Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
File: VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json)
Hash identifier: SvqvIqr3KO/FUjHtM5uP6sOt1BjUALXM+E50TnbnPgw=
Subject key identifier: 39:61:AF:6D:34:60:36:3E:25:91:6F:8F:24:37:35:A8:A6:52:4C:82
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Certificate issuer: /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial: 019D9A3E27BA1CC760B874DEE931AE00AF58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
Manifest number: 0603
Signing time: Fri 17 Apr 2026 07:00:57 +0000
Manifest this update: Fri 17 Apr 2026 07:00:57 +0000
Manifest next update: Sat 18 Apr 2026 07:00:57 +0000
Files and hashes: 1: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: z74H8uZk6Zjz5OJr5jUZhhlQ+rydL+5jHtGUnTjQ8hQ=)
2: r8T9kW8X8GtCFTRxWjnqQQkGt18.roa (hash: h3aumMGf0ToESbOzhSKHlEo8BiRIXKiUebFOoBpkJJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:27:ba:1c:c7:60:b8:74:de:e9:31:ae:00:af:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
Validity
Not Before: Apr 17 07:00:57 2026 GMT
Not After : Apr 18 07:00:57 2026 GMT
Subject: CN=3961af6d3460363e25916f8f243735a8a6524c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:61:c7:95:f7:e5:63:dc:77:65:72:31:3b:
2c:e7:52:b9:04:05:84:12:c3:58:8d:4d:84:b6:62:
b6:fe:5e:1a:ef:d7:35:76:3c:ca:5b:1f:05:c7:11:
0e:ed:cf:23:68:7f:ba:66:f4:fd:5c:78:71:a2:94:
f9:26:ea:1d:2c:bc:fc:29:56:db:c7:0f:8b:24:13:
5e:83:4e:fc:b8:16:a0:07:bc:0b:b5:7f:f9:f6:f8:
d5:9b:aa:f1:bc:19:5f:42:f1:a0:26:16:94:61:45:
73:97:1e:d2:6f:36:b3:80:21:03:28:1a:cc:f6:ee:
24:84:0d:c9:84:ee:47:d2:09:32:64:67:de:6a:a3:
17:0e:3b:40:68:d9:4e:3c:8b:9d:c7:3f:d5:70:29:
94:2d:8a:da:7e:84:e7:a0:29:04:d9:c8:d3:32:15:
44:fb:b6:8b:6d:68:b1:0e:af:7e:44:48:97:c8:0c:
d6:c7:2e:b7:5b:e0:d9:d8:60:11:16:7f:b0:62:af:
68:ed:3e:88:54:46:dd:d6:21:e6:e5:33:e3:b0:dd:
c6:5e:e6:fe:d4:70:c5:04:a1:bb:5e:02:8b:18:d4:
e7:8e:c6:97:81:33:ec:24:45:15:ec:2f:44:6a:b6:
e8:ad:56:0d:6e:99:55:e0:08:06:34:fb:1b:e8:d2:
ac:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:61:AF:6D:34:60:36:3E:25:91:6F:8F:24:37:35:A8:A6:52:4C:82
X509v3 Authority Key Identifier:
keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:03:d3:45:d0:08:f8:3a:94:46:41:b1:4c:c3:7f:a9:8e:b5:
2f:3d:1d:57:15:ec:f2:14:e3:ee:27:2a:76:6b:c2:44:f0:cc:
63:c5:7c:63:ab:26:3b:58:41:83:3b:6f:f9:15:ed:f1:f1:e1:
3d:26:87:4d:0c:7f:5d:97:8f:1d:87:c5:95:72:b0:4e:c2:64:
62:32:e8:c1:8f:26:7d:8b:a1:23:48:ff:c4:26:c5:ed:33:87:
d2:f2:91:00:86:31:b3:a4:96:ba:3d:05:14:e6:52:18:d7:90:
83:48:37:ed:9d:48:0f:f3:fc:aa:a7:16:16:33:ac:c2:2e:a7:
2e:19:af:f4:60:ee:26:43:bd:56:1e:56:40:64:c9:72:bf:ca:
69:c2:46:13:5b:56:8c:e2:87:b0:9c:4f:47:bc:6c:c2:e6:a6:
3a:7f:09:d7:85:3c:57:b1:80:57:54:fc:a2:3c:59:a6:24:57:
a9:7b:da:6e:a2:dd:48:ba:75:28:9c:6f:a8:b6:52:a8:06:c2:
e6:df:a1:95:2b:c3:62:f1:4b:88:17:60:2f:81:f7:6b:65:1d:
55:4c:ec:40:e3:b8:6e:a4:d4:f1:24:1c:3a:bd:3c:37:9c:9b:
10:7a:d8:5a:7a:26:61:c6:40:26:ba:9b:33:ef:5b:7c:7f:e3:
0f:dd:b0:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPie6HMdguHTe6TGuAK9YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZDRmMjBlNDg4MjA3YjAyNWI3MDAwMGQwOGU2NTNhNjQz
Y2Y3OTAwHhcNMjYwNDE3MDcwMDU3WhcNMjYwNDE4MDcwMDU3WjAzMTEwLwYDVQQD
EygzOTYxYWY2ZDM0NjAzNjNlMjU5MTZmOGYyNDM3MzVhOGE2NTI0YzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH9hx5X35WPcd2VyMTss51K5BAWE
EsNYjU2EtmK2/l4a79c1djzKWx8FxxEO7c8jaH+6ZvT9XHhxopT5JuodLLz8KVbb
xw+LJBNeg078uBagB7wLtX/59vjVm6rxvBlfQvGgJhaUYUVzlx7SbzazgCEDKBrM
9u4khA3JhO5H0gkyZGfeaqMXDjtAaNlOPIudxz/VcCmULYrafoTnoCkE2cjTMhVE
+7aLbWixDq9+REiXyAzWxy63W+DZ2GARFn+wYq9o7T6IVEbd1iHm5TPjsN3GXub+
1HDFBKG7XgKLGNTnjsaXgTPsJEUV7C9EarborVYNbplV4AgGNPsb6NKsdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlhr200YDY+JZFvjyQ3NaimUkyCMB8GA1UdIwQY
MBaAFFbU8g5IggewJbcAANCOZTpkPPeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnRUeURraUNCN0FsdHdBQTBJNWxPbVE4OTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni82ZWI4OTktMTliYy00NWZjLTg2ZGYt
OTA4ZTY5MmNmM2MyLzEvVnRUeURraUNCN0FsdHdBQTBJNWxPbVE4OTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni82ZWI4OTktMTliYy00NWZjLTg2ZGYtOTA4ZTY5MmNmM2My
LzEvVnRUeURraUNCN0FsdHdBQTBJNWxPbVE4OTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwPTRdAI
+DqURkGxTMN/qY61Lz0dVxXs8hTj7icqdmvCRPDMY8V8Y6smO1hBgztv+RXt8fHh
PSaHTQx/XZePHYfFlXKwTsJkYjLowY8mfYuhI0j/xCbF7TOH0vKRAIYxs6SWuj0F
FOZSGNeQg0g37Z1ID/P8qqcWFjOswi6nLhmv9GDuJkO9Vh5WQGTJcr/KacJGE1tW
jOKHsJxPR7xswuamOn8J14U8V7GAV1T8ojxZpiRXqXvabqLdSLp1KJxvqLZSqAbC
5t+hlSvDYvFLiBdgL4H3a2UdVUzsQOO4bqTU8SQcOr08N5ybEHrYWnomYcZAJrqb
M+9bfH/jD92wHQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:05 2026 by rpki-client