Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
File: VTq9CI9YVGJD8CJwIs20e80dfY4.mft (raw, json)
Hash identifier: 6kbKHahoMgrTlplAMhFweUDFfouUSwX3VP7UGMJOfX0=
Subject key identifier: 4C:E7:27:F5:D5:F4:75:94:FD:80:42:D3:09:A2:73:EB:16:D0:1B:D0
Authority key identifier: 55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
Certificate issuer: /CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Certificate serial: 019CAA21BC9F6F0F6245D2618F225CBAD0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
Manifest number: 163E
Signing time: Sun 01 Mar 2026 16:01:03 +0000
Manifest this update: Sun 01 Mar 2026 16:01:03 +0000
Manifest next update: Mon 02 Mar 2026 16:01:03 +0000
Files and hashes: 1: VTq9CI9YVGJD8CJwIs20e80dfY4.crl (hash: UzhSidh5dQFMJsc+tp7bz0/kiJwpxhOOW2aWcesrhwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:bc:9f:6f:0f:62:45:d2:61:8f:22:5c:ba:d0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Validity
Not Before: Mar 1 16:01:03 2026 GMT
Not After : Mar 2 16:01:03 2026 GMT
Subject: CN=4ce727f5d5f47594fd8042d309a273eb16d01bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:0e:22:ce:26:c8:9f:78:c3:f9:56:7c:4c:
02:90:da:07:d9:c2:99:5c:59:06:3f:74:6b:f3:d6:
72:13:00:1e:b9:cd:84:6e:6f:2d:87:81:db:12:29:
65:8e:63:68:96:85:7b:3a:17:c7:84:bc:45:69:68:
ec:31:94:cd:61:57:4d:c5:7b:8b:02:dc:78:5e:7a:
6a:84:19:7c:c4:51:3b:af:8e:90:f3:1a:70:dd:f6:
57:d8:16:5f:d1:3c:7b:a6:32:89:57:f5:b0:7a:6c:
dc:1e:5e:01:03:71:a5:25:b0:05:83:7d:87:f3:58:
cd:d7:e0:02:5f:09:4b:68:96:6f:d4:bd:2f:d3:bc:
52:3f:bd:e2:e8:f2:e4:5c:0c:05:db:67:f2:63:64:
cc:c6:4e:ee:bb:18:bc:f5:79:3f:6f:c4:9f:af:01:
1e:22:17:bb:6e:2b:3e:06:52:8f:a3:8a:82:13:ab:
19:c8:ff:0d:e5:b6:1e:0a:f2:95:2f:67:91:42:32:
5e:59:ee:41:d4:f7:7b:66:0a:59:7d:b7:68:a9:84:
60:bd:73:41:92:5e:e8:29:05:eb:58:ba:65:c8:08:
34:0f:e4:bb:95:1b:71:47:c1:7c:22:5e:8e:91:84:
8a:3b:ef:29:cc:0d:3d:f4:8c:0f:db:32:eb:7e:2e:
42:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E7:27:F5:D5:F4:75:94:FD:80:42:D3:09:A2:73:EB:16:D0:1B:D0
X509v3 Authority Key Identifier:
keyid:55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:df:64:1d:95:04:7a:ea:84:d7:18:19:e3:0a:6a:30:06:1a:
58:07:89:75:5a:e8:3f:53:20:54:9f:16:aa:74:27:7e:19:26:
86:d3:6f:fb:38:86:cb:40:b1:0c:ed:af:a1:bc:ee:11:71:e8:
0b:bc:59:1b:3a:e9:70:e6:f5:01:64:cf:b0:f0:74:b2:4b:b6:
af:65:a8:50:c5:46:e2:3d:35:6e:ba:ec:7a:5a:21:40:39:b8:
4e:7f:b5:18:32:4f:0d:b2:02:22:d6:61:00:03:da:21:91:72:
46:0d:e0:96:28:3b:f7:8d:52:3d:0d:ca:c3:6f:cd:f3:3b:1f:
b4:6f:4a:e5:9d:de:ac:ff:07:ca:16:5b:85:a6:1e:48:1f:f3:
5b:6b:d9:78:82:43:ea:7e:33:a1:a0:e2:25:e3:46:26:f1:40:
33:95:ac:f8:ff:b4:a5:cf:e6:0b:c7:a4:e8:fd:80:84:8d:de:
87:80:aa:21:af:e4:a9:11:7f:96:d4:e0:bb:02:10:4d:12:7f:
b3:3a:40:9a:ac:31:26:47:82:ba:e4:70:77:9c:29:bf:79:6f:
62:7b:07:d6:41:f1:ce:4a:ec:3c:46:34:c6:47:0b:19:d5:20:
3d:65:5b:3e:e6:73:a4:07:0b:23:b3:12:8f:94:5b:61:fc:e8:
07:8a:9d:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIbyfbw9iRdJhjyJcutC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1M2FiZDA4OGY1ODU0NjI0M2YwMjI3MDIyY2RiNDdiY2Qx
ZDdkOGUwHhcNMjYwMzAxMTYwMTAzWhcNMjYwMzAyMTYwMTAzWjAzMTEwLwYDVQQD
Eyg0Y2U3MjdmNWQ1ZjQ3NTk0ZmQ4MDQyZDMwOWEyNzNlYjE2ZDAxYmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq98OIs4myJ94w/lWfEwCkNoH2cKZ
XFkGP3Rr89ZyEwAeuc2Ebm8th4HbEilljmNoloV7OhfHhLxFaWjsMZTNYVdNxXuL
Atx4XnpqhBl8xFE7r46Q8xpw3fZX2BZf0Tx7pjKJV/WwemzcHl4BA3GlJbAFg32H
81jN1+ACXwlLaJZv1L0v07xSP73i6PLkXAwF22fyY2TMxk7uuxi89Xk/b8SfrwEe
Ihe7bis+BlKPo4qCE6sZyP8N5bYeCvKVL2eRQjJeWe5B1Pd7ZgpZfbdoqYRgvXNB
kl7oKQXrWLplyAg0D+S7lRtxR8F8Il6OkYSKO+8pzA099IwP2zLrfi5CowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEznJ/XV9HWU/YBC0wmic+sW0BvQMB8GA1UdIwQY
MBaAFFU6vQiPWFRiQ/AicCLNtHvNHX2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQt
ZDU2NmY3M2QzZmIwLzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQtZDU2NmY3M2QzZmIw
LzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK99kHZUE
euqE1xgZ4wpqMAYaWAeJdVroP1MgVJ8WqnQnfhkmhtNv+ziGy0CxDO2vobzuEXHo
C7xZGzrpcOb1AWTPsPB0sku2r2WoUMVG4j01brrselohQDm4Tn+1GDJPDbICItZh
AAPaIZFyRg3glig7941SPQ3Kw2/N8zsftG9K5Z3erP8HyhZbhaYeSB/zW2vZeIJD
6n4zoaDiJeNGJvFAM5Ws+P+0pc/mC8ek6P2AhI3eh4CqIa/kqRF/ltTguwIQTRJ/
szpAmqwxJkeCuuRwd5wpv3lvYnsH1kHxzkrsPEY0xkcLGdUgPWVbPuZzpAcLI7MS
j5RbYfzoB4qdWg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:34:26 2026 by rpki-client