Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
File: VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft (raw, json)
Hash identifier: x+l0tp71kO+edO9dkOLa9QQirjG9CIB0Q78Fg6WEass=
Subject key identifier: 68:51:AA:AA:EE:56:2D:1F:9A:7C:AD:F6:4D:85:D5:65:21:58:C6:97
Authority key identifier: 54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
Certificate issuer: /CN=5420cc313d6913848e00e1ff5782e394c1f60159
Certificate serial: 019D9AAC0606806D25EC66678EDDD4BB7421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
Manifest number: C8
Signing time: Fri 17 Apr 2026 09:00:57 +0000
Manifest this update: Fri 17 Apr 2026 09:00:57 +0000
Manifest next update: Sat 18 Apr 2026 09:00:57 +0000
Files and hashes: 1: FEZcGILq0RJkqpR3v0nAOFFCrfU.roa (hash: E1Ip63mxX4LJOavcsggcPzPHjg1eKYsarcFaMSWGofA=)
2: VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl (hash: JpIrgGUu+DCLYg93lI8+P9TPJs0jgsk0P/NBcxj6Fa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:06:06:80:6d:25:ec:66:67:8e:dd:d4:bb:74:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5420cc313d6913848e00e1ff5782e394c1f60159
Validity
Not Before: Apr 17 09:00:57 2026 GMT
Not After : Apr 18 09:00:57 2026 GMT
Subject: CN=6851aaaaee562d1f9a7cadf64d85d5652158c697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:9d:04:8d:e7:37:28:54:3c:c4:e2:8f:91:
eb:a2:e5:69:79:32:31:27:47:5f:91:bc:a3:6b:39:
3d:38:de:e3:e1:db:79:4a:9a:24:80:01:71:f7:af:
4a:8e:9f:96:9e:64:94:07:b1:18:19:94:9e:31:bd:
aa:39:0d:63:ca:3a:9f:f6:49:bc:07:38:2e:09:5c:
d8:65:52:2e:2a:26:61:f0:b3:3c:9b:c7:83:be:66:
58:7f:ff:01:de:b2:b4:a0:1e:fc:86:76:8a:0b:a5:
56:3b:e5:d7:64:2c:25:6a:41:03:dd:fc:cc:87:bf:
c0:7e:c7:48:38:9c:4a:84:f1:04:48:3c:7b:86:cc:
0e:a6:64:90:0a:d3:10:fe:19:fd:8a:04:d3:35:0e:
a6:41:ea:e2:24:29:65:58:e9:50:f2:bd:50:03:78:
1f:1a:67:6a:bb:95:30:d5:59:49:a1:6f:91:63:49:
e5:ac:da:f1:55:fc:df:c8:81:b3:ee:03:79:a8:4c:
8e:ab:1d:d2:36:90:b2:f7:08:0d:73:08:aa:2b:e6:
f7:ef:8d:01:a3:69:5d:6f:23:0f:85:0f:48:42:94:
8a:60:8d:0e:c4:cc:dd:5f:62:64:7d:d9:98:07:e9:
d6:4a:57:74:a0:ec:1d:e2:48:39:c6:05:80:fc:5f:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:51:AA:AA:EE:56:2D:1F:9A:7C:AD:F6:4D:85:D5:65:21:58:C6:97
X509v3 Authority Key Identifier:
keyid:54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e8:c7:1d:58:0b:d0:2b:03:27:d7:ff:0f:3b:39:8d:d8:57:
cd:f4:b0:cd:37:ce:90:c6:0e:c3:b2:1c:e6:0b:89:1b:bb:04:
10:59:f4:29:62:bb:52:10:4c:ca:90:77:1a:63:ca:35:a7:64:
02:37:e0:a0:9d:e8:85:96:f5:81:de:8d:6b:8c:8d:45:56:be:
d3:fa:7a:f5:1a:54:8c:11:c3:a1:02:08:08:a4:5c:70:3a:59:
14:b3:74:8b:d4:4b:9b:e5:36:8b:c4:6c:50:1e:8a:be:f3:19:
73:4a:54:6e:d3:4f:1f:d9:28:cb:e5:50:18:59:f6:8f:cf:20:
4a:f3:1a:c6:2d:e7:28:a0:a0:fd:23:1c:68:7f:60:28:7f:cc:
aa:91:67:05:86:3c:42:c5:7f:f6:9b:d3:9c:63:4f:ec:9f:60:
65:23:fc:ea:f0:f7:84:01:c8:d5:6b:58:80:a0:28:6f:65:c6:
7e:0e:ba:c7:62:d3:e7:42:23:d8:8e:b9:f7:f9:84:4d:ff:26:
86:31:1a:6d:69:ad:0f:6b:d9:77:9d:b9:83:af:a8:24:7b:56:
cd:99:18:2a:17:81:78:22:66:1f:da:8d:01:7a:14:3e:f7:d7:
4e:0d:ee:3c:f4:ac:9f:55:64:3d:a9:27:47:8c:54:21:33:2c:
2b:5a:b2:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arAYGgG0l7GZnjt3Uu3QhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MjBjYzMxM2Q2OTEzODQ4ZTAwZTFmZjU3ODJlMzk0YzFm
NjAxNTkwHhcNMjYwNDE3MDkwMDU3WhcNMjYwNDE4MDkwMDU3WjAzMTEwLwYDVQQD
Eyg2ODUxYWFhYWVlNTYyZDFmOWE3Y2FkZjY0ZDg1ZDU2NTIxNThjNjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjudBI3nNyhUPMTij5HrouVpeTIx
J0dfkbyjazk9ON7j4dt5SpokgAFx969Kjp+WnmSUB7EYGZSeMb2qOQ1jyjqf9km8
BzguCVzYZVIuKiZh8LM8m8eDvmZYf/8B3rK0oB78hnaKC6VWO+XXZCwlakED3fzM
h7/AfsdIOJxKhPEESDx7hswOpmSQCtMQ/hn9igTTNQ6mQeriJCllWOlQ8r1QA3gf
Gmdqu5Uw1VlJoW+RY0nlrNrxVfzfyIGz7gN5qEyOqx3SNpCy9wgNcwiqK+b3740B
o2ldbyMPhQ9IQpSKYI0OxMzdX2JkfdmYB+nWSld0oOwd4kg5xgWA/F/nZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhRqqruVi0fmnyt9k2F1WUhWMaXMB8GA1UdIwQY
MBaAFFQgzDE9aROEjgDh/1eC45TB9gFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkNETU1UMXBFNFNPQU9IX1Y0TGpsTUgyQVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jM2MyNDYtYjg3ZS00MGUwLTkyNDYt
ZjBkNWE5YmU3YzJiLzEvVkNETU1UMXBFNFNPQU9IX1Y0TGpsTUgyQVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jM2MyNDYtYjg3ZS00MGUwLTkyNDYtZjBkNWE5YmU3YzJi
LzEvVkNETU1UMXBFNFNPQU9IX1Y0TGpsTUgyQVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOjHHVgL
0CsDJ9f/Dzs5jdhXzfSwzTfOkMYOw7Ic5guJG7sEEFn0KWK7UhBMypB3GmPKNadk
AjfgoJ3ohZb1gd6Na4yNRVa+0/p69RpUjBHDoQIICKRccDpZFLN0i9RLm+U2i8Rs
UB6KvvMZc0pUbtNPH9koy+VQGFn2j88gSvMaxi3nKKCg/SMcaH9gKH/MqpFnBYY8
QsV/9pvTnGNP7J9gZSP86vD3hAHI1WtYgKAob2XGfg66x2LT50Ij2I659/mETf8m
hjEabWmtD2vZd525g6+oJHtWzZkYKheBeCJmH9qNAXoUPvfXTg3uPPSsn1VkPakn
R4xUITMsK1qy1w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:03 2026 by rpki-client