Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
File: VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json)
Hash identifier: 0TH6I1iCvJoLvORX720h3uv9w8ZKy/DnzImyNBLL3FM=
Subject key identifier: C3:78:96:DE:D8:2B:CC:92:79:C8:91:5B:31:6C:CC:25:02:36:72:27
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Certificate issuer: /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial: 019CAAFD10B4913BBFFDA801CBCD1FD53D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
Manifest number: 1171
Signing time: Sun 01 Mar 2026 20:00:37 +0000
Manifest this update: Sun 01 Mar 2026 20:00:37 +0000
Manifest next update: Mon 02 Mar 2026 20:00:37 +0000
Files and hashes: 1: K1-czU5faW_445U2vHd4Xx9oQDk.roa (hash: fqXMKEgddrhXAifhyCouf2pJtCE51FJt/AwucTriLDw=)
2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: dlszTYpEncR02R3R1wx+J1l7BGu7ppu4liUq4mi5/Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:10:b4:91:3b:bf:fd:a8:01:cb:cd:1f:d5:3d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
Validity
Not Before: Mar 1 20:00:37 2026 GMT
Not After : Mar 2 20:00:37 2026 GMT
Subject: CN=c37896ded82bcc9279c8915b316ccc2502367227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:39:64:a4:f9:6f:ae:f7:7d:c2:b6:af:a0:f3:
a6:94:64:26:d9:bd:ad:8d:15:6a:86:4b:17:a7:d7:
76:16:9c:22:65:55:45:b9:5e:5e:b7:9c:9f:19:61:
ec:39:6d:cc:24:33:89:00:a7:ed:b9:b6:63:81:d8:
c4:f2:86:0d:34:74:f6:6f:05:56:bf:6e:0a:ac:16:
fd:97:56:f8:90:91:7a:b2:14:50:02:6f:8e:85:28:
f3:54:d7:c0:96:1b:e5:c0:d1:93:e3:07:0f:78:65:
60:8b:19:04:06:d0:8b:cb:59:ad:77:b1:bf:f4:8e:
8e:39:58:14:19:80:57:de:7c:63:29:ca:52:79:7f:
ce:c9:02:55:20:a1:f5:eb:69:36:20:31:a0:aa:63:
74:f2:ac:1d:3a:e2:31:ff:c2:16:70:18:3d:5c:c5:
32:ca:6b:e4:11:53:55:15:7c:e5:c0:36:e6:80:12:
db:b2:a1:22:c9:44:fc:c5:fb:6f:f5:07:5c:f2:cc:
f1:7a:5c:00:7f:a1:12:90:f0:08:ee:58:43:10:69:
6f:23:ab:a9:91:8f:41:32:bb:fa:63:50:8b:18:4b:
c4:de:f4:67:ab:08:9d:80:59:c1:33:68:b4:d4:b3:
7f:b4:12:27:82:b5:37:43:8e:6c:fc:26:0a:ab:28:
5c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:78:96:DE:D8:2B:CC:92:79:C8:91:5B:31:6C:CC:25:02:36:72:27
X509v3 Authority Key Identifier:
keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7e:69:53:58:d9:84:95:ee:b0:33:1a:43:8c:4f:ee:3a:df:
5c:52:5a:e2:d8:6a:78:af:5f:94:25:06:8c:e0:df:13:e4:3d:
07:43:e7:11:f6:61:b9:ba:fa:97:48:6f:05:7f:98:b8:d8:99:
03:b2:e5:3c:1d:2d:2b:b7:d7:2d:f2:77:eb:91:e2:31:d1:fb:
ac:e9:ed:82:fd:eb:d4:5d:a2:d0:a6:95:42:62:77:34:25:f6:
53:33:2d:7f:25:94:49:7c:a3:5e:24:52:2b:58:2c:4c:06:df:
68:29:df:4b:ed:d4:9f:ef:1f:d4:7a:44:f2:b3:60:a9:ad:77:
a0:6f:a4:86:01:63:b7:48:19:f7:bf:f0:4f:75:b4:76:82:32:
0a:ef:97:db:af:88:20:f4:5c:3c:54:c8:64:ff:87:45:34:a2:
2b:61:e5:a3:0d:73:f4:c1:24:3d:67:92:26:b3:54:c8:5b:e2:
99:e0:53:c5:a4:93:7c:c6:e7:8c:e1:01:01:87:18:47:ad:78:
44:44:bb:0e:9e:0e:b4:b7:72:54:c0:c3:2b:ce:48:60:6c:bd:
6b:db:03:2f:2b:4d:ed:0e:9c:74:b7:6a:ad:a7:f7:fe:87:4c:
a1:d8:42:e3:3d:df:12:8c:3b:6e:c9:b6:9c:7d:02:59:dc:68:
58:5f:ca:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/RC0kTu//agBy80f1T1zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MDg2NjFjNmFlZWNhY2Q5YjcxMTc2YTcyZGU5NmM5YjQ1
MDk0MzkwHhcNMjYwMzAxMjAwMDM3WhcNMjYwMzAyMjAwMDM3WjAzMTEwLwYDVQQD
EyhjMzc4OTZkZWQ4MmJjYzkyNzljODkxNWIzMTZjY2MyNTAyMzY3MjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DlkpPlvrvd9wravoPOmlGQm2b2t
jRVqhksXp9d2FpwiZVVFuV5et5yfGWHsOW3MJDOJAKftubZjgdjE8oYNNHT2bwVW
v24KrBb9l1b4kJF6shRQAm+OhSjzVNfAlhvlwNGT4wcPeGVgixkEBtCLy1mtd7G/
9I6OOVgUGYBX3nxjKcpSeX/OyQJVIKH162k2IDGgqmN08qwdOuIx/8IWcBg9XMUy
ymvkEVNVFXzlwDbmgBLbsqEiyUT8xftv9Qdc8szxelwAf6ESkPAI7lhDEGlvI6up
kY9BMrv6Y1CLGEvE3vRnqwidgFnBM2i01LN/tBIngrU3Q45s/CYKqyhcBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMN4lt7YK8ySeciRWzFszCUCNnInMB8GA1UdIwQY
MBaAFFcIZhxq7srNm3EXanLelsm0UJQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVndobUhHcnV5czJiY1JkcWN0Nld5YlJRbERrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82NDdhNGEtZDJmZC00M2UwLThmM2It
NDQxMDgxNjJlNDkyLzEvVndobUhHcnV5czJiY1JkcWN0Nld5YlJRbERrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS82NDdhNGEtZDJmZC00M2UwLThmM2ItNDQxMDgxNjJlNDky
LzEvVndobUhHcnV5czJiY1JkcWN0Nld5YlJRbERrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAX5pU1jZ
hJXusDMaQ4xP7jrfXFJa4thqeK9flCUGjODfE+Q9B0PnEfZhubr6l0hvBX+YuNiZ
A7LlPB0tK7fXLfJ365HiMdH7rOntgv3r1F2i0KaVQmJ3NCX2UzMtfyWUSXyjXiRS
K1gsTAbfaCnfS+3Un+8f1HpE8rNgqa13oG+khgFjt0gZ97/wT3W0doIyCu+X26+I
IPRcPFTIZP+HRTSiK2Hlow1z9MEkPWeSJrNUyFvimeBTxaSTfMbnjOEBAYcYR614
RES7Dp4OtLdyVMDDK85IYGy9a9sDLytN7Q6cdLdqraf3/odModhC4z3fEow7bsm2
nH0CWdxoWF/K8A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:10 2026 by rpki-client