Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
File: vm0t9XQLV9Se09LeKamMvGfyAWU.mft (raw, json)
Hash identifier: +OSTsXZ+XilfE5j22SM4H/nAPGL9Hjw9B5fMXBxgsUg=
Subject key identifier: 97:2F:C6:C5:4D:46:C1:32:12:9B:ED:AD:C7:24:EF:DF:DF:49:85:E4
Authority key identifier: BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65
Certificate issuer: /CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165
Certificate serial: 019DA3AEFD4433446D5ED2D75F883D12F54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
Manifest number: 1600
Signing time: Sun 19 Apr 2026 03:00:47 +0000
Manifest this update: Sun 19 Apr 2026 03:00:47 +0000
Manifest next update: Mon 20 Apr 2026 03:00:47 +0000
Files and hashes: 1: vm0t9XQLV9Se09LeKamMvGfyAWU.crl (hash: XWFd7OgtTVS4k2eO2O4kqE4RyWmRCw2Neucn/d7cZac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:fd:44:33:44:6d:5e:d2:d7:5f:88:3d:12:f5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165
Validity
Not Before: Apr 19 03:00:47 2026 GMT
Not After : Apr 20 03:00:47 2026 GMT
Subject: CN=972fc6c54d46c132129bedadc724efdfdf4985e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:8e:70:69:ac:62:16:56:fd:cb:d5:68:c8:
5a:e6:d6:80:25:0c:24:b3:ef:97:f5:e9:70:83:23:
86:5a:08:87:6b:48:d9:ed:0d:56:84:10:04:fa:fe:
f1:28:96:3d:cb:a4:42:8e:65:c4:ac:1d:73:29:a9:
99:6d:b7:e3:de:60:ec:7f:33:24:02:5b:00:9a:62:
79:1d:44:5a:07:66:e9:3f:45:c3:ee:f9:ca:15:97:
01:7d:e3:4e:b7:1a:c2:bb:4b:47:29:ea:d8:0d:27:
d5:dd:ef:50:af:27:d2:4e:42:b6:3b:1e:e7:b8:83:
1e:1e:e7:82:8e:cf:76:91:d8:83:56:7e:22:86:00:
6f:42:f9:4c:64:b7:93:17:01:3a:2f:15:8b:00:b5:
a0:ea:2a:34:8d:97:9f:09:0a:ef:dc:a7:0e:e4:40:
bb:45:dd:e4:22:fa:f0:f4:0f:70:f4:6f:ce:f3:99:
23:bb:ff:ce:dc:10:0a:bc:05:0b:89:da:fb:f4:2e:
ec:ec:0e:d9:6c:76:85:3c:8e:0b:52:04:96:50:a8:
b0:5a:45:57:99:01:6b:72:7a:6d:a5:a7:2c:33:33:
03:7a:6c:35:6f:78:05:8f:7d:70:4a:cd:6f:48:0b:
50:4a:19:74:a5:47:72:94:dd:fb:e4:0b:ed:2c:83:
9d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2F:C6:C5:4D:46:C1:32:12:9B:ED:AD:C7:24:EF:DF:DF:49:85:E4
X509v3 Authority Key Identifier:
keyid:BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ea:1e:6d:a8:08:c4:87:c7:a9:72:7d:6b:04:26:83:6a:72:
c0:ee:bc:a8:39:ea:c3:e4:b2:a4:cb:a2:6c:9f:4a:41:b4:55:
d8:70:00:9e:37:53:6e:30:da:72:01:36:79:61:0b:ed:97:0f:
10:5c:6f:bb:8e:eb:e1:79:fd:cc:24:91:c7:36:e9:c0:11:9e:
55:ae:5d:bf:9f:c2:ea:15:0e:0c:c0:69:95:ae:bb:74:57:c6:
a8:f7:bf:2d:80:a1:e2:68:f6:cf:c6:1d:12:e7:1d:f7:a6:f9:
15:1f:9c:22:91:c8:cb:16:8c:47:f3:89:ed:47:70:d8:5e:85:
9b:2e:6e:e8:57:3e:da:7e:e5:8d:86:a8:6d:1f:aa:31:65:ee:
cd:1a:43:51:1c:99:9c:33:5f:b2:53:55:9e:5c:bf:14:a7:2e:
f4:26:04:a8:18:6c:ba:fb:44:f0:9e:08:13:f3:f7:c6:12:23:
e7:32:4e:67:cf:47:9f:2c:f4:36:1c:19:c2:7b:bd:0b:9e:d7:
47:17:c9:56:84:59:c2:2d:6f:5d:df:59:d3:44:fd:42:a5:45:
53:38:2c:51:46:3e:48:1f:61:5e:fc:b3:4a:4f:f4:39:81:bb:
2b:00:01:85:84:d1:cb:69:ed:77:e8:4c:ea:a0:45:5f:6c:00:
57:6f:74:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jrv1EM0RtXtLXX4g9EvVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNmQyZGY1NzQwYjU3ZDQ5ZWQzZDJkZTI5YTk4Y2JjNjdm
MjAxNjUwHhcNMjYwNDE5MDMwMDQ3WhcNMjYwNDIwMDMwMDQ3WjAzMTEwLwYDVQQD
Eyg5NzJmYzZjNTRkNDZjMTMyMTI5YmVkYWRjNzI0ZWZkZmRmNDk4NWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/mOcGmsYhZW/cvVaMha5taAJQwk
s++X9elwgyOGWgiHa0jZ7Q1WhBAE+v7xKJY9y6RCjmXErB1zKamZbbfj3mDsfzMk
AlsAmmJ5HURaB2bpP0XD7vnKFZcBfeNOtxrCu0tHKerYDSfV3e9QryfSTkK2Ox7n
uIMeHueCjs92kdiDVn4ihgBvQvlMZLeTFwE6LxWLALWg6io0jZefCQrv3KcO5EC7
Rd3kIvrw9A9w9G/O85kju//O3BAKvAULidr79C7s7A7ZbHaFPI4LUgSWUKiwWkVX
mQFrcnptpacsMzMDemw1b3gFj31wSs1vSAtQShl0pUdylN375AvtLIOdDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcvxsVNRsEyEpvtrcck79/fSYXkMB8GA1UdIwQY
MBaAFL5tLfV0C1fUntPS3impjLxn8gFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm0wdDlYUUxWOVNlMDlMZUthbU12R2Z5QVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wY2UzNzMtOTI5OC00OGZjLTkyNTkt
YmE5MTc4Yzc5ZmM2LzEvdm0wdDlYUUxWOVNlMDlMZUthbU12R2Z5QVdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wY2UzNzMtOTI5OC00OGZjLTkyNTktYmE5MTc4Yzc5ZmM2
LzEvdm0wdDlYUUxWOVNlMDlMZUthbU12R2Z5QVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuoebagI
xIfHqXJ9awQmg2pywO68qDnqw+SypMuibJ9KQbRV2HAAnjdTbjDacgE2eWEL7ZcP
EFxvu47r4Xn9zCSRxzbpwBGeVa5dv5/C6hUODMBpla67dFfGqPe/LYCh4mj2z8Yd
Eucd96b5FR+cIpHIyxaMR/OJ7Udw2F6Fmy5u6Fc+2n7ljYaobR+qMWXuzRpDURyZ
nDNfslNVnly/FKcu9CYEqBhsuvtE8J4IE/P3xhIj5zJOZ89Hnyz0NhwZwnu9C57X
RxfJVoRZwi1vXd9Z00T9QqVFUzgsUUY+SB9hXvyzSk/0OYG7KwABhYTRy2ntd+hM
6qBFX2wAV290XA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:08 2026 by rpki-client