Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
File: VI91elbRdoDW1mkLGdnzkGGYADM.mft (raw, json)
Hash identifier: UWUHlzB39OFkI3xIXqcglzE4St9yMJffAOpyfO8Q4CE=
Subject key identifier: 4E:F0:0F:75:6E:6F:3A:50:15:A9:2F:73:14:48:FF:C9:1C:7A:3E:A3
Authority key identifier: 54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
Certificate issuer: /CN=548f757a56d17680d6d6690b19d9f39061980033
Certificate serial: 019CAAC6D168B5689D85CCAAC7DBA5F6A69C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
Manifest number: 12E8
Signing time: Sun 01 Mar 2026 19:01:22 +0000
Manifest this update: Sun 01 Mar 2026 19:01:22 +0000
Manifest next update: Mon 02 Mar 2026 19:01:22 +0000
Files and hashes: 1: PYk6RC5m7OJWXRNYO3x9foVmPwM.roa (hash: PyAWpAbdnvAvMuGXImxWil5LYMDe43kyqM8HknJO3mg=)
2: VI91elbRdoDW1mkLGdnzkGGYADM.crl (hash: BJNoCMVduFT00sBv362FJcC5t2cKBFsnp3p1tROR8u4=)
3: VilG8hdH4e2PgtPf0HH0QvCs9SA.roa (hash: X3S3ljAAWfahEeHRRoaDomf7TEYfABDZSsMixEQ2Qa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d1:68:b5:68:9d:85:cc:aa:c7:db:a5:f6:a6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=548f757a56d17680d6d6690b19d9f39061980033
Validity
Not Before: Mar 1 19:01:22 2026 GMT
Not After : Mar 2 19:01:22 2026 GMT
Subject: CN=4ef00f756e6f3a5015a92f731448ffc91c7a3ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:63:cb:2c:f9:6c:4e:08:12:23:ca:be:c9:
ce:65:dc:09:83:75:3f:01:8c:42:57:50:28:e6:1c:
31:f0:50:52:98:a9:ef:4a:13:9c:7f:44:5c:77:7d:
78:04:60:1d:52:5d:de:a6:82:1d:dc:86:01:d6:29:
94:3f:b7:a2:51:58:74:32:16:92:60:a4:ea:f9:b6:
09:ee:04:2d:6f:f8:06:c5:13:98:03:b7:fd:df:32:
dc:e6:63:0a:5f:bf:88:a3:88:50:c1:2f:7f:d2:d0:
7f:0e:f6:70:4c:60:38:a2:d5:8c:5f:f0:aa:3e:ad:
32:a3:f1:02:62:71:c7:4e:5e:74:7a:95:6d:1a:2b:
be:51:0b:1b:4f:60:80:2d:45:55:fe:91:d5:a3:a1:
53:f5:83:e3:3c:c7:3b:9f:f1:85:97:88:fe:84:45:
17:ab:f5:50:43:5f:ea:3c:dd:e5:92:0b:6a:b3:b2:
d1:20:09:43:08:82:eb:0e:a8:81:bd:90:52:28:13:
ef:ea:ce:aa:0a:c1:4f:6e:35:ef:1f:0f:1b:8b:11:
7d:01:6f:a1:87:f8:3a:84:25:df:9b:ad:20:dd:34:
0b:4f:5c:95:3e:a7:fb:ea:28:8a:07:1a:ff:2e:5f:
0a:57:59:e5:59:a5:40:8a:a7:2d:ec:29:1c:ad:6f:
bb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F0:0F:75:6E:6F:3A:50:15:A9:2F:73:14:48:FF:C9:1C:7A:3E:A3
X509v3 Authority Key Identifier:
keyid:54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:70:3f:8c:49:54:e1:cc:86:2d:14:8b:a5:eb:5c:92:2a:3b:
23:46:1c:f8:7e:76:7d:3f:4c:44:03:09:c0:bc:96:06:d5:e5:
6f:b8:43:26:be:e8:75:36:1e:ef:17:20:e9:a0:c0:33:c6:58:
3b:a6:8f:92:f6:78:2b:20:38:f6:73:12:cb:5a:30:37:0d:fe:
20:a9:6c:f6:d5:05:05:c0:cf:19:86:4b:87:98:fd:08:fe:dc:
96:24:67:37:09:2a:fd:7a:8c:6a:27:ee:3e:15:a9:1c:9a:03:
e9:fc:7e:18:bd:20:5c:78:35:3c:5b:3a:07:47:85:24:ee:c3:
10:df:40:9a:d8:44:e5:78:51:36:7f:f9:46:a5:ae:51:56:a7:
74:6b:ff:54:62:c4:49:55:8d:68:d0:8b:d9:73:08:df:82:8a:
4a:2d:3e:a3:4a:6d:94:e9:57:35:57:75:fc:1a:b0:78:96:e0:
24:09:c3:65:81:6c:aa:89:0e:41:c0:78:e0:8d:1e:c2:47:fd:
3a:c8:9f:32:77:e6:8c:32:e1:63:ac:12:a5:95:67:a9:7f:67:
1c:a9:b8:09:95:12:b7:e3:3c:61:86:23:7e:f4:28:94:50:17:
a1:fd:58:b7:55:5a:4a:6b:f2:18:0c:2b:b3:39:f9:cc:5c:e1:
20:93:8d:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxtFotWidhcyqx9ul9qacMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OGY3NTdhNTZkMTc2ODBkNmQ2NjkwYjE5ZDlmMzkwNjE5
ODAwMzMwHhcNMjYwMzAxMTkwMTIyWhcNMjYwMzAyMTkwMTIyWjAzMTEwLwYDVQQD
Eyg0ZWYwMGY3NTZlNmYzYTUwMTVhOTJmNzMxNDQ4ZmZjOTFjN2EzZWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydRjyyz5bE4IEiPKvsnOZdwJg3U/
AYxCV1Ao5hwx8FBSmKnvShOcf0Rcd314BGAdUl3epoId3IYB1imUP7eiUVh0MhaS
YKTq+bYJ7gQtb/gGxROYA7f93zLc5mMKX7+Io4hQwS9/0tB/DvZwTGA4otWMX/Cq
Pq0yo/ECYnHHTl50epVtGiu+UQsbT2CALUVV/pHVo6FT9YPjPMc7n/GFl4j+hEUX
q/VQQ1/qPN3lkgtqs7LRIAlDCILrDqiBvZBSKBPv6s6qCsFPbjXvHw8bixF9AW+h
h/g6hCXfm60g3TQLT1yVPqf76iiKBxr/Ll8KV1nlWaVAiqct7CkcrW+7UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7wD3VubzpQFakvcxRI/8kcej6jMB8GA1UdIwQY
MBaAFFSPdXpW0XaA1tZpCxnZ85BhmAAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jZjkzYWMtZGVkZC00MTMwLWIzNjUt
YjhlNjU2NmEyNzlhLzEvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jZjkzYWMtZGVkZC00MTMwLWIzNjUtYjhlNjU2NmEyNzlh
LzEvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3A/jElU
4cyGLRSLpetckio7I0Yc+H52fT9MRAMJwLyWBtXlb7hDJr7odTYe7xcg6aDAM8ZY
O6aPkvZ4KyA49nMSy1owNw3+IKls9tUFBcDPGYZLh5j9CP7cliRnNwkq/XqMaifu
PhWpHJoD6fx+GL0gXHg1PFs6B0eFJO7DEN9AmthE5XhRNn/5RqWuUVandGv/VGLE
SVWNaNCL2XMI34KKSi0+o0ptlOlXNVd1/BqweJbgJAnDZYFsqokOQcB44I0ewkf9
OsifMnfmjDLhY6wSpZVnqX9nHKm4CZUSt+M8YYYjfvQolFAXof1Yt1VaSmvyGAwr
szn5zFzhIJONDA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:09 2026 by rpki-client