Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
File: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft (raw, json)
Hash identifier: MBIIphDsw4IjSTxtyI6Zr6ACGxMGIbsdhQj29GJYYkM=
Subject key identifier: 6A:24:A0:9F:4A:D4:88:41:15:0A:13:3A:CF:E0:83:13:08:21:68:CC
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Certificate issuer: /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial: 019D9AE303F5CA963AB4F4AE6D403F6E6CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 10:01:02 +0000
Manifest this update: Fri 17 Apr 2026 10:01:02 +0000
Manifest next update: Sat 18 Apr 2026 10:01:02 +0000
Files and hashes: 1: 2Vs8KUJ3ARsfzl5aenkyGCSy_lo.roa (hash: 8dxvcB3TSqVgvjogy5IQYglbYDvwwLxpsQ+qsiWMSlQ=)
2: 8YICkcy5MxdkFP4Ulv27x-Ip2YA.roa (hash: FjVwt2RS+W3bJxzVk95vARiv6Ttn05j7+22iJ3Ku7Y8=)
3: rGOh0aBSaJUcTjStlHDAvBi9GYw.roa (hash: 8mVUWl2qPU5MUsEWDFtGCEbrM6SO1p6D449zgLNKtAU=)
4: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl (hash: EQdSV1EDVH5wUtg5F70XqngYF5T8JpP5xCAnHXFHbds=)
5: wC3BpEB8qdaKpa6CpGZXp4T9slk.roa (hash: IXG8fhcHEZ3Xyts0Msy3p2RYoLeCdjHeJU1oF2Pw3VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:03:f5:ca:96:3a:b4:f4:ae:6d:40:3f:6e:6c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
Validity
Not Before: Apr 17 10:01:02 2026 GMT
Not After : Apr 18 10:01:02 2026 GMT
Subject: CN=6a24a09f4ad48841150a133acfe08313082168cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1e:03:14:6d:a9:07:74:2b:b1:88:61:4f:95:
72:52:4b:e7:46:ca:ab:db:36:c2:ca:fc:3f:5d:ff:
0a:3a:c7:15:38:2c:89:8a:bc:bb:a5:dc:8b:e1:52:
3e:0b:88:70:44:73:01:f1:5c:b9:d3:6d:85:35:3f:
7d:ea:fe:07:20:76:e8:4e:07:d7:3b:cf:c1:84:d8:
eb:ab:50:cc:fb:0c:55:c0:90:fa:c1:2d:c6:af:40:
b0:40:5a:03:eb:10:78:19:bf:47:1f:71:cb:5b:18:
9e:af:75:f1:ca:e4:de:82:11:8c:89:0e:a3:aa:61:
1c:ac:b8:a6:5c:06:07:4e:d2:ab:97:9c:f4:d0:c4:
37:dc:86:cf:8c:e5:be:5b:6d:1f:5d:26:46:35:45:
81:d8:16:9c:3e:c8:4a:37:aa:92:de:25:7e:8d:c5:
0d:26:3b:d7:57:98:5f:73:67:dc:ac:f5:15:1a:80:
07:aa:b5:a7:91:72:89:6b:11:51:13:ca:84:6c:22:
96:e1:d8:cd:97:6b:81:09:b2:a9:cf:5b:5c:9c:59:
1c:bd:cf:c9:8c:cd:2d:b2:0d:59:3f:22:d4:87:fd:
3a:f4:d4:1c:d8:d6:24:bd:7b:62:dc:fb:61:03:63:
96:7d:6d:fe:72:73:36:a3:6a:16:a2:2a:2a:b2:70:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:24:A0:9F:4A:D4:88:41:15:0A:13:3A:CF:E0:83:13:08:21:68:CC
X509v3 Authority Key Identifier:
keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:05:8a:c6:a5:a4:6e:e7:e6:65:e7:50:e5:e8:97:92:de:eb:
16:83:19:bd:f4:10:51:25:55:c4:90:05:e1:68:4d:24:f9:2e:
35:3b:be:94:c2:cd:b1:78:44:73:5f:1d:ba:db:ae:4a:d7:2f:
3e:a0:fc:0e:fb:0a:6f:45:d5:7d:0b:c2:c8:a7:66:d2:bc:e9:
f5:6b:9a:7c:59:49:76:b3:4e:bd:96:9c:4d:4b:bd:aa:30:50:
9b:9a:3d:65:cb:38:19:4c:97:5e:48:05:94:6f:66:b3:96:38:
da:4a:19:09:ba:6d:e0:cb:21:62:19:ea:bb:6a:96:a2:60:bc:
dd:3c:5d:b6:c6:19:33:07:ed:f0:12:fd:69:76:3f:b5:35:c2:
9d:b7:9b:77:9f:ae:d5:13:35:f0:31:81:99:82:6e:ed:3b:14:
17:e1:83:0f:01:53:f7:ad:bc:7d:61:65:ee:eb:1a:07:ff:46:
25:40:d7:b4:c3:68:f3:38:f9:c2:ec:7a:d5:d2:bf:84:f3:6d:
e6:6f:a1:06:1a:64:76:53:71:7c:d5:17:3d:3c:ce:a8:fb:05:
8a:17:7e:82:2d:78:63:06:ff:21:91:90:82:b3:dc:ea:fd:ac:
55:0a:17:e3:d7:9a:36:cc:18:72:e8:01:4b:59:6d:f5:cf:e7:
9e:12:2d:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4wP1ypY6tPSubUA/bmy1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYjEyY2U2YTkxMDMwZTI3ZDVhYmFkMTQ2ZGYyN2JjMjg4
MDY1MmIwHhcNMjYwNDE3MTAwMTAyWhcNMjYwNDE4MTAwMTAyWjAzMTEwLwYDVQQD
Eyg2YTI0YTA5ZjRhZDQ4ODQxMTUwYTEzM2FjZmUwODMxMzA4MjE2OGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9R4DFG2pB3QrsYhhT5VyUkvnRsqr
2zbCyvw/Xf8KOscVOCyJiry7pdyL4VI+C4hwRHMB8Vy5022FNT996v4HIHboTgfX
O8/BhNjrq1DM+wxVwJD6wS3Gr0CwQFoD6xB4Gb9HH3HLWxier3XxyuTeghGMiQ6j
qmEcrLimXAYHTtKrl5z00MQ33IbPjOW+W20fXSZGNUWB2BacPshKN6qS3iV+jcUN
JjvXV5hfc2fcrPUVGoAHqrWnkXKJaxFRE8qEbCKW4djNl2uBCbKpz1tcnFkcvc/J
jM0tsg1ZPyLUh/069NQc2NYkvXti3PthA2OWfW3+cnM2o2oWoioqsnARRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGokoJ9K1IhBFQoTOs/ggxMIIWjMMB8GA1UdIwQY
MBaAFL6xLOapEDDifVq60UbfJ7wogGUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMt
YTdhZGU0MzRkNDUxLzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMtYTdhZGU0MzRkNDUx
LzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQWKxqWk
bufmZedQ5eiXkt7rFoMZvfQQUSVVxJAF4WhNJPkuNTu+lMLNsXhEc18dutuuStcv
PqD8DvsKb0XVfQvCyKdm0rzp9WuafFlJdrNOvZacTUu9qjBQm5o9Zcs4GUyXXkgF
lG9ms5Y42koZCbpt4MshYhnqu2qWomC83TxdtsYZMwft8BL9aXY/tTXCnbebd5+u
1RM18DGBmYJu7TsUF+GDDwFT9628fWFl7usaB/9GJUDXtMNo8zj5wux61dK/hPNt
5m+hBhpkdlNxfNUXPTzOqPsFihd+gi14Ywb/IZGQgrPc6v2sVQoX49eaNswYcugB
S1lt9c/nnhItdA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:44:10 2026 by rpki-client