Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
File: vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft (raw, json)
Hash identifier: /Gdp1akwfB7HiuEsTkStR/mSp8KsFU/TFToCalGRo5E=
Subject key identifier: 4D:73:C4:D2:C7:40:22:0B:10:E7:67:24:6D:0D:8F:2D:43:3C:6B:84
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial: 01A0C6D8223EF4C77A21D6509990AB2D64C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
Manifest number: 19F8
Signing time: Tue 22 Sep 2026 02:00:48 +0000
Manifest this update: Tue 22 Sep 2026 02:00:48 +0000
Manifest next update: Wed 23 Sep 2026 02:00:48 +0000
Files and hashes: 1: J9YAUFwPteiNE41P-B9PZesABw4.roa (hash: aWHkIvoqLm8EJJK/XFEsvikfiT0fdWpAKa84pZKqHPU=)
2: vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl (hash: whw4hQqimW9tzTeWT05weL5/39ZKjvL++rl/lIUs6Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:22:3e:f4:c7:7a:21:d6:50:99:90:ab:2d:64:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
Validity
Not Before: Sep 22 02:00:48 2026 GMT
Not After : Sep 23 02:00:48 2026 GMT
Subject: CN=4d73c4d2c740220b10e767246d0d8f2d433c6b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:4b:a1:f3:eb:50:32:b7:3a:7b:29:10:df:
a5:6c:8e:a7:db:49:83:f9:29:87:a9:7a:62:ff:9a:
2b:ba:bf:86:eb:17:e7:86:d6:40:8c:81:43:85:ae:
92:6e:1b:8b:88:77:50:59:57:e3:2f:4a:40:82:bb:
39:b8:35:63:97:04:03:35:38:d1:58:90:57:81:cb:
d7:31:90:c5:c2:29:d2:ef:04:34:fa:1b:3e:78:f7:
44:25:61:03:83:8d:a0:bd:1f:b1:2c:80:e3:fa:66:
f3:e2:41:e2:e6:8b:fe:81:95:38:97:b9:a1:51:5a:
e3:be:89:d4:eb:f3:40:d1:dd:19:be:db:fe:be:d1:
72:8a:24:dc:53:a1:c8:2e:0b:c6:26:87:d3:52:83:
7a:92:53:d5:00:ea:4e:c3:2d:4d:31:31:27:ce:77:
db:37:12:22:6d:aa:a1:d4:55:37:38:fc:d5:ff:5a:
0e:ec:f0:b9:05:91:f2:ad:0c:82:f5:5e:28:d7:bf:
fb:41:af:d9:d2:db:d0:8f:30:5b:e9:9d:d2:79:23:
7c:ca:97:d8:6c:82:64:5c:87:3f:b4:a5:70:50:1c:
02:e1:ab:87:3b:33:8d:21:91:5e:7d:53:c8:e8:7c:
92:4e:09:2a:f7:03:e7:48:1e:fe:47:b1:f0:61:6d:
45:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:73:C4:D2:C7:40:22:0B:10:E7:67:24:6D:0D:8F:2D:43:3C:6B:84
X509v3 Authority Key Identifier:
keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:33:ae:7d:04:4b:1c:02:ca:03:e0:30:30:c6:a3:d6:11:d1:
6f:f7:a2:8b:31:f9:c8:ad:b4:51:bb:74:6d:20:14:86:58:08:
3a:e2:4c:40:32:ae:c8:f8:28:fe:cf:ab:a3:0d:6a:84:4a:4e:
64:de:14:ca:eb:38:da:6e:3d:c9:c2:35:f9:b4:7f:8a:13:5a:
e1:db:82:82:2c:f7:7d:a7:43:f5:ad:a6:23:43:98:4a:f7:b6:
15:7e:91:86:ab:2b:fe:e5:6e:0c:f0:2e:5e:07:4f:ec:de:13:
4e:3e:7c:38:6e:91:10:07:d2:82:da:44:ba:e2:a3:58:80:11:
db:d0:fa:12:17:05:de:ba:5e:08:1d:3f:c1:23:a7:00:46:43:
a0:08:87:01:7c:2b:84:22:25:b8:85:60:2e:f1:9c:34:5a:ed:
13:bc:21:84:62:fd:28:91:c6:7b:a4:c0:83:a0:b6:ab:74:68:
ff:f0:46:9d:39:93:eb:e5:c1:82:6d:e2:ea:b6:73:cc:dc:e9:
f1:18:ab:72:aa:bf:ff:8c:70:43:ee:66:f9:22:b0:d8:c0:fb:
27:01:2e:48:25:1f:bc:d6:f9:3b:7a:9d:e1:6f:90:58:96:04:
10:8b:e4:b3:20:b7:a0:22:51:3c:fc:22:21:5e:a1:9b:47:18:
3c:6f:2b:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDG2CI+9Md6IdZQmZCrLWTEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNzIyYTk5NzMyYzljM2NiYzIwYjBhNDcyOTJhODIzNzgy
NjAzYWMwHhcNMjYwOTIyMDIwMDQ4WhcNMjYwOTIzMDIwMDQ4WjAzMTEwLwYDVQQD
Eyg0ZDczYzRkMmM3NDAyMjBiMTBlNzY3MjQ2ZDBkOGYyZDQzM2M2Yjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0BLofPrUDK3OnspEN+lbI6n20mD
+SmHqXpi/5orur+G6xfnhtZAjIFDha6SbhuLiHdQWVfjL0pAgrs5uDVjlwQDNTjR
WJBXgcvXMZDFwinS7wQ0+hs+ePdEJWEDg42gvR+xLIDj+mbz4kHi5ov+gZU4l7mh
UVrjvonU6/NA0d0Zvtv+vtFyiiTcU6HILgvGJofTUoN6klPVAOpOwy1NMTEnznfb
NxIibaqh1FU3OPzV/1oO7PC5BZHyrQyC9V4o17/7Qa/Z0tvQjzBb6Z3SeSN8ypfY
bIJkXIc/tKVwUBwC4auHOzONIZFefVPI6HySTgkq9wPnSB7+R7HwYW1FSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1zxNLHQCILEOdnJG0Njy1DPGuEMB8GA1UdIwQY
MBaAFL5yKplzLJw8vCCwpHKSqCN4JgOsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm5JcW1YTXNuRHk4SUxDa2NwS29JM2dtQTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wNDFiOWYtMWEwNy00MmU1LWI0ODct
MjliOTdhMTg3N2ZiLzEvdm5JcW1YTXNuRHk4SUxDa2NwS29JM2dtQTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wNDFiOWYtMWEwNy00MmU1LWI0ODctMjliOTdhMTg3N2Zi
LzEvdm5JcW1YTXNuRHk4SUxDa2NwS29JM2dtQTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDOufQRL
HALKA+AwMMaj1hHRb/eiizH5yK20Ubt0bSAUhlgIOuJMQDKuyPgo/s+row1qhEpO
ZN4Uyus42m49ycI1+bR/ihNa4duCgiz3fadD9a2mI0OYSve2FX6Rhqsr/uVuDPAu
XgdP7N4TTj58OG6REAfSgtpEuuKjWIAR29D6EhcF3rpeCB0/wSOnAEZDoAiHAXwr
hCIluIVgLvGcNFrtE7whhGL9KJHGe6TAg6C2q3Ro//BGnTmT6+XBgm3i6rZzzNzp
8Rircqq//4xwQ+5m+SKw2MD7JwEuSCUfvNb5O3qd4W+QWJYEEIvksyC3oCJRPPwi
IV6hm0cYPG8r0w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:28:14 2026 by rpki-client