Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier: bXwDxZ7ymgrW4ISREx8uqDC6/0CBKhovPmJNjkGw7Y8=
Subject key identifier: F1:62:DF:DD:CA:C4:B8:68:17:7A:01:67:DB:9D:F4:A4:81:E4:77:0D
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 019CAA58F208D1EFA82B7F4F928D7E3F9CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number: 123A
Signing time: Sun 01 Mar 2026 17:01:21 +0000
Manifest this update: Sun 01 Mar 2026 17:01:21 +0000
Manifest next update: Mon 02 Mar 2026 17:01:21 +0000
Files and hashes: 1: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: D8NZpDTPNiPRmYn2Ld7y7t9z96WnENOu8Qrn0f44awQ=)
2: i7eXSggzIa8jg89Jivwa78vJNEM.roa (hash: UXM3SC+hGfgrD/liPgCeamJJIYAqzLm8hy7hdC8Ta6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:f2:08:d1:ef:a8:2b:7f:4f:92:8d:7e:3f:9c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: Mar 1 17:01:21 2026 GMT
Not After : Mar 2 17:01:21 2026 GMT
Subject: CN=f162dfddcac4b868177a0167db9df4a481e4770d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:51:f6:bd:7a:e4:2a:0d:b5:00:3a:6e:12:b0:
55:84:5d:2e:a4:8f:12:59:12:e0:c4:45:7d:48:cd:
36:61:e6:cd:70:fe:87:05:ac:63:c8:f4:35:97:32:
47:42:a6:25:a2:0d:6c:7e:df:3e:d7:a7:f3:2c:62:
53:7a:e0:75:54:00:03:96:41:71:32:47:bb:0c:24:
72:3e:4f:20:80:0b:9b:ed:4f:14:e8:46:91:5e:4e:
ac:8b:57:24:bf:e3:a4:d7:e3:13:9e:ff:ac:1f:80:
bb:9c:2b:3b:8c:42:12:27:e3:2b:6e:34:91:e6:d3:
e8:94:c1:63:ed:d7:50:b6:dd:93:c3:af:23:c7:f6:
f2:0e:b0:94:e9:d2:25:1e:0c:58:f6:5d:43:83:bb:
51:c2:e6:59:5e:cc:42:ef:3e:ab:f5:e5:2e:09:fa:
12:97:ef:c4:f0:aa:2a:20:8b:4b:62:69:1c:5c:1d:
cb:54:9e:70:68:e1:69:3e:6e:e2:7f:f1:17:f4:79:
59:b4:10:09:74:08:1d:1a:54:f9:28:88:ff:52:df:
ae:78:ed:c7:b4:22:3c:bd:dc:82:b6:7b:fa:19:df:
f1:42:90:23:51:5a:d9:20:dc:63:c8:66:c1:21:8b:
7c:83:29:db:7c:b6:f0:0e:52:9b:ce:3d:38:5a:26:
c3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:62:DF:DD:CA:C4:B8:68:17:7A:01:67:DB:9D:F4:A4:81:E4:77:0D
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f0:87:c2:89:03:cb:0d:ea:06:26:a2:0d:72:7a:cb:41:9a:
80:ae:e2:cd:07:84:fd:62:52:ed:c7:45:1f:43:81:af:d1:ec:
c4:cd:12:3a:99:3f:90:86:11:2e:72:97:c1:20:20:56:02:eb:
a9:75:05:7d:1f:9d:ac:4e:06:4f:ff:2c:20:2d:78:66:cd:d4:
81:8e:0c:dd:dc:74:07:36:56:5e:bc:92:6c:b6:0c:9a:ee:5a:
59:cd:61:5d:32:f6:8f:27:ea:8e:34:92:36:cb:d0:bb:14:13:
c8:3e:53:70:48:6e:44:cd:57:3e:86:10:8c:61:b9:ff:fc:69:
9e:ad:ff:3b:10:31:0a:64:d1:63:9b:2b:d6:4a:f8:67:1d:73:
54:f3:e8:f4:0b:82:1c:a5:4b:b8:3e:2f:b5:c2:5a:22:93:d4:
fd:f8:47:29:59:ac:72:8e:d9:79:72:2a:31:03:8e:e7:b3:e8:
9d:fb:21:9a:ee:ad:12:18:28:ac:55:e8:ad:68:b4:95:d6:80:
09:38:47:21:69:08:5d:1a:e1:31:8e:78:e6:20:ee:12:85:01:
50:a7:ce:07:0b:36:d8:2c:ee:da:c6:2e:5d:95:33:c4:7b:32:
36:45:8e:34:e3:61:71:62:79:71:03:44:89:e4:af:1a:cd:08:
fd:2e:ee:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWPII0e+oK39Pko1+P5zQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MGM0Zjc0MmZkMzI5YTM2ZmNkMjljNGViOTg0ZTVmNDk1
MTVkOTkwHhcNMjYwMzAxMTcwMTIxWhcNMjYwMzAyMTcwMTIxWjAzMTEwLwYDVQQD
EyhmMTYyZGZkZGNhYzRiODY4MTc3YTAxNjdkYjlkZjRhNDgxZTQ3NzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VH2vXrkKg21ADpuErBVhF0upI8S
WRLgxEV9SM02YebNcP6HBaxjyPQ1lzJHQqYlog1sft8+16fzLGJTeuB1VAADlkFx
Mke7DCRyPk8ggAub7U8U6EaRXk6si1ckv+Ok1+MTnv+sH4C7nCs7jEISJ+MrbjSR
5tPolMFj7ddQtt2Tw68jx/byDrCU6dIlHgxY9l1Dg7tRwuZZXsxC7z6r9eUuCfoS
l+/E8KoqIItLYmkcXB3LVJ5waOFpPm7if/EX9HlZtBAJdAgdGlT5KIj/Ut+ueO3H
tCI8vdyCtnv6Gd/xQpAjUVrZINxjyGbBIYt8gynbfLbwDlKbzj04WibDzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFi393KxLhoF3oBZ9ud9KSB5HcNMB8GA1UdIwQY
MBaAFFQMT3Qv0ymjb80pxOuYTl9JUV2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQt
Y2ZiMGQwNDkzYzNhLzEvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQtY2ZiMGQwNDkzYzNh
LzEvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPCHwokD
yw3qBiaiDXJ6y0GagK7izQeE/WJS7cdFH0OBr9HsxM0SOpk/kIYRLnKXwSAgVgLr
qXUFfR+drE4GT/8sIC14Zs3UgY4M3dx0BzZWXrySbLYMmu5aWc1hXTL2jyfqjjSS
NsvQuxQTyD5TcEhuRM1XPoYQjGG5//xpnq3/OxAxCmTRY5sr1kr4Zx1zVPPo9AuC
HKVLuD4vtcJaIpPU/fhHKVmsco7ZeXIqMQOO57Ponfshmu6tEhgorFXorWi0ldaA
CThHIWkIXRrhMY545iDuEoUBUKfOBws22Czu2sYuXZUzxHsyNkWONONhcWJ5cQNE
ieSvGs0I/S7uGg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:06 2026 by rpki-client