Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
File: VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft (raw, json)
Hash identifier: 8r662cmYf29/V7FIJs8COKeRtAsZU1P4hmuV7fOLmeY=
Subject key identifier: 52:07:E9:9B:3D:FA:34:6F:43:31:6C:AC:DE:CE:AB:86:35:BC:29:F6
Authority key identifier: 54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
Certificate issuer: /CN=5420cc313d6913848e00e1ff5782e394c1f60159
Certificate serial: 01A0C5C5196B0A9CB152668877DB90CC2DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
Manifest number: 026C
Signing time: Mon 21 Sep 2026 21:00:23 +0000
Manifest this update: Mon 21 Sep 2026 21:00:23 +0000
Manifest next update: Tue 22 Sep 2026 21:00:23 +0000
Files and hashes: 1: FEZcGILq0RJkqpR3v0nAOFFCrfU.roa (hash: E1Ip63mxX4LJOavcsggcPzPHjg1eKYsarcFaMSWGofA=)
2: VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl (hash: YnjEPoT3yUZ3Nhm1OhFMTnd5w+29QVbsC9Yz75V5p2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:19:6b:0a:9c:b1:52:66:88:77:db:90:cc:2d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5420cc313d6913848e00e1ff5782e394c1f60159
Validity
Not Before: Sep 21 21:00:23 2026 GMT
Not After : Sep 22 21:00:23 2026 GMT
Subject: CN=5207e99b3dfa346f43316cacdeceab8635bc29f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:bf:9c:6e:d0:2c:fe:6d:32:ca:13:fd:12:
3f:ed:ab:9a:84:d1:63:04:70:04:d0:dc:0b:3a:47:
3b:78:4a:87:33:8a:d5:f9:da:88:c5:57:63:f4:db:
f0:d1:e0:1c:0e:95:5f:15:72:ce:e4:e8:2f:d7:0a:
37:f7:ef:30:ae:0e:88:6d:03:20:ea:20:2d:8a:b6:
86:fd:a4:48:e2:fb:a3:41:5c:f3:c5:64:bf:52:07:
33:fb:1a:da:2c:3a:06:e3:7a:87:9e:51:8c:0a:95:
03:36:6a:98:4b:6d:13:53:63:35:76:28:e8:06:ed:
2b:b5:7d:78:4d:96:2c:b0:68:47:18:66:0d:6c:35:
0f:7a:0b:3d:01:35:53:b9:21:cd:37:80:d6:31:cf:
8b:fa:19:a9:30:9a:fd:96:64:cd:25:41:c2:77:a2:
bc:5b:73:ce:49:2d:07:83:7b:38:5d:ab:dd:eb:d3:
2d:87:27:a8:12:05:e4:ef:5e:f8:c9:a7:fa:06:87:
ba:d0:93:b1:85:73:cb:6f:8d:71:cd:74:6e:64:b7:
ac:fa:d3:db:0c:c7:e3:76:bb:22:7a:fb:d9:f3:80:
33:aa:f9:18:7c:53:03:8a:97:d0:95:0b:19:02:c8:
55:53:9a:d6:dd:60:95:ea:52:4e:23:22:8a:d4:03:
38:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:07:E9:9B:3D:FA:34:6F:43:31:6C:AC:DE:CE:AB:86:35:BC:29:F6
X509v3 Authority Key Identifier:
keyid:54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ac:f3:64:de:cf:92:81:2c:c8:e1:2e:0a:e9:b9:d1:49:0e:
a0:f8:41:a8:1b:14:35:13:cb:0d:48:78:40:dd:41:ee:ed:f5:
23:0f:5a:37:26:c1:27:8b:6a:31:ab:92:21:39:c2:26:44:41:
b3:9b:7a:a9:cd:66:0b:e3:92:71:2b:5a:64:16:02:31:24:6a:
9b:cc:eb:ca:98:e8:66:09:18:1d:33:3a:90:d5:61:b8:85:61:
0f:7b:58:96:63:e8:30:06:54:8d:5d:41:f1:28:34:b9:a1:fd:
6d:69:79:6c:c6:81:6a:3e:8d:58:77:3b:f3:f3:a4:45:d7:69:
9f:b5:4a:06:b9:7f:08:11:cd:18:1c:97:2d:f2:88:61:d6:85:
7c:8a:57:4d:50:a8:92:79:b3:40:9b:64:35:56:7b:84:1f:ff:
d8:4e:7c:d1:7f:81:29:ef:74:69:f3:af:e5:d4:80:ae:1d:dc:
48:b5:58:4b:18:1d:48:5d:56:b0:60:e9:af:87:77:f0:a3:47:
78:ed:82:aa:92:ea:2e:7d:0b:5c:16:eb:7d:35:f0:ed:20:a7:
72:3b:bc:72:04:4e:33:77:0b:f6:17:2f:ba:5e:e3:c4:ba:2b:
3a:8a:85:d6:aa:51:b4:1c:98:34:dc:99:db:e1:19:b1:70:cc:
d8:36:36:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFxRlrCpyxUmaId9uQzC3QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MjBjYzMxM2Q2OTEzODQ4ZTAwZTFmZjU3ODJlMzk0YzFm
NjAxNTkwHhcNMjYwOTIxMjEwMDIzWhcNMjYwOTIyMjEwMDIzWjAzMTEwLwYDVQQD
Eyg1MjA3ZTk5YjNkZmEzNDZmNDMzMTZjYWNkZWNlYWI4NjM1YmMyOWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YO/nG7QLP5tMsoT/RI/7auahNFj
BHAE0NwLOkc7eEqHM4rV+dqIxVdj9Nvw0eAcDpVfFXLO5Ogv1wo39+8wrg6IbQMg
6iAtiraG/aRI4vujQVzzxWS/Ugcz+xraLDoG43qHnlGMCpUDNmqYS20TU2M1dijo
Bu0rtX14TZYssGhHGGYNbDUPegs9ATVTuSHNN4DWMc+L+hmpMJr9lmTNJUHCd6K8
W3POSS0Hg3s4Xavd69MthyeoEgXk7174yaf6Boe60JOxhXPLb41xzXRuZLes+tPb
DMfjdrsievvZ84AzqvkYfFMDipfQlQsZAshVU5rW3WCV6lJOIyKK1AM4fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIH6Zs9+jRvQzFsrN7Oq4Y1vCn2MB8GA1UdIwQY
MBaAFFQgzDE9aROEjgDh/1eC45TB9gFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkNETU1UMXBFNFNPQU9IX1Y0TGpsTUgyQVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jM2MyNDYtYjg3ZS00MGUwLTkyNDYt
ZjBkNWE5YmU3YzJiLzEvVkNETU1UMXBFNFNPQU9IX1Y0TGpsTUgyQVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jM2MyNDYtYjg3ZS00MGUwLTkyNDYtZjBkNWE5YmU3YzJi
LzEvVkNETU1UMXBFNFNPQU9IX1Y0TGpsTUgyQVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6zzZN7P
koEsyOEuCum50UkOoPhBqBsUNRPLDUh4QN1B7u31Iw9aNybBJ4tqMauSITnCJkRB
s5t6qc1mC+OScStaZBYCMSRqm8zrypjoZgkYHTM6kNVhuIVhD3tYlmPoMAZUjV1B
8Sg0uaH9bWl5bMaBaj6NWHc78/OkRddpn7VKBrl/CBHNGByXLfKIYdaFfIpXTVCo
knmzQJtkNVZ7hB//2E580X+BKe90afOv5dSArh3cSLVYSxgdSF1WsGDpr4d38KNH
eO2CqpLqLn0LXBbrfTXw7SCncju8cgROM3cL9hcvul7jxLorOoqF1qpRtByYNNyZ
2+EZsXDM2DY2Pw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:34:37 2026 by rpki-client