Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
File: VTq9CI9YVGJD8CJwIs20e80dfY4.mft (raw, json)
Hash identifier: dMlvg5oCCTpCOfwI/lO40Y5SlwtU7YYm6aOka+pfiSg=
Subject key identifier: C5:D5:25:0F:3F:48:09:69:04:89:27:0C:8C:A1:1C:B5:2F:56:48:21
Authority key identifier: 55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
Certificate issuer: /CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Certificate serial: 019DA52F5FB5B6AFF03A948FFAE41A486B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
Manifest number: 16C0
Signing time: Sun 19 Apr 2026 10:00:38 +0000
Manifest this update: Sun 19 Apr 2026 10:00:38 +0000
Manifest next update: Mon 20 Apr 2026 10:00:38 +0000
Files and hashes: 1: VTq9CI9YVGJD8CJwIs20e80dfY4.crl (hash: UC94iQ7/ictfpYRqg8BSJsf/Q2zm4EHzFf2zXUDI0Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:5f:b5:b6:af:f0:3a:94:8f:fa:e4:1a:48:6b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Validity
Not Before: Apr 19 10:00:38 2026 GMT
Not After : Apr 20 10:00:38 2026 GMT
Subject: CN=c5d5250f3f4809690489270c8ca11cb52f564821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:82:ea:82:ac:ef:09:dd:46:99:e3:11:c2:8a:
a3:e7:a6:93:c2:27:33:22:e6:67:01:d9:31:bd:64:
4c:c9:e9:20:c0:34:24:f9:9f:9c:88:e1:74:00:1c:
70:2c:e8:d5:b3:a8:a2:a5:9f:02:7f:b2:95:f3:c4:
3e:2d:0e:03:79:fb:9f:04:ed:49:77:4c:13:c3:a0:
29:c9:9b:6d:43:86:e9:0a:63:06:91:00:87:73:4a:
e5:7e:3e:91:34:f0:3e:d5:ca:09:4e:86:9e:d6:28:
e4:3d:62:1d:73:e9:36:df:27:4b:04:27:e7:4e:a7:
56:6e:ef:24:c6:5f:b3:e5:77:00:2e:78:a5:9a:04:
2f:5b:e4:93:12:da:dc:13:71:1f:03:a2:82:4e:b6:
55:bc:f7:c6:ee:a7:2f:84:be:d2:f3:2a:5e:5f:2e:
0f:c7:51:39:d2:89:2f:46:76:75:e6:af:e7:9b:29:
f6:8c:eb:fc:91:e4:7c:73:4f:19:67:69:10:4f:2f:
b1:71:7b:6e:b0:ac:97:62:5e:2d:a4:d8:d9:53:f3:
23:3f:5d:51:6b:5b:be:0e:e5:69:3d:07:e5:f6:aa:
eb:44:80:78:9a:cd:4e:50:8a:cc:f0:da:12:f2:ea:
bc:e4:b1:1a:34:91:cb:8b:18:6e:f2:f1:90:82:3b:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D5:25:0F:3F:48:09:69:04:89:27:0C:8C:A1:1C:B5:2F:56:48:21
X509v3 Authority Key Identifier:
keyid:55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:16:a9:bf:2c:92:a2:dd:f6:47:4c:22:ca:40:1f:8c:6f:f1:
9b:fc:c5:cd:9e:16:9d:ed:f3:cc:d5:12:fd:14:65:4e:3e:68:
78:33:96:60:20:d9:4d:09:38:76:b5:67:23:6e:5b:b4:c4:35:
d4:42:dd:bc:62:35:ac:8f:9b:fd:c9:65:27:0d:2a:46:06:8e:
aa:64:27:38:d4:67:87:05:b9:cb:9b:7a:62:b2:86:f3:3a:4f:
15:dd:b2:fa:fe:4c:02:e2:ef:fd:0d:04:13:40:5e:1f:d6:dc:
fb:d5:d5:4f:77:1e:38:aa:06:b8:19:89:0b:f9:ef:f6:0a:4d:
0c:6c:d5:04:61:75:b3:ac:58:ab:62:3c:02:5b:32:e3:71:28:
f2:97:e4:12:3f:ac:c0:a3:f1:68:01:1e:29:d0:1f:19:9c:0e:
97:36:ad:4b:2b:0a:9f:51:73:c5:19:d4:9a:5b:f3:52:29:0d:
e4:42:48:21:e0:0e:d1:53:8d:4d:14:ff:a4:73:02:6b:2e:39:
b8:2c:1b:db:94:6c:a2:f2:a9:d4:e0:4e:2a:5d:8f:55:72:03:
ba:d3:e0:2e:ee:1c:a1:09:a7:4f:b7:8a:d7:59:39:54:11:dd:
2d:5f:de:33:40:ea:bd:8e:ce:ef:04:86:f9:e4:e3:56:e3:a2:
af:c2:5d:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lL1+1tq/wOpSP+uQaSGsPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1M2FiZDA4OGY1ODU0NjI0M2YwMjI3MDIyY2RiNDdiY2Qx
ZDdkOGUwHhcNMjYwNDE5MTAwMDM4WhcNMjYwNDIwMTAwMDM4WjAzMTEwLwYDVQQD
EyhjNWQ1MjUwZjNmNDgwOTY5MDQ4OTI3MGM4Y2ExMWNiNTJmNTY0ODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjILqgqzvCd1GmeMRwoqj56aTwicz
IuZnAdkxvWRMyekgwDQk+Z+ciOF0ABxwLOjVs6iipZ8Cf7KV88Q+LQ4DefufBO1J
d0wTw6ApyZttQ4bpCmMGkQCHc0rlfj6RNPA+1coJToae1ijkPWIdc+k23ydLBCfn
TqdWbu8kxl+z5XcALnilmgQvW+STEtrcE3EfA6KCTrZVvPfG7qcvhL7S8ypeXy4P
x1E50okvRnZ15q/nmyn2jOv8keR8c08ZZ2kQTy+xcXtusKyXYl4tpNjZU/MjP11R
a1u+DuVpPQfl9qrrRIB4ms1OUIrM8NoS8uq85LEaNJHLixhu8vGQgjvnmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXVJQ8/SAlpBIknDIyhHLUvVkghMB8GA1UdIwQY
MBaAFFU6vQiPWFRiQ/AicCLNtHvNHX2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQt
ZDU2NmY3M2QzZmIwLzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQtZDU2NmY3M2QzZmIw
LzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBapvyyS
ot32R0wiykAfjG/xm/zFzZ4Wne3zzNUS/RRlTj5oeDOWYCDZTQk4drVnI25btMQ1
1ELdvGI1rI+b/cllJw0qRgaOqmQnONRnhwW5y5t6YrKG8zpPFd2y+v5MAuLv/Q0E
E0BeH9bc+9XVT3ceOKoGuBmJC/nv9gpNDGzVBGF1s6xYq2I8Alsy43Eo8pfkEj+s
wKPxaAEeKdAfGZwOlzatSysKn1FzxRnUmlvzUikN5EJIIeAO0VONTRT/pHMCay45
uCwb25RsovKp1OBOKl2PVXIDutPgLu4coQmnT7eK11k5VBHdLV/eM0DqvY7O7wSG
+eTjVuOir8Jdjg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:41:49 2026 by rpki-client