIXD4cxpblbXdtjhF68W/OFWQDnq1HwdrsCVuvsn4BlVKld3LWW03Z
Ut8jjp9uRd97dr7bveoJCpnnjqrjpxFRR1KXCvfKcmszIX0R7p19iDpOkqybXSHf
qewVgLhvyLrD5abESO9KcU9UW9+NbRIzoAhi1Cdp3jK9iWvN5OrkwN8oXtUpKEcm
XJKjC87w+hmIVnFPZchNV6eXA0kT0NsZnxw71S8NT51CH8MqMCCaVGz6tK0Ocx6x
myAcY5ptxkKV8g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:37 2026 by rpki-client