Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
File: VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft (raw, json)
Hash identifier: /jnA7gMupf49tgwfGrj0pPugg0qK+ppj/s+tCYU6G9g=
Subject key identifier: 2B:33:CF:48:89:6B:02:E5:BF:74:D5:7F:62:61:3C:97:08:EF:09:DD
Authority key identifier: 54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
Certificate issuer: /CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Certificate serial: 019D9AAB89A843D3EFF278500D423EEFF115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
Manifest number: 0FBB
Signing time: Fri 17 Apr 2026 09:00:26 +0000
Manifest this update: Fri 17 Apr 2026 09:00:26 +0000
Manifest next update: Sat 18 Apr 2026 09:00:26 +0000
Files and hashes: 1: 3BS1Vk6oY_4Q-IA4IkoRCzuBzcM.roa (hash: gfB5bbDDulAvXz0n1M7KzaA+1p0+Euw0D8YsIhe2tHw=)
2: VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl (hash: IdFAvHARc3wYwj3K+e/OC7W0fvrp32jKWpaq8TLcx9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:89:a8:43:d3:ef:f2:78:50:0d:42:3e:ef:f1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Validity
Not Before: Apr 17 09:00:26 2026 GMT
Not After : Apr 18 09:00:26 2026 GMT
Subject: CN=2b33cf48896b02e5bf74d57f62613c9708ef09dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:05:ac:31:75:17:8f:b4:1c:e8:fe:61:16:1c:
09:a7:6b:da:e2:59:51:90:48:e2:03:b3:23:09:01:
a4:83:31:00:2e:65:e6:2c:93:1c:86:57:ec:1c:cd:
08:0d:d8:ae:ca:43:d7:02:7e:48:77:f9:da:c5:af:
70:05:1f:1d:7c:ac:fc:af:f8:a2:c4:42:50:88:c8:
91:be:6a:76:81:60:97:5d:ca:4a:10:cd:da:de:a1:
65:48:17:da:dd:82:84:4e:63:3f:80:0a:7e:69:5f:
01:12:9c:9d:00:f5:a3:6e:f5:ed:40:9b:3c:55:f4:
f3:54:0d:75:6a:1a:7c:32:3e:10:f0:f6:cf:a5:9a:
f1:26:dd:a1:bd:be:b0:2d:54:cc:88:74:8c:91:d5:
34:d3:fb:66:12:92:a2:22:a8:28:c0:47:a2:11:e1:
e5:66:07:e5:10:a1:83:99:1d:9f:c8:27:5c:58:99:
bc:49:06:46:79:3d:a3:11:e3:6c:9e:9c:b9:da:7f:
54:cf:ac:7b:32:c5:cf:55:b3:68:b3:41:90:2d:c5:
39:ce:17:49:0b:f7:18:de:c3:ca:d0:e0:61:9e:ec:
a5:21:86:7e:10:c3:86:b1:a8:be:a7:16:0e:1d:7e:
de:aa:5b:e2:72:70:4c:a5:a7:03:fe:d4:02:79:66:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:33:CF:48:89:6B:02:E5:BF:74:D5:7F:62:61:3C:97:08:EF:09:DD
X509v3 Authority Key Identifier:
keyid:54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:02:c2:cc:5d:df:d9:b4:d4:e6:f6:6d:c8:ae:a7:ee:9b:15:
e0:52:0e:4d:c3:79:b0:75:f0:3e:08:03:a1:a8:93:38:a4:38:
2b:10:24:8a:14:64:5b:1f:53:71:3f:30:31:e2:91:41:6f:97:
ca:54:e8:51:68:7c:bc:5b:1b:95:7b:7a:fd:2e:ba:a7:4a:77:
1e:47:74:d7:c6:0c:7f:34:d5:66:1b:53:0c:83:50:8b:07:0c:
cf:b0:89:96:b3:02:37:fc:dc:8d:ff:4d:4b:59:d3:bc:48:10:
f7:63:f0:c0:ba:a7:3f:09:eb:e8:d2:54:a4:99:d6:86:ac:f9:
44:3c:ee:6c:47:0f:bb:86:f2:52:8a:79:63:35:ae:93:3a:29:
ca:f9:53:be:07:2e:31:74:e0:c8:54:4f:66:a6:06:ec:df:eb:
7e:5a:71:d4:da:24:84:0b:5b:ed:5d:b5:d1:cc:46:1b:b9:cc:
45:6f:15:d9:fb:d1:27:fd:58:3e:f8:e7:b9:b4:19:3a:54:8a:
6a:a8:c2:a8:5f:ea:51:de:ec:d1:a6:a2:df:ff:19:d6:fe:8c:
6a:c6:93:4c:55:5e:44:e6:6f:0d:39:ad:6a:c2:29:8f:d7:2b:
c5:7c:e3:2e:bf:33:eb:91:56:b6:05:56:7b:e3:9f:c7:5f:eb:
de:bf:08:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq4moQ9Pv8nhQDUI+7/EVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTE0YmU2MTk3NTVlZWVlYjkxZmUyZjYyYTFkNGVlMDc4
NjE0OTYwHhcNMjYwNDE3MDkwMDI2WhcNMjYwNDE4MDkwMDI2WjAzMTEwLwYDVQQD
EygyYjMzY2Y0ODg5NmIwMmU1YmY3NGQ1N2Y2MjYxM2M5NzA4ZWYwOWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9wWsMXUXj7Qc6P5hFhwJp2va4llR
kEjiA7MjCQGkgzEALmXmLJMchlfsHM0IDdiuykPXAn5Id/naxa9wBR8dfKz8r/ii
xEJQiMiRvmp2gWCXXcpKEM3a3qFlSBfa3YKETmM/gAp+aV8BEpydAPWjbvXtQJs8
VfTzVA11ahp8Mj4Q8PbPpZrxJt2hvb6wLVTMiHSMkdU00/tmEpKiIqgowEeiEeHl
ZgflEKGDmR2fyCdcWJm8SQZGeT2jEeNsnpy52n9Uz6x7MsXPVbNos0GQLcU5zhdJ
C/cY3sPK0OBhnuylIYZ+EMOGsai+pxYOHX7eqlvicnBMpacD/tQCeWaESQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCszz0iJawLlv3TVf2JhPJcI7wndMB8GA1UdIwQY
MBaAFFShS+YZdV7u65H+L2Kh1O4HhhSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktGTDVobDFYdTdya2Y0dllxSFU3Z2VHRkpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iOGE5ZTctOTQ1MC00MzZjLWJmOTAt
OGU5MDQ2NmJhZDM4LzEvVktGTDVobDFYdTdya2Y0dllxSFU3Z2VHRkpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iOGE5ZTctOTQ1MC00MzZjLWJmOTAtOGU5MDQ2NmJhZDM4
LzEvVktGTDVobDFYdTdya2Y0dllxSFU3Z2VHRkpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiALCzF3f
2bTU5vZtyK6n7psV4FIOTcN5sHXwPggDoaiTOKQ4KxAkihRkWx9TcT8wMeKRQW+X
ylToUWh8vFsblXt6/S66p0p3Hkd018YMfzTVZhtTDINQiwcMz7CJlrMCN/zcjf9N
S1nTvEgQ92PwwLqnPwnr6NJUpJnWhqz5RDzubEcPu4byUop5YzWukzopyvlTvgcu
MXTgyFRPZqYG7N/rflpx1NokhAtb7V210cxGG7nMRW8V2fvRJ/1YPvjnubQZOlSK
aqjCqF/qUd7s0aai3/8Z1v6MasaTTFVeROZvDTmtasIpj9crxXzjLr8z65FWtgVW
e+Ofx1/r3r8Imw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:48 2026 by rpki-client