Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
File: vjxU0e3KaS9Eydo4NALCT95yNQc.mft (raw, json)
Hash identifier: u589vGaMiNnY3P3u38QrIohWH3sBrTn2pIKw9QO+w/Q=
Subject key identifier: 5F:67:17:A3:05:61:5D:25:0C:96:07:C0:0A:15:C8:E7:57:15:42:4C
Authority key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
Certificate issuer: /CN=be3c54d1edca692f44c9da383402c24fde723507
Certificate serial: 019CAEA3396B199C83BADBA07A7D885B5522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
Manifest number: 17DB
Signing time: Mon 02 Mar 2026 13:00:58 +0000
Manifest this update: Mon 02 Mar 2026 13:00:58 +0000
Manifest next update: Tue 03 Mar 2026 13:00:58 +0000
Files and hashes: 1: CIRhprz3rBBOPNEdy3jnFyLtmiA.roa (hash: z/XfH3Aycu8JqZsvCP3U4kd6hBotdVQ6hRO0n7omiP8=)
2: vjxU0e3KaS9Eydo4NALCT95yNQc.crl (hash: U9yfpdD++hnndY+QgOlsWGPhAG3kTkhy1F4Cdp5si8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:39:6b:19:9c:83:ba:db:a0:7a:7d:88:5b:55:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3c54d1edca692f44c9da383402c24fde723507
Validity
Not Before: Mar 2 13:00:58 2026 GMT
Not After : Mar 3 13:00:58 2026 GMT
Subject: CN=5f6717a305615d250c9607c00a15c8e75715424c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:93:45:76:5f:33:80:4c:56:29:c3:d3:bf:
25:7b:ce:65:b8:2c:74:d4:33:82:1d:3c:33:53:89:
5f:ae:4c:bf:62:dc:dc:58:77:33:ad:83:d2:58:d8:
93:12:73:98:d8:71:38:08:34:c6:b8:c8:ad:57:d8:
7c:92:75:fb:ea:97:fb:ad:e4:89:ec:2c:6f:27:f4:
45:fe:da:ec:64:18:35:68:16:e9:b1:2c:a1:e0:2b:
f8:8e:fe:f3:76:29:30:07:be:d2:12:33:fa:2e:5e:
22:9d:64:fe:9b:93:5d:1a:eb:a0:35:12:33:81:7d:
f9:04:6c:7a:18:b1:c3:ec:e8:b6:9a:22:5e:b5:28:
c3:72:4b:b8:8e:97:0f:b6:01:e3:b8:87:b4:f4:dc:
4d:5c:e0:68:db:8c:63:42:e2:4e:a7:64:62:3d:fc:
4b:bc:b9:f3:80:fa:4e:a3:e1:d0:af:92:60:40:11:
8c:2f:45:52:ef:2d:df:95:f4:bc:d7:ed:ab:61:11:
f5:14:c1:66:ae:15:aa:1a:ef:fb:85:1c:bc:c9:d6:
7f:33:8c:4a:01:26:4c:5a:48:59:04:a6:50:58:00:
6d:6c:a4:a6:dc:ba:9a:e6:60:8f:c8:c5:1c:90:87:
53:b5:bc:99:64:ab:91:31:ed:22:a6:9f:9f:9c:c6:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:67:17:A3:05:61:5D:25:0C:96:07:C0:0A:15:C8:E7:57:15:42:4C
X509v3 Authority Key Identifier:
keyid:BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a9:30:1b:b5:d6:48:fc:9b:96:1e:0a:f4:f6:d9:2e:2e:5b:
8a:a9:d6:36:ab:dd:79:13:c7:3b:b5:3a:4e:73:6f:2e:28:51:
f3:f8:34:44:40:aa:f0:04:45:1c:10:a4:11:07:05:c3:6b:66:
10:f8:8e:8c:9e:e8:7b:09:2a:55:f8:39:fa:d8:7d:a4:b4:80:
9a:6b:50:33:62:07:c5:50:72:33:3a:f8:11:4f:12:0c:5d:ff:
44:f0:8a:ea:17:8b:19:bc:d0:56:6e:2b:39:d5:19:38:5a:1d:
49:35:77:29:ed:43:d8:10:ad:4d:ee:f8:b9:1b:41:31:67:03:
a6:26:56:df:1c:3e:c6:f1:67:52:e8:f6:a0:54:a8:3d:73:da:
96:f6:42:0d:35:db:87:1f:96:d9:93:34:cd:82:a0:b5:83:42:
7a:d5:d1:90:be:d3:93:e9:59:f2:7c:f8:d9:aa:14:0f:98:8c:
eb:4a:48:ea:80:4b:fa:dd:b6:7b:86:9a:48:e9:49:73:d8:b6:
9f:8e:c9:d8:b0:da:e8:57:5b:ab:e5:3a:e5:60:d0:49:5f:16:
16:70:f0:bc:e2:2b:2c:97:c6:29:ba:c0:11:62:66:d6:5a:7c:
11:5f:99:6f:22:cd:f4:61:ad:78:06:f7:f1:a4:cd:5d:1d:c3:
42:06:4f:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuozlrGZyDutugen2IW1UiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlM2M1NGQxZWRjYTY5MmY0NGM5ZGEzODM0MDJjMjRmZGU3
MjM1MDcwHhcNMjYwMzAyMTMwMDU4WhcNMjYwMzAzMTMwMDU4WjAzMTEwLwYDVQQD
Eyg1ZjY3MTdhMzA1NjE1ZDI1MGM5NjA3YzAwYTE1YzhlNzU3MTU0MjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohaTRXZfM4BMVinD078le85luCx0
1DOCHTwzU4lfrky/YtzcWHczrYPSWNiTEnOY2HE4CDTGuMitV9h8knX76pf7reSJ
7CxvJ/RF/trsZBg1aBbpsSyh4Cv4jv7zdikwB77SEjP6Ll4inWT+m5NdGuugNRIz
gX35BGx6GLHD7Oi2miJetSjDcku4jpcPtgHjuIe09NxNXOBo24xjQuJOp2RiPfxL
vLnzgPpOo+HQr5JgQBGML0VS7y3flfS81+2rYRH1FMFmrhWqGu/7hRy8ydZ/M4xK
ASZMWkhZBKZQWABtbKSm3Lqa5mCPyMUckIdTtbyZZKuRMe0ipp+fnMY4nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9nF6MFYV0lDJYHwAoVyOdXFUJMMB8GA1UdIwQY
MBaAFL48VNHtymkvRMnaODQCwk/ecjUHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmp4VTBlM0thUzlFeWRvNE5BTENUOTV5TlFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZDY3NDUtZTBkNi00MGQwLTg0ZWQt
YzM0OTUzZWRjN2U1LzEvdmp4VTBlM0thUzlFeWRvNE5BTENUOTV5TlFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ZDY3NDUtZTBkNi00MGQwLTg0ZWQtYzM0OTUzZWRjN2U1
LzEvdmp4VTBlM0thUzlFeWRvNE5BTENUOTV5TlFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqkwG7XW
SPyblh4K9PbZLi5biqnWNqvdeRPHO7U6TnNvLihR8/g0RECq8ARFHBCkEQcFw2tm
EPiOjJ7oewkqVfg5+th9pLSAmmtQM2IHxVByMzr4EU8SDF3/RPCK6heLGbzQVm4r
OdUZOFodSTV3Ke1D2BCtTe74uRtBMWcDpiZW3xw+xvFnUuj2oFSoPXPalvZCDTXb
hx+W2ZM0zYKgtYNCetXRkL7Tk+lZ8nz42aoUD5iM60pI6oBL+t22e4aaSOlJc9i2
n47J2LDa6Fdbq+U65WDQSV8WFnDwvOIrLJfGKbrAEWJm1lp8EV+ZbyLN9GGteAb3
8aTNXR3DQgZPgw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:22 2026 by rpki-client