Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
File: vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json)
Hash identifier: zYSCT+yOQPsKWZD45qw1tOHalFoZ+d6OEpnARgsmqSA=
Subject key identifier: B8:CE:4F:E4:91:66:89:5E:B5:48:D3:8B:95:31:A8:83:EE:CF:3F:01
Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
Certificate issuer: /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Certificate serial: 019CABA2565A1829FA73A65318C8098DF5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
Manifest number: 13E1
Signing time: Sun 01 Mar 2026 23:01:08 +0000
Manifest this update: Sun 01 Mar 2026 23:01:08 +0000
Manifest next update: Mon 02 Mar 2026 23:01:08 +0000
Files and hashes: 1: kq-hWSmz-MFl73s5gbREYrag4Mo.roa (hash: F1nBzA9PPwvdvb6M3PbhCg7MtCLOKfzqRqmw7zMeMt0=)
2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: WP8PccAqpAee3zbfsivzxRMzdZuLFZ3RhrihcxMZvcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:56:5a:18:29:fa:73:a6:53:18:c8:09:8d:f5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Validity
Not Before: Mar 1 23:01:08 2026 GMT
Not After : Mar 2 23:01:08 2026 GMT
Subject: CN=b8ce4fe49166895eb548d38b9531a883eecf3f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:61:23:9b:2a:91:d5:2e:00:e1:9a:db:db:
32:99:68:be:60:82:73:67:c5:c1:9a:f3:93:3f:e7:
f1:18:56:65:83:f9:53:c8:8a:be:76:f0:8c:6e:bb:
d0:3c:72:5f:69:b1:ed:95:18:d9:70:b0:40:ca:cd:
a6:f0:88:48:f9:be:1c:c9:ce:cb:fd:d5:31:25:ed:
27:9b:b2:d8:be:7d:54:97:b2:60:37:56:4a:88:0b:
36:c8:5d:6a:ef:c7:10:70:9a:b6:20:0a:1c:81:88:
3d:d7:76:ff:a5:b7:75:44:07:4b:7a:a6:b6:ef:8e:
47:77:75:c9:0f:3b:8a:dc:d3:42:3c:09:57:b9:93:
c1:71:20:ab:4e:13:85:23:2a:15:f2:d4:92:01:af:
a7:04:eb:60:8e:48:55:5b:de:6f:17:93:0c:26:55:
4a:de:34:a1:77:0e:e9:4b:c2:1a:cc:6c:68:1a:63:
33:76:79:37:67:d0:1f:f7:4a:9a:3f:2f:df:ef:34:
58:88:f4:ab:9b:6b:49:d7:65:ef:af:f5:ef:5a:10:
e0:1c:c0:51:a6:35:3c:61:e7:e9:95:c6:ff:13:ea:
06:da:a7:46:81:06:48:a6:ff:9a:34:e1:5f:b7:42:
60:d5:fe:a4:4f:a9:2d:f9:8d:dc:6a:37:13:ec:c2:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CE:4F:E4:91:66:89:5E:B5:48:D3:8B:95:31:A8:83:EE:CF:3F:01
X509v3 Authority Key Identifier:
keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6c:72:84:55:ed:7a:6b:37:d2:61:bb:bc:a6:4e:72:7a:62:
d8:84:8b:0a:0a:8f:5e:4a:40:ff:15:88:8a:33:87:03:9f:dd:
56:f3:10:c3:44:05:9b:78:d4:af:57:9c:7c:a3:f8:6c:b6:a0:
fa:b5:10:46:72:e5:8c:95:b3:3c:57:f4:a7:8e:f2:60:b5:2c:
a5:66:74:1e:47:e8:4f:e5:0d:b6:92:82:21:46:15:61:87:5e:
c9:0c:ad:1d:ce:b2:76:a6:9e:98:45:e2:5a:55:79:f8:d7:be:
c5:7a:70:c6:f8:69:fe:b4:c1:a6:49:c2:26:f9:53:b1:52:69:
67:f5:3e:b5:03:73:6d:45:19:61:9b:43:09:69:83:01:f8:59:
ce:13:86:ab:b0:79:3e:39:c8:9b:d7:d4:a0:77:47:2c:d3:85:
f2:e1:16:f4:cd:6e:00:f4:50:1e:bf:bd:bc:d1:19:ba:8f:8f:
f3:c2:32:dc:82:19:a2:c4:34:f3:c7:b5:21:f7:e4:50:00:61:
38:41:42:5d:5a:0e:c5:8f:ae:43:d2:5c:13:71:fe:eb:42:ca:
16:28:94:d0:6c:37:54:ec:e8:9c:b7:c5:ba:a9:13:44:53:44:
25:53:db:48:28:b1:e2:86:a0:d7:65:13:9f:7f:22:cc:43:99:
57:29:4e:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrolZaGCn6c6ZTGMgJjfXnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOWI1NDU4YzIzN2RiNjU4NDhjYjJhY2JlYzZkYjk0MjNm
Y2IzYTYwHhcNMjYwMzAxMjMwMTA4WhcNMjYwMzAyMjMwMTA4WjAzMTEwLwYDVQQD
EyhiOGNlNGZlNDkxNjY4OTVlYjU0OGQzOGI5NTMxYTg4M2VlY2YzZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM1hI5sqkdUuAOGa29symWi+YIJz
Z8XBmvOTP+fxGFZlg/lTyIq+dvCMbrvQPHJfabHtlRjZcLBAys2m8IhI+b4cyc7L
/dUxJe0nm7LYvn1Ul7JgN1ZKiAs2yF1q78cQcJq2IAocgYg913b/pbd1RAdLeqa2
745Hd3XJDzuK3NNCPAlXuZPBcSCrThOFIyoV8tSSAa+nBOtgjkhVW95vF5MMJlVK
3jShdw7pS8IazGxoGmMzdnk3Z9Af90qaPy/f7zRYiPSrm2tJ12Xvr/XvWhDgHMBR
pjU8Yefplcb/E+oG2qdGgQZIpv+aNOFft0Jg1f6kT6kt+Y3cajcT7MJe5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjOT+SRZoletUjTi5UxqIPuzz8BMB8GA1UdIwQY
MBaAFL6bVFjCN9tlhIyyrL7G25Qj/LOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUt
MzcwYjgyZTlmOTBiLzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUtMzcwYjgyZTlmOTBi
LzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmxyhFXt
ems30mG7vKZOcnpi2ISLCgqPXkpA/xWIijOHA5/dVvMQw0QFm3jUr1ecfKP4bLag
+rUQRnLljJWzPFf0p47yYLUspWZ0HkfoT+UNtpKCIUYVYYdeyQytHc6ydqaemEXi
WlV5+Ne+xXpwxvhp/rTBpknCJvlTsVJpZ/U+tQNzbUUZYZtDCWmDAfhZzhOGq7B5
PjnIm9fUoHdHLNOF8uEW9M1uAPRQHr+9vNEZuo+P88Iy3IIZosQ088e1IffkUABh
OEFCXVoOxY+uQ9JcE3H+60LKFiiU0Gw3VOzonLfFuqkTRFNEJVPbSCix4oag12UT
n38izEOZVylO3Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:42 2026 by rpki-client