Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
File: VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft (raw, json)
Hash identifier: UifAIPIU1CnldMAH1G6dgboawZbfwcdcN/T/8aHHKKo=
Subject key identifier: 05:88:83:5B:66:28:D2:45:9E:D2:46:76:FE:B5:8F:F9:96:52:C3:3F
Authority key identifier: 55:16:75:57:89:46:86:EE:0C:87:27:B9:61:CC:4B:92:30:00:5F:38
Certificate issuer: /CN=55167557894686ee0c8727b961cc4b9230005f38
Certificate serial: 01A0D9BAD94EFA65439117DBAC48173D739E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:01:36 +0000
Manifest this update: Fri 25 Sep 2026 18:01:36 +0000
Manifest next update: Sat 26 Sep 2026 18:01:36 +0000
Files and hashes: 1: VRZ1V4lGhu4Mhye5YcxLkjAAXzg.crl (hash: pb4J3FDY5JbymxmG2hfdaMiv8ylM48Z6DnZBknrdFnI=)
2: qjU3-mg-6plX7NPtZmDw0teXaog.roa (hash: yHPCb3W11kzbNlMZG3Tad2k2N/aaDEDcgs/PQrk8prM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:d9:4e:fa:65:43:91:17:db:ac:48:17:3d:73:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55167557894686ee0c8727b961cc4b9230005f38
Validity
Not Before: Sep 25 18:01:36 2026 GMT
Not After : Sep 26 18:01:36 2026 GMT
Subject: CN=0588835b6628d2459ed24676feb58ff99652c33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:eb:f5:a2:47:58:31:c7:b5:0e:bc:ec:0e:
58:64:4a:a8:72:54:2a:68:e6:44:66:d3:52:94:fb:
38:89:14:9a:f3:13:e8:bc:f1:56:78:bb:e5:fc:0a:
e8:af:7c:f7:48:a9:aa:57:74:d5:2b:10:de:f9:ff:
41:55:43:73:58:ff:5b:0a:fd:85:82:41:9a:81:f0:
fc:c4:78:28:b8:f9:15:6c:53:d7:d5:83:f9:f7:23:
5c:3c:c2:32:e7:d3:13:2f:85:9b:72:1b:65:34:9b:
28:c5:79:b5:1f:0c:fc:fe:77:79:9f:bb:ff:c7:40:
d1:86:1c:00:f6:13:ac:fb:a1:b3:7c:62:4d:2c:52:
8c:e4:de:75:7b:38:0b:c5:ba:56:7a:90:80:f7:6f:
6e:a3:7f:8d:72:bf:a9:90:fc:08:84:5a:a2:d7:b6:
01:8d:b5:f4:a3:a5:21:91:eb:73:30:e8:ba:ea:97:
cc:59:17:15:fe:22:23:42:8c:ec:14:1b:82:d2:36:
a9:1f:c7:a9:31:63:61:b8:cf:76:84:74:14:b0:31:
a5:d9:87:8d:9e:c0:dc:6a:56:da:b9:22:15:71:17:
5b:75:a4:02:d1:a5:5b:b8:56:34:9a:71:31:94:b7:
b9:0a:c8:f8:b8:8a:8e:8c:77:95:55:06:64:af:b3:
f4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:88:83:5B:66:28:D2:45:9E:D2:46:76:FE:B5:8F:F9:96:52:C3:3F
X509v3 Authority Key Identifier:
keyid:55:16:75:57:89:46:86:EE:0C:87:27:B9:61:CC:4B:92:30:00:5F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:24:64:ef:76:a9:7a:bf:41:14:08:58:99:31:2c:8b:19:58:
da:36:aa:6c:53:49:74:99:3a:3e:2a:1b:eb:35:2b:9f:5d:a6:
3f:8c:30:51:be:3d:b3:f1:3a:bb:6f:56:0f:ba:53:ec:fa:6b:
11:e2:5f:15:db:8c:ba:77:ea:36:37:02:a6:ab:ce:82:82:81:
01:cd:b3:3b:a9:15:c0:bf:f3:2e:d7:00:27:0b:2c:f9:c1:40:
4f:98:d4:ae:92:90:8a:44:de:f3:fc:41:48:f9:29:65:71:4e:
f4:41:fc:ee:e3:3c:72:e4:db:19:e0:81:ab:e2:3b:b3:c1:15:
39:50:db:61:67:36:a4:f4:62:17:df:bf:81:14:1f:9b:f5:a3:
0a:1d:fe:bc:05:e4:67:9d:f1:90:74:af:3a:cb:82:a1:24:15:
6c:91:37:0b:96:bb:93:63:9f:1e:71:e4:b6:bd:5d:94:cd:4e:
14:8e:22:77:f5:08:f7:c9:de:e9:55:01:e7:f8:80:96:cd:29:
9c:ee:0f:64:91:8c:7b:47:c0:93:4f:af:86:7c:4c:27:77:74:
f6:e3:3f:88:ef:97:e2:97:bb:8a:77:0c:22:da:7a:54:24:f6:
e5:fb:b8:b2:7e:ae:f7:55:dd:31:d2:34:23:96:ce:30:2c:2f:
50:48:fb:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZutlO+mVDkRfbrEgXPXOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MTY3NTU3ODk0Njg2ZWUwYzg3MjdiOTYxY2M0YjkyMzAw
MDVmMzgwHhcNMjYwOTI1MTgwMTM2WhcNMjYwOTI2MTgwMTM2WjAzMTEwLwYDVQQD
EygwNTg4ODM1YjY2MjhkMjQ1OWVkMjQ2NzZmZWI1OGZmOTk2NTJjMzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnvr9aJHWDHHtQ687A5YZEqoclQq
aOZEZtNSlPs4iRSa8xPovPFWeLvl/Aror3z3SKmqV3TVKxDe+f9BVUNzWP9bCv2F
gkGagfD8xHgouPkVbFPX1YP59yNcPMIy59MTL4WbchtlNJsoxXm1Hwz8/nd5n7v/
x0DRhhwA9hOs+6GzfGJNLFKM5N51ezgLxbpWepCA929uo3+Ncr+pkPwIhFqi17YB
jbX0o6UhketzMOi66pfMWRcV/iIjQozsFBuC0japH8epMWNhuM92hHQUsDGl2YeN
nsDcalbauSIVcRdbdaQC0aVbuFY0mnExlLe5Csj4uIqOjHeVVQZkr7P0+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWIg1tmKNJFntJGdv61j/mWUsM/MB8GA1UdIwQY
MBaAFFUWdVeJRobuDIcnuWHMS5IwAF84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlJaMVY0bEdodTRNaHllNVljeExrakFBWHpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80ZTI4MDgtZThmNC00MmE3LWE4Mjct
N2FiY2U2MDBjMjE4LzEvVlJaMVY0bEdodTRNaHllNVljeExrakFBWHpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80ZTI4MDgtZThmNC00MmE3LWE4MjctN2FiY2U2MDBjMjE4
LzEvVlJaMVY0bEdodTRNaHllNVljeExrakFBWHpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCRk73ap
er9BFAhYmTEsixlY2jaqbFNJdJk6Piob6zUrn12mP4wwUb49s/E6u29WD7pT7Ppr
EeJfFduMunfqNjcCpqvOgoKBAc2zO6kVwL/zLtcAJwss+cFAT5jUrpKQikTe8/xB
SPkpZXFO9EH87uM8cuTbGeCBq+I7s8EVOVDbYWc2pPRiF9+/gRQfm/WjCh3+vAXk
Z53xkHSvOsuCoSQVbJE3C5a7k2OfHnHktr1dlM1OFI4id/UI98ne6VUB5/iAls0p
nO4PZJGMe0fAk0+vhnxMJ3d09uM/iO+X4pe7incMItp6VCT25fu4sn6u91XdMdI0
I5bOMCwvUEj7tQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:29:20 2026 by rpki-client