Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File: VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier: APhAD+P9y2H5ptklKf9ZGq6kNdqmRX8WegfBKU04ivQ=
Subject key identifier: 1F:5E:76:13:91:65:01:D8:D5:6D:34:A6:DB:30:FC:36:6C:DC:89:15
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 01A1DF4CC7AD8F08C796E7714705D9D32073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number: 1B33
Signing time: Sun 15 Nov 2026 13:01:53 +0000
Manifest this update: Sun 15 Nov 2026 13:01:53 +0000
Manifest next update: Mon 16 Nov 2026 13:01:53 +0000
Files and hashes: 1: 7NGoj5cGztX58pAtipUcpmb4aIM.roa (hash: vlOULZs24F/kcnILYjizoe3IHDjDEgukRjmyfRx6nIw=)
2: V2ZzzbVPUiKvWiZZCU89cR5PNd0.roa (hash: A3URN1enAjnCkB6UzDkrO/J0z/XkaxyVPZWO9Xu4fHc=)
3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: E3vB/SZbp9QR0TBHtsyusbJMkgYySY5KyjI+Mb0w/Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:c7:ad:8f:08:c7:96:e7:71:47:05:d9:d3:20:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: Nov 15 13:01:53 2026 GMT
Not After : Nov 16 13:01:53 2026 GMT
Subject: CN=1f5e7613916501d8d56d34a6db30fc366cdc8915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:73:d5:57:bd:97:bb:bf:c9:1d:4f:75:e4:
a2:0c:09:53:f2:12:0a:99:0d:eb:55:33:32:0d:76:
af:ec:3b:1c:f6:13:c8:dc:47:73:16:53:de:17:a8:
b7:be:b2:96:17:3c:ba:c7:f6:d7:ec:e7:0f:91:a8:
1f:3b:aa:3a:ba:8a:1b:8b:93:93:9a:f4:ed:c3:67:
2c:f1:4c:e5:26:f9:4a:05:ff:f4:cb:dc:1b:c1:ca:
48:0f:a1:56:36:16:81:3f:43:f0:55:6b:b8:53:13:
53:11:80:25:13:04:a5:04:ae:bb:cd:3d:7a:08:0c:
a5:68:aa:a2:8e:b2:d5:c9:d0:72:ff:80:62:47:79:
ff:ae:cc:a8:d1:35:4c:87:6f:59:1d:16:86:89:5c:
f9:2e:3a:96:0f:2c:d5:71:b1:4e:41:c8:b3:c7:61:
62:db:69:41:c4:31:32:0a:2c:e3:18:06:48:27:47:
40:71:0b:b1:65:c0:e1:62:6d:ad:a3:6c:15:ab:fb:
43:89:c8:8e:33:61:05:5e:ff:80:86:33:2f:28:6e:
43:46:72:7b:b1:b8:0c:78:63:be:63:05:d7:44:35:
6e:7f:ec:11:0d:13:c8:0d:1d:f7:55:94:75:58:29:
58:45:4e:96:4c:ec:63:4d:8a:f7:2c:d1:d9:35:ad:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5E:76:13:91:65:01:D8:D5:6D:34:A6:DB:30:FC:36:6C:DC:89:15
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9e:32:24:92:55:c1:fa:79:08:90:81:1e:41:23:84:0f:06:
42:65:2b:85:d7:3a:f4:16:e6:a1:88:43:17:57:74:93:9f:58:
63:ab:4c:ed:31:d9:1a:b8:92:a3:e8:f7:15:04:e4:5a:9a:99:
1e:70:77:2e:ac:2f:18:06:62:2b:09:7e:d5:45:6a:1a:44:09:
4a:14:e4:3b:c1:a2:ee:33:55:b7:13:74:9f:bf:a7:30:e9:12:
11:50:33:22:a9:b0:a9:ec:b7:4e:49:4e:23:89:02:00:99:b1:
74:08:f7:fc:36:5f:95:7d:eb:b5:fe:47:9f:8e:ef:a8:ee:5c:
ed:b8:6c:83:b1:bd:db:22:a7:64:79:49:77:61:a8:e1:09:5e:
4e:ee:9c:4a:0f:97:0c:a8:d7:9e:ec:b0:9b:f8:6e:9f:13:5e:
6a:14:64:54:24:30:24:4f:61:4e:51:1a:38:cc:2d:16:67:ae:
d2:2d:d1:52:b8:8f:0e:cc:10:d4:d5:5c:86:80:dc:9d:45:e7:
0e:63:8d:91:d3:6d:65:4f:4a:b6:46:58:15:df:2d:ad:b6:dd:
16:49:6b:1b:97:83:15:0e:79:4f:be:82:c2:e3:c3:1b:67:1f:
e7:f4:d6:f9:4f:30:67:ef:4a:50:45:4b:6d:7b:f7:41:bc:25:
bc:9a:2e:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfTMetjwjHludxRwXZ0yBzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MmFkM2EwYjRiNzRlODVhZjU0ZjU4YWQ3NWEzMDI2Yjdk
ZjcxODEwHhcNMjYxMTE1MTMwMTUzWhcNMjYxMTE2MTMwMTUzWjAzMTEwLwYDVQQD
EygxZjVlNzYxMzkxNjUwMWQ4ZDU2ZDM0YTZkYjMwZmMzNjZjZGM4OTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh5z1Ve9l7u/yR1PdeSiDAlT8hIK
mQ3rVTMyDXav7Dsc9hPI3EdzFlPeF6i3vrKWFzy6x/bX7OcPkagfO6o6uoobi5OT
mvTtw2cs8UzlJvlKBf/0y9wbwcpID6FWNhaBP0PwVWu4UxNTEYAlEwSlBK67zT16
CAylaKqijrLVydBy/4BiR3n/rsyo0TVMh29ZHRaGiVz5LjqWDyzVcbFOQcizx2Fi
22lBxDEyCizjGAZIJ0dAcQuxZcDhYm2to2wVq/tDiciOM2EFXv+AhjMvKG5DRnJ7
sbgMeGO+YwXXRDVuf+wRDRPIDR33VZR1WClYRU6WTOxjTYr3LNHZNa0YUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9edhORZQHY1W00ptsw/DZs3IkVMB8GA1UdIwQY
MBaAFFUq06C0t06Fr1T1itdaMCa333GBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlNyVG9MUzNUb1d2VlBXSzExb3dKcmZmY1lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xNmZjZjEtNjQxMi00ZGIyLWIzYWUt
NDlhM2M0OWYzOTNjLzEvVlNyVG9MUzNUb1d2VlBXSzExb3dKcmZmY1lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8xNmZjZjEtNjQxMi00ZGIyLWIzYWUtNDlhM2M0OWYzOTNj
LzEvVlNyVG9MUzNUb1d2VlBXSzExb3dKcmZmY1lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVp4yJJJV
wfp5CJCBHkEjhA8GQmUrhdc69BbmoYhDF1d0k59YY6tM7THZGriSo+j3FQTkWpqZ
HnB3LqwvGAZiKwl+1UVqGkQJShTkO8Gi7jNVtxN0n7+nMOkSEVAzIqmwqey3TklO
I4kCAJmxdAj3/DZflX3rtf5Hn47vqO5c7bhsg7G92yKnZHlJd2Go4QleTu6cSg+X
DKjXnuywm/hunxNeahRkVCQwJE9hTlEaOMwtFmeu0i3RUriPDswQ1NVchoDcnUXn
DmONkdNtZU9KtkZYFd8trbbdFklrG5eDFQ55T76CwuPDG2cf5/TW+U8wZ+9KUEVL
bXv3QbwlvJoucA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:51:03 2026 by rpki-client