Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
File: VUexftfcydHsKj_H1eeStZHqYoA.mft (raw, json)
Hash identifier: +aD0DLSeeFEQlMcXa2hLnIzSxKDXHvOYpRvrvc6CiX8=
Subject key identifier: 16:65:FE:11:CC:EF:ED:F5:7E:D5:41:59:70:82:0D:F0:10:A9:8D:04
Authority key identifier: 55:47:B1:7E:D7:DC:C9:D1:EC:2A:3F:C7:D5:E7:92:B5:91:EA:62:80
Certificate issuer: /CN=5547b17ed7dcc9d1ec2a3fc7d5e792b591ea6280
Certificate serial: 019DA4F89657074BC7D5BFABB576DA928C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 09:00:47 +0000
Manifest this update: Sun 19 Apr 2026 09:00:47 +0000
Manifest next update: Mon 20 Apr 2026 09:00:47 +0000
Files and hashes: 1: VUexftfcydHsKj_H1eeStZHqYoA.crl (hash: I/0kh2zHhucd6rf/EJ4dYlPkHTsorzJlPe9P4b8esQY=)
2: tsIXIQRuUDBV02rdPLj6XJnzDl4.roa (hash: +5zk1WdRPKPJfJvtpk3tr0u9W43LZvbEvy4wGv4JI08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:96:57:07:4b:c7:d5:bf:ab:b5:76:da:92:8c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5547b17ed7dcc9d1ec2a3fc7d5e792b591ea6280
Validity
Not Before: Apr 19 09:00:47 2026 GMT
Not After : Apr 20 09:00:47 2026 GMT
Subject: CN=1665fe11ccefedf57ed5415970820df010a98d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:92:40:23:42:ef:70:71:5f:06:c4:d1:7f:
9a:f6:94:78:d2:5d:e6:16:08:43:c0:bb:26:09:89:
66:9a:9c:c3:ef:08:93:9c:45:ab:d7:81:77:3e:d7:
41:45:f0:92:61:86:f3:47:9f:1c:e9:48:eb:ee:b6:
2c:c5:36:77:03:82:7e:2d:47:e9:7a:e2:8e:c0:15:
3e:c2:c5:36:d1:a5:50:c0:ab:98:ba:57:be:a9:f8:
6b:dc:a0:76:ca:ac:11:f0:65:64:7d:d4:24:9c:a3:
ca:08:20:c9:11:77:9d:3d:db:0d:92:a7:08:60:b4:
15:c0:f5:7f:c7:a7:8b:fe:ea:cb:59:f5:09:ce:05:
aa:b5:2d:9f:74:a3:37:e3:ea:d7:3c:33:b6:12:46:
04:f7:47:1b:d4:96:0e:aa:0f:f5:a1:c0:b0:b7:2d:
ae:ea:e2:9d:c7:fe:e4:80:49:82:7c:d0:f1:d5:f9:
89:90:ca:c7:ef:6e:28:76:f3:78:4d:ce:d8:b3:15:
d7:af:6d:85:bf:9b:86:a6:0a:20:72:c3:f0:3d:aa:
9d:bd:39:0e:94:0d:5d:36:09:bd:e4:18:c2:9e:18:
d4:fe:e1:76:cb:ff:f4:cd:27:de:dc:bf:0e:71:c3:
5f:27:85:f3:37:a9:d5:b1:43:13:a7:d0:e7:e6:46:
8e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:65:FE:11:CC:EF:ED:F5:7E:D5:41:59:70:82:0D:F0:10:A9:8D:04
X509v3 Authority Key Identifier:
keyid:55:47:B1:7E:D7:DC:C9:D1:EC:2A:3F:C7:D5:E7:92:B5:91:EA:62:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f8:45:6e:b6:75:e0:d1:83:46:e7:82:ef:c8:b3:c7:96:e8:
46:10:a3:88:3e:a3:51:da:29:91:91:68:a8:74:0a:d2:fe:f3:
8c:22:b0:c5:c4:57:2d:ff:ca:14:d6:1c:81:9b:a0:1f:36:39:
25:2e:ab:e2:87:15:1e:55:88:28:62:ce:8a:fb:67:5b:fc:d5:
23:8a:5c:15:89:2e:94:60:39:a4:fb:4b:61:52:d5:9f:e5:c4:
4a:fc:cb:18:10:b8:b1:4c:51:77:9f:88:14:2b:c4:a4:28:ab:
d7:8b:93:2f:c8:a6:91:07:85:90:f5:b5:c0:48:82:61:8a:3b:
a4:f5:cd:39:49:f6:ed:78:f5:96:80:68:25:05:17:05:fb:cc:
e0:43:a5:d3:21:35:d6:19:52:f9:e1:89:e8:d9:8c:35:e2:34:
bc:a0:d1:ad:a6:1e:01:b1:3d:88:2b:a7:91:d9:df:e2:79:81:
f0:89:34:e9:2b:f0:20:84:c6:66:86:5f:06:6a:3a:16:57:14:
b0:30:07:6b:31:70:d4:e3:f0:69:a6:ef:c3:49:80:f5:a4:ce:
83:ce:0a:b1:b8:6c:2c:53:b1:be:fd:36:0e:c9:05:ad:4a:4e:
f5:ea:78:ae:12:b7:cc:95:ce:c0:6d:05:c6:e2:9d:fc:5f:10:
79:86:5a:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+JZXB0vH1b+rtXbakowVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NDdiMTdlZDdkY2M5ZDFlYzJhM2ZjN2Q1ZTc5MmI1OTFl
YTYyODAwHhcNMjYwNDE5MDkwMDQ3WhcNMjYwNDIwMDkwMDQ3WjAzMTEwLwYDVQQD
EygxNjY1ZmUxMWNjZWZlZGY1N2VkNTQxNTk3MDgyMGRmMDEwYTk4ZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkuSQCNC73BxXwbE0X+a9pR40l3m
FghDwLsmCYlmmpzD7wiTnEWr14F3PtdBRfCSYYbzR58c6Ujr7rYsxTZ3A4J+LUfp
euKOwBU+wsU20aVQwKuYule+qfhr3KB2yqwR8GVkfdQknKPKCCDJEXedPdsNkqcI
YLQVwPV/x6eL/urLWfUJzgWqtS2fdKM34+rXPDO2EkYE90cb1JYOqg/1ocCwty2u
6uKdx/7kgEmCfNDx1fmJkMrH724odvN4Tc7YsxXXr22Fv5uGpgogcsPwPaqdvTkO
lA1dNgm95BjCnhjU/uF2y//0zSfe3L8OccNfJ4XzN6nVsUMTp9Dn5kaOzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZl/hHM7+31ftVBWXCCDfAQqY0EMB8GA1UdIwQY
MBaAFFVHsX7X3MnR7Co/x9XnkrWR6mKAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlVleGZ0ZmN5ZEhzS2pfSDFlZVN0WkhxWW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMWRhMDYtMTk4ZS00NGJiLWIzM2Yt
MTNlMzMzZTFmYTE3LzEvVlVleGZ0ZmN5ZEhzS2pfSDFlZVN0WkhxWW9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jMWRhMDYtMTk4ZS00NGJiLWIzM2YtMTNlMzMzZTFmYTE3
LzEvVlVleGZ0ZmN5ZEhzS2pfSDFlZVN0WkhxWW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvhFbrZ1
4NGDRueC78izx5boRhCjiD6jUdopkZFoqHQK0v7zjCKwxcRXLf/KFNYcgZugHzY5
JS6r4ocVHlWIKGLOivtnW/zVI4pcFYkulGA5pPtLYVLVn+XESvzLGBC4sUxRd5+I
FCvEpCir14uTL8imkQeFkPW1wEiCYYo7pPXNOUn27Xj1loBoJQUXBfvM4EOl0yE1
1hlS+eGJ6NmMNeI0vKDRraYeAbE9iCunkdnf4nmB8Ik06SvwIITGZoZfBmo6FlcU
sDAHazFw1OPwaabvw0mA9aTOg84KsbhsLFOxvv02DskFrUpO9ep4rhK3zJXOwG0F
xuKd/F8QeYZaTA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:06:16 2026 by rpki-client