Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
File: VdBq_SbSUiNCenoNX54xWQY_vKM.mft (raw, json)
Hash identifier: fzKqOueupBpjN2+yfVkZCZ3vS6snFsTTd7GDtDCMg5k=
Subject key identifier: BC:A0:6A:BE:8F:7E:0C:B2:5C:C8:58:DE:0E:43:9E:7A:79:B6:84:2C
Authority key identifier: 55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
Certificate issuer: /CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Certificate serial: 019CAEA357868F1ED89B9C5E19548111E9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
Manifest number: 1241
Signing time: Mon 02 Mar 2026 13:01:06 +0000
Manifest this update: Mon 02 Mar 2026 13:01:06 +0000
Manifest next update: Tue 03 Mar 2026 13:01:06 +0000
Files and hashes: 1: 1-bmufN-XpCnOZovUT1MR41BEvYc.roa (hash: QyP6RbLW1JK4g3OkQkBwocjwcbA0t5gS2AtE58Z646c=)
2: VdBq_SbSUiNCenoNX54xWQY_vKM.crl (hash: wm+Nkoc4mrv8afAJZaOUe5TUcW0rSph0BCxRINNt5rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:57:86:8f:1e:d8:9b:9c:5e:19:54:81:11:e9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Validity
Not Before: Mar 2 13:01:06 2026 GMT
Not After : Mar 3 13:01:06 2026 GMT
Subject: CN=bca06abe8f7e0cb25cc858de0e439e7a79b6842c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:de:2a:2f:d0:68:9c:61:63:b3:7e:84:07:a0:
ae:97:fb:d6:3f:a3:b1:db:66:1c:76:67:67:f4:c0:
d6:6f:fa:9c:57:e5:d0:e3:61:f9:b2:34:ea:70:a1:
90:1d:4e:36:e1:96:97:81:e3:d3:18:0b:8a:0e:fe:
3d:28:3f:e9:86:93:e2:94:05:cc:12:ef:cf:9e:59:
ee:56:08:2a:56:bb:90:64:e6:9d:f1:3f:c4:fe:88:
78:b2:bb:ba:a9:1d:9a:53:e2:ae:75:27:4a:6b:bf:
bb:b1:76:6f:bb:c5:bf:3a:b1:50:4a:6c:7a:2f:42:
03:18:06:63:68:5e:d1:cf:42:e9:02:3f:bf:82:7a:
24:2a:72:0b:5a:fe:fd:1e:4c:96:98:0d:a8:4d:9d:
91:b4:16:73:71:95:43:a8:51:d7:4b:2c:15:d2:7d:
6f:e1:71:59:28:57:29:9c:98:6e:e0:c0:4a:31:d5:
68:36:8d:ab:ee:1b:01:85:eb:d6:83:45:0f:35:11:
60:50:80:66:a7:f0:37:c1:b6:f0:b5:bf:b6:85:b7:
36:c4:3f:c0:50:fe:07:07:df:1e:07:fb:65:61:cd:
55:e8:06:b3:4b:b4:9c:f2:a9:b8:b6:4e:fb:8e:82:
14:c5:c0:99:37:57:ed:65:b9:fa:c8:3b:69:55:e0:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A0:6A:BE:8F:7E:0C:B2:5C:C8:58:DE:0E:43:9E:7A:79:B6:84:2C
X509v3 Authority Key Identifier:
keyid:55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ad:7b:ba:a7:d2:0d:58:60:ab:2c:7a:69:a3:dd:7e:f2:c0:
a5:26:43:be:c4:6c:d5:63:10:de:7b:06:77:68:c6:7b:2d:59:
53:74:05:02:ce:f7:48:d4:ce:8d:bc:7c:83:b3:78:34:f9:ad:
87:2c:73:34:85:ab:65:26:ed:cc:b8:5d:29:03:b9:01:0d:04:
ae:a8:28:43:c0:c5:f1:0e:f8:79:9e:61:f5:bb:d6:d9:80:f5:
0e:5b:91:ee:37:ab:30:32:f3:a5:a0:91:c0:42:51:03:2f:3a:
31:36:d8:c9:a4:92:85:80:ee:f0:1c:17:53:9c:41:6e:11:4f:
46:07:69:30:bf:55:2b:c2:39:11:66:e0:df:44:8e:7c:01:1d:
9d:60:c5:aa:48:c0:00:1d:c6:f6:1a:76:77:90:2a:80:e6:b2:
a4:c1:75:7a:cc:71:78:eb:f5:0a:80:72:bb:ed:f2:15:a1:06:
f2:d1:ec:68:89:c5:42:3e:e8:91:73:54:cd:f1:ba:53:44:a4:
ba:6e:75:f1:d3:21:3e:1c:53:55:a5:73:f2:b5:9f:45:18:df:
b1:a2:c8:2e:2b:5d:7d:b3:93:65:e3:5c:7f:0c:df:0c:b8:7d:
50:db:64:85:04:f3:2a:be:52:46:de:b9:53:fd:c6:0d:99:72:
d6:d0:46:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuo1eGjx7Ym5xeGVSBEemqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZDA2YWZkMjZkMjUyMjM0MjdhN2EwZDVmOWUzMTU5MDYz
ZmJjYTMwHhcNMjYwMzAyMTMwMTA2WhcNMjYwMzAzMTMwMTA2WjAzMTEwLwYDVQQD
EyhiY2EwNmFiZThmN2UwY2IyNWNjODU4ZGUwZTQzOWU3YTc5YjY4NDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd4qL9BonGFjs36EB6Cul/vWP6Ox
22Ycdmdn9MDWb/qcV+XQ42H5sjTqcKGQHU424ZaXgePTGAuKDv49KD/phpPilAXM
Eu/PnlnuVggqVruQZOad8T/E/oh4sru6qR2aU+KudSdKa7+7sXZvu8W/OrFQSmx6
L0IDGAZjaF7Rz0LpAj+/gnokKnILWv79HkyWmA2oTZ2RtBZzcZVDqFHXSywV0n1v
4XFZKFcpnJhu4MBKMdVoNo2r7hsBhevWg0UPNRFgUIBmp/A3wbbwtb+2hbc2xD/A
UP4HB98eB/tlYc1V6AazS7Sc8qm4tk77joIUxcCZN1ftZbn6yDtpVeDiJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLygar6PfgyyXMhY3g5Dnnp5toQsMB8GA1UdIwQY
MBaAFFXQav0m0lIjQnp6DV+eMVkGP7yjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmRCcV9TYlNVaU5DZW5vTlg1NHhXUVlfdktNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wNWU5OTQtMzE4ZC00YTU0LWI2Mjkt
MTczZjAwOTZiZDg1LzEvVmRCcV9TYlNVaU5DZW5vTlg1NHhXUVlfdktNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wNWU5OTQtMzE4ZC00YTU0LWI2MjktMTczZjAwOTZiZDg1
LzEvVmRCcV9TYlNVaU5DZW5vTlg1NHhXUVlfdktNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVa17uqfS
DVhgqyx6aaPdfvLApSZDvsRs1WMQ3nsGd2jGey1ZU3QFAs73SNTOjbx8g7N4NPmt
hyxzNIWrZSbtzLhdKQO5AQ0ErqgoQ8DF8Q74eZ5h9bvW2YD1DluR7jerMDLzpaCR
wEJRAy86MTbYyaSShYDu8BwXU5xBbhFPRgdpML9VK8I5EWbg30SOfAEdnWDFqkjA
AB3G9hp2d5AqgOaypMF1esxxeOv1CoByu+3yFaEG8tHsaInFQj7okXNUzfG6U0Sk
um518dMhPhxTVaVz8rWfRRjfsaLILitdfbOTZeNcfwzfDLh9UNtkhQTzKr5SRt65
U/3GDZly1tBG2Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:14:58 2026 by rpki-client