Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: epdDPMEHOhiK8PIhlewhFoIR4id0l9DCqNSuOFtzm4M=
Subject key identifier: 54:8F:B2:8A:B7:66:26:E6:47:F2:57:CB:C1:EE:BF:C5:65:CD:D5:33
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 019D99622C020E015C284D0982FC328788E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0D4E
Signing time: Fri 17 Apr 2026 03:00:40 +0000
Manifest this update: Fri 17 Apr 2026 03:00:40 +0000
Manifest next update: Sat 18 Apr 2026 03:00:40 +0000
Files and hashes: 1: OmdvYxmrLn_L3wu-tKKe3CfgvKI.roa (hash: yDMfNBV69imWC+j1AfIyiotbGJSK6kkJjaiL93WMyvg=)
2: aCZ93vgD_JrnhMVE8ag6EFucpkg.roa (hash: YM2YwZolqo4cY7IySdgCVqucXddKsJE5ZWSJH8u/1Ww=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: G2PpwFBnBM6c+eaq0E78MxKzftb7sFth/0cNzjSSCxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:2c:02:0e:01:5c:28:4d:09:82:fc:32:87:88:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Apr 17 03:00:40 2026 GMT
Not After : Apr 18 03:00:40 2026 GMT
Subject: CN=548fb28ab76626e647f257cbc1eebfc565cdd533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:57:5a:ff:bc:cc:36:d6:bc:50:df:2b:72:
cb:8a:e7:b3:26:e5:df:0b:1e:1b:92:08:82:f4:78:
e7:7f:8a:80:40:a1:ab:7e:98:fe:d0:09:ce:7a:13:
1d:1e:31:42:40:e0:4a:61:f9:c7:70:a2:47:9f:9c:
ec:c2:fb:27:c7:05:b2:6b:0f:3a:f8:cf:c2:93:f3:
51:7f:a0:5a:e2:18:93:6f:e5:f2:84:3c:3e:be:05:
27:c1:86:0f:0d:95:c7:30:1d:43:da:0a:85:b9:c6:
17:8f:66:25:e3:b8:dd:97:d9:da:23:98:54:3b:06:
73:cb:c5:07:61:42:1c:d2:cd:57:40:6b:b0:68:9a:
de:2c:6b:de:9f:bc:72:a3:aa:f7:22:cf:f7:41:26:
07:cc:3f:c8:49:e2:7a:bb:11:86:d9:69:1e:1a:3c:
f4:4d:3c:cc:e2:15:4d:4e:1b:ac:cc:df:2f:4f:0a:
db:4a:00:d9:ff:1d:2b:26:81:8b:bd:b3:e6:e2:99:
14:18:df:5b:47:70:b8:8f:e3:6e:ad:86:e3:21:32:
99:cf:f6:35:06:64:85:b5:41:c0:78:49:f1:b0:5b:
71:98:78:4e:ec:3c:6b:8b:b5:f8:cb:f1:ad:f6:f6:
82:a7:53:ec:63:e1:ce:d4:4e:fc:91:68:6e:73:2e:
83:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8F:B2:8A:B7:66:26:E6:47:F2:57:CB:C1:EE:BF:C5:65:CD:D5:33
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ac:9d:a7:ca:f3:5d:34:04:92:6d:59:37:5d:7e:cd:00:30:
f1:0a:10:7e:0a:1e:68:74:6c:df:79:e2:79:bc:57:12:b7:b9:
20:f9:67:75:11:5c:f2:e2:80:24:7e:1a:ed:b4:bc:41:8b:66:
82:bf:99:37:26:8e:e5:eb:15:1a:49:db:43:41:ec:f7:9a:c4:
4f:e2:3f:89:02:5a:25:a4:94:66:1e:cb:ab:e2:40:e4:6f:8c:
ac:fb:5f:17:8b:7d:f4:f0:b1:ad:08:27:89:99:01:67:5e:09:
33:ae:55:aa:0a:be:11:99:f4:4b:29:a2:83:45:4d:f5:9c:8d:
06:9f:b6:08:5c:89:01:41:0d:0a:5e:63:c8:11:55:fe:23:42:
9f:48:10:10:49:f8:8f:7c:35:0e:5e:a6:e0:a5:72:95:c7:6e:
89:4f:89:79:1d:a2:03:b7:62:1e:f1:c4:1a:68:99:69:2f:9b:
79:b2:bf:07:4e:f9:3b:a4:16:2c:08:99:b9:53:50:b7:5a:95:
9a:0f:0d:0e:98:61:a1:26:81:67:1f:e2:14:7f:30:f6:d0:1e:
45:75:55:f3:37:f1:75:12:35:79:97:37:cf:a6:b2:1d:88:ac:
44:d7:ce:d4:57:6c:97:22:17:dc:02:f2:1a:71:8a:53:d1:1f:
7f:5a:a1:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYiwCDgFcKE0Jgvwyh4jiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNjE0NGI0NTliY2UxMzlmMjczNGE0NGZiZGI0NmM5ODEz
MjliMmIwHhcNMjYwNDE3MDMwMDQwWhcNMjYwNDE4MDMwMDQwWjAzMTEwLwYDVQQD
Eyg1NDhmYjI4YWI3NjYyNmU2NDdmMjU3Y2JjMWVlYmZjNTY1Y2RkNTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/tXWv+8zDbWvFDfK3LLiuezJuXf
Cx4bkgiC9Hjnf4qAQKGrfpj+0AnOehMdHjFCQOBKYfnHcKJHn5zswvsnxwWyaw86
+M/Ck/NRf6Ba4hiTb+XyhDw+vgUnwYYPDZXHMB1D2gqFucYXj2Yl47jdl9naI5hU
OwZzy8UHYUIc0s1XQGuwaJreLGven7xyo6r3Is/3QSYHzD/ISeJ6uxGG2WkeGjz0
TTzM4hVNThuszN8vTwrbSgDZ/x0rJoGLvbPm4pkUGN9bR3C4j+NurYbjITKZz/Y1
BmSFtUHAeEnxsFtxmHhO7Dxri7X4y/Gt9vaCp1PsY+HO1E78kWhucy6DpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSPsoq3ZibmR/JXy8Huv8VlzdUzMB8GA1UdIwQY
MBaAFL5hRLRZvOE58nNKRPvbRsmBMpsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2Yt
MTdlZmE1N2IzOWQ3LzEvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2YtMTdlZmE1N2IzOWQ3
LzEvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6ydp8rz
XTQEkm1ZN11+zQAw8QoQfgoeaHRs33niebxXEre5IPlndRFc8uKAJH4a7bS8QYtm
gr+ZNyaO5esVGknbQ0Hs95rET+I/iQJaJaSUZh7Lq+JA5G+MrPtfF4t99PCxrQgn
iZkBZ14JM65Vqgq+EZn0Symig0VN9ZyNBp+2CFyJAUENCl5jyBFV/iNCn0gQEEn4
j3w1Dl6m4KVylcduiU+JeR2iA7diHvHEGmiZaS+bebK/B075O6QWLAiZuVNQt1qV
mg8NDphhoSaBZx/iFH8w9tAeRXVV8zfxdRI1eZc3z6ayHYisRNfO1FdslyIX3ALy
GnGKU9Eff1qhoQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:28 2026 by rpki-client