
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
File: VRTyx8ZG7DGgSV4FHWpN4avwx04.mft (raw, json)
Hash identifier: TFZ+9iaw5OVM3/Zs9OVDNRVlF2nq5A8u2kjw446G/B4=
Subject key identifier: 88:16:1F:A8:09:68:B9:66:D8:86:C2:8F:15:92:56:D3:DA:1E:2C:2D
Authority key identifier: 55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
Certificate issuer: /CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Certificate serial: 019CAB6BE4C2C7210246EBA92DA2EA2B428D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
Manifest number: 136E
Signing time: Sun 01 Mar 2026 22:01:40 +0000
Manifest this update: Sun 01 Mar 2026 22:01:40 +0000
Manifest next update: Mon 02 Mar 2026 22:01:40 +0000
Files and hashes: 1: VRTyx8ZG7DGgSV4FHWpN4avwx04.crl (hash: HIvK1qNFqyprm1fCg/Cuy1hQ7/AdB6vyHS1JcGl3ZtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e4:c2:c7:21:02:46:eb:a9:2d:a2:ea:2b:42:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Validity
Not Before: Mar 1 22:01:40 2026 GMT
Not After : Mar 2 22:01:40 2026 GMT
Subject: CN=88161fa80968b966d886c28f159256d3da1e2c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:7d:88:c1:73:97:62:0b:62:96:60:e2:05:
ad:ec:c9:96:6f:83:c7:f1:1c:dc:06:66:64:89:ec:
71:5d:bf:ec:c2:22:9b:66:93:4e:67:ec:66:3a:d2:
6b:30:62:cd:2c:30:84:d7:66:8a:a3:a1:30:e9:a6:
f2:13:83:0f:2d:f2:f5:28:58:7a:34:75:aa:ec:28:
14:da:ed:6f:e4:09:5b:ac:3f:fa:73:ef:8d:f6:7f:
59:ec:3e:ac:c4:5b:71:25:c3:06:62:c5:84:fa:c1:
51:06:d4:ee:09:79:bc:f7:73:ec:2a:bc:ca:02:27:
be:29:d6:34:cf:8e:d8:e5:80:29:f7:dd:8e:32:fa:
d4:c8:3b:6c:af:4b:6a:f0:30:92:d2:e2:4c:c2:6a:
84:37:ed:9e:f2:0e:22:01:e3:3d:77:f3:ee:80:41:
7e:96:41:e2:de:59:75:44:46:b3:f6:ba:f3:2c:cb:
13:a6:5c:fb:b2:16:3b:18:2f:2f:f4:91:a9:84:54:
28:5b:d2:c9:31:bc:27:3f:24:9d:3f:bb:ac:e7:67:
d7:31:4c:ab:f5:d5:33:57:ea:0f:b7:38:83:8c:df:
53:f2:b9:ee:72:b5:e7:39:7b:d2:9d:2f:57:76:c8:
f9:d4:f1:18:54:f3:73:3a:37:93:72:e3:43:f6:0e:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:16:1F:A8:09:68:B9:66:D8:86:C2:8F:15:92:56:D3:DA:1E:2C:2D
X509v3 Authority Key Identifier:
keyid:55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bd:64:49:8b:8f:68:52:be:b5:00:b2:b5:fb:51:67:60:03:
bc:0b:70:6c:62:64:d0:bd:0b:b5:82:3d:88:cf:0a:db:5b:25:
bd:61:67:3c:70:e1:f6:73:b3:bf:87:52:68:7a:0d:e2:e1:22:
8e:95:6e:fd:d7:e3:04:2c:fb:d4:b3:e9:10:0c:b4:5b:e4:78:
2b:37:f6:36:4c:95:4f:01:df:65:87:9d:16:cc:97:16:30:d1:
68:f0:3a:f7:9a:57:25:ca:5b:d2:50:8b:bc:80:d1:58:3b:e2:
a0:91:e9:11:72:33:51:d1:62:67:bf:16:05:11:bb:08:3f:56:
27:17:17:a7:86:99:b3:cc:91:5c:69:2e:11:2c:f2:e2:4e:2d:
42:78:a0:34:86:df:03:dc:97:e7:f3:f1:f5:b6:95:fe:a9:a9:
5a:cf:f0:64:c2:6b:0f:72:64:a5:4e:f8:95:1a:b8:5b:bb:bb:
81:01:dd:c4:61:1d:3f:a3:e5:e9:bb:cc:7c:91:47:f7:dd:93:
aa:c6:b9:61:06:6d:9d:3e:ac:54:ea:95:ce:0e:4b:67:70:c9:
e8:fc:31:2e:94:90:d2:65:d6:44:a8:55:fa:be:8e:da:64:e7:
10:3f:1a:81:36:a0:43:5d:5c:fd:fa:25:4b:a9:c9:21:c6:85:
5e:1a:61:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra+TCxyECRuupLaLqK0KNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MTRmMmM3YzY0NmVjMzFhMDQ5NWUwNTFkNmE0ZGUxYWJm
MGM3NGUwHhcNMjYwMzAxMjIwMTQwWhcNMjYwMzAyMjIwMTQwWjAzMTEwLwYDVQQD
Eyg4ODE2MWZhODA5NjhiOTY2ZDg4NmMyOGYxNTkyNTZkM2RhMWUyYzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzR9iMFzl2ILYpZg4gWt7MmWb4PH
8RzcBmZkiexxXb/swiKbZpNOZ+xmOtJrMGLNLDCE12aKo6Ew6abyE4MPLfL1KFh6
NHWq7CgU2u1v5AlbrD/6c++N9n9Z7D6sxFtxJcMGYsWE+sFRBtTuCXm893PsKrzK
Aie+KdY0z47Y5YAp992OMvrUyDtsr0tq8DCS0uJMwmqEN+2e8g4iAeM9d/PugEF+
lkHi3ll1REaz9rrzLMsTplz7shY7GC8v9JGphFQoW9LJMbwnPySdP7us52fXMUyr
9dUzV+oPtziDjN9T8rnucrXnOXvSnS9Xdsj51PEYVPNzOjeTcuND9g5E1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgWH6gJaLlm2IbCjxWSVtPaHiwtMB8GA1UdIwQY
MBaAFFUU8sfGRuwxoEleBR1qTeGr8MdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlJUeXg4Wkc3REdnU1Y0RkhXcE40YXZ3eDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85MGJkMjEtYWNkMC00OGU1LTlhZGYt
Mjc4MGQ2ZjE2MTJjLzEvVlJUeXg4Wkc3REdnU1Y0RkhXcE40YXZ3eDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85MGJkMjEtYWNkMC00OGU1LTlhZGYtMjc4MGQ2ZjE2MTJj
LzEvVlJUeXg4Wkc3REdnU1Y0RkhXcE40YXZ3eDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAML1kSYuP
aFK+tQCytftRZ2ADvAtwbGJk0L0LtYI9iM8K21slvWFnPHDh9nOzv4dSaHoN4uEi
jpVu/dfjBCz71LPpEAy0W+R4Kzf2NkyVTwHfZYedFsyXFjDRaPA695pXJcpb0lCL
vIDRWDvioJHpEXIzUdFiZ78WBRG7CD9WJxcXp4aZs8yRXGkuESzy4k4tQnigNIbf
A9yX5/Px9baV/qmpWs/wZMJrD3JkpU74lRq4W7u7gQHdxGEdP6Pl6bvMfJFH992T
qsa5YQZtnT6sVOqVzg5LZ3DJ6PwxLpSQ0mXWRKhV+r6O2mTnED8agTagQ11c/fol
S6nJIcaFXhphgw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:19 2026 by rpki-client