Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
File: VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json)
Hash identifier: NZIU+L/Rb9hRbZnfRsB92/7RZ9dy+JQ+6CZ8hgp6B8g=
Subject key identifier: 74:45:FC:28:60:3D:4B:1B:EA:52:A9:13:44:E0:16:6F:B6:30:F3:C2
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Certificate issuer: /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial: 019D99D0338535DFBDBE733C778373798CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
Manifest number: 0FA9
Signing time: Fri 17 Apr 2026 05:00:51 +0000
Manifest this update: Fri 17 Apr 2026 05:00:51 +0000
Manifest next update: Sat 18 Apr 2026 05:00:51 +0000
Files and hashes: 1: ApzBB8QQLMI_xsO48Jm3jxRXuhI.roa (hash: K+MZAh6Qr7nnvD9WoHZdULSDa2rCr8sl1Vr//Yn6JfU=)
2: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: Uys+0ZWS/6JH2J6LWRWibXaPr0rqB5eMxJDV6bmDMKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:33:85:35:df:bd:be:73:3c:77:83:73:79:8c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
Validity
Not Before: Apr 17 05:00:51 2026 GMT
Not After : Apr 18 05:00:51 2026 GMT
Subject: CN=7445fc28603d4b1bea52a91344e0166fb630f3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:bb:4d:77:a2:e1:55:7e:b6:5e:07:ca:bf:
3b:4d:e9:44:8e:1f:27:7f:e6:fe:35:f8:ff:e6:31:
c4:4c:7a:03:7b:ba:a2:b7:02:24:d1:01:a3:f5:5b:
e7:39:35:fc:3f:b7:39:8b:25:c8:5a:47:d6:d5:4e:
bb:c6:41:cc:83:00:96:de:2d:4d:a5:d5:4a:3a:5a:
da:db:9c:47:7a:f3:e4:d4:9b:ee:65:df:91:1f:5a:
4f:0c:55:36:1c:2f:33:29:34:c0:e4:c9:60:b2:d8:
29:72:fd:c6:33:eb:ff:cf:35:bb:e2:bf:ed:a1:b1:
ae:5e:64:29:e7:99:81:84:5d:ef:cf:c4:f9:10:04:
34:93:2e:bd:01:82:09:58:0f:34:05:f5:b0:65:76:
82:0f:8d:f8:59:18:33:fe:6b:27:16:1c:50:04:ab:
64:d6:4d:0c:29:be:b4:b7:8e:2c:35:87:df:59:89:
2f:13:e8:58:b6:c1:36:36:03:67:28:41:f3:53:b9:
b0:b6:f6:21:10:36:6e:68:d2:7e:53:45:fd:fe:81:
49:e3:09:d3:f2:28:b1:87:65:8f:0b:95:28:80:87:
13:58:eb:87:e5:e1:5c:98:09:77:7c:f0:bb:6a:a8:
8f:7d:df:02:5b:aa:11:fc:4b:a0:66:5e:f3:43:7b:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:45:FC:28:60:3D:4B:1B:EA:52:A9:13:44:E0:16:6F:B6:30:F3:C2
X509v3 Authority Key Identifier:
keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f9:f9:48:b1:03:81:16:2d:c6:c7:34:78:e3:c9:e1:ca:45:
50:20:c8:d3:5b:33:ed:b0:68:e4:4f:d9:48:5d:a8:29:da:6f:
12:0c:00:d8:b0:5b:98:e9:cb:a2:00:91:4a:78:1d:f2:af:24:
0b:cc:0e:50:57:f1:7f:e9:eb:6c:79:52:c0:81:46:c7:6f:b1:
dc:c9:d9:91:c3:44:18:69:c9:16:fd:fa:1f:6e:cd:48:74:8a:
8a:7a:fd:69:1d:85:bb:c3:3d:66:84:00:eb:5c:03:5f:09:0e:
30:5b:78:39:a2:06:e9:db:a5:9a:5c:21:36:fd:94:c4:0d:a9:
4c:dc:f8:7e:9c:12:64:fe:90:0d:a0:24:99:ff:3f:a0:bd:fd:
38:56:2e:e4:4d:21:c3:a6:88:a2:4f:5b:25:4c:46:50:da:2e:
66:6e:e7:8d:6d:11:68:4f:18:6c:49:43:53:6f:15:af:60:07:
e9:32:67:db:24:4b:a8:7f:0a:2b:af:d0:fb:97:7a:ac:45:3f:
35:64:8e:8c:2d:11:73:74:62:46:36:f9:e2:71:44:d5:d2:c0:
d0:62:96:90:b2:40:0d:ee:27:3d:98:2c:66:e3:33:65:38:a6:
2e:ea:1f:d5:c2:7c:57:a9:06:2d:96:b3:a4:79:a7:4f:40:b2:
fb:01:ab:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0DOFNd+9vnM8d4NzeYyiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NmRlMzI2ZGU5NTIyYmQyOTZiZWQ0ODIzODVjOTc2OTI1
OGQ4ZjEwHhcNMjYwNDE3MDUwMDUxWhcNMjYwNDE4MDUwMDUxWjAzMTEwLwYDVQQD
Eyg3NDQ1ZmMyODYwM2Q0YjFiZWE1MmE5MTM0NGUwMTY2ZmI2MzBmM2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiC7TXei4VV+tl4Hyr87TelEjh8n
f+b+Nfj/5jHETHoDe7qitwIk0QGj9VvnOTX8P7c5iyXIWkfW1U67xkHMgwCW3i1N
pdVKOlra25xHevPk1JvuZd+RH1pPDFU2HC8zKTTA5Mlgstgpcv3GM+v/zzW74r/t
obGuXmQp55mBhF3vz8T5EAQ0ky69AYIJWA80BfWwZXaCD434WRgz/msnFhxQBKtk
1k0MKb60t44sNYffWYkvE+hYtsE2NgNnKEHzU7mwtvYhEDZuaNJ+U0X9/oFJ4wnT
8iixh2WPC5UogIcTWOuH5eFcmAl3fPC7aqiPfd8CW6oR/EugZl7zQ3u6qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRF/ChgPUsb6lKpE0TgFm+2MPPCMB8GA1UdIwQY
MBaAFFRt4ybelSK9KWvtSCOFyXaSWNjxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkczakp0NlZJcjBwYS0xSUk0WEpkcEpZMlBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xYmFkN2UtY2Y1Yy00ZDFjLTg2NGEt
NDkzNzYwMWM4ZmVhLzEvVkczakp0NlZJcjBwYS0xSUk0WEpkcEpZMlBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8xYmFkN2UtY2Y1Yy00ZDFjLTg2NGEtNDkzNzYwMWM4ZmVh
LzEvVkczakp0NlZJcjBwYS0xSUk0WEpkcEpZMlBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfn5SLED
gRYtxsc0eOPJ4cpFUCDI01sz7bBo5E/ZSF2oKdpvEgwA2LBbmOnLogCRSngd8q8k
C8wOUFfxf+nrbHlSwIFGx2+x3MnZkcNEGGnJFv36H27NSHSKinr9aR2Fu8M9ZoQA
61wDXwkOMFt4OaIG6dulmlwhNv2UxA2pTNz4fpwSZP6QDaAkmf8/oL39OFYu5E0h
w6aIok9bJUxGUNouZm7njW0RaE8YbElDU28Vr2AH6TJn2yRLqH8KK6/Q+5d6rEU/
NWSOjC0Rc3RiRjb54nFE1dLA0GKWkLJADe4nPZgsZuMzZTimLuof1cJ8V6kGLZaz
pHmnT0Cy+wGrPg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:30 2026 by rpki-client