Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft
File: VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft (raw, json)
Hash identifier: QVxc9pgr/YWmoknrv+NPGuJ2KtGhl44skydfqjg33uE=
Subject key identifier: 01:72:D0:BD:CE:59:45:8D:CB:47:DE:5D:55:A2:21:2D:E0:EA:7B:3F
Authority key identifier: 54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52
Certificate issuer: /CN=544905eaad4cea6c3f2d650c08fae3d445186752
Certificate serial: 019CAAFD8343D76D6D81A3014D5E9CED4533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft
Manifest number: 11D1
Signing time: Sun 01 Mar 2026 20:01:06 +0000
Manifest this update: Sun 01 Mar 2026 20:01:06 +0000
Manifest next update: Mon 02 Mar 2026 20:01:06 +0000
Files and hashes: 1: AlMjmcR8h2duCbNC95EnaGY9_3A.roa (hash: ptbGb9EdDKFPOd43q/T+LHJ7YQ4htAGE8y7UU6PJeXQ=)
2: VEkF6q1M6mw_LWUMCPrj1EUYZ1I.crl (hash: poRe+j1icBmSkpsVlt2UIg61Qu2dZMULn8muVERgBV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:83:43:d7:6d:6d:81:a3:01:4d:5e:9c:ed:45:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544905eaad4cea6c3f2d650c08fae3d445186752
Validity
Not Before: Mar 1 20:01:06 2026 GMT
Not After : Mar 2 20:01:06 2026 GMT
Subject: CN=0172d0bdce59458dcb47de5d55a2212de0ea7b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:aa:46:2b:e4:e6:95:cf:d5:ca:12:c9:94:59:
92:44:e2:63:73:10:e8:43:59:53:8e:9d:98:4b:8f:
88:f9:5b:3a:93:08:63:a9:40:9c:f1:30:ed:f9:04:
94:e8:53:34:55:5b:ee:e0:b0:ee:db:b9:f0:e5:85:
bd:c7:22:38:c1:8e:94:45:ce:bb:07:b6:c1:dd:d7:
18:02:66:2a:4f:ea:7b:fa:9c:0d:d5:12:73:9f:10:
42:4e:0c:43:86:e6:7a:b9:d0:f5:15:17:4c:f3:21:
46:be:ad:7d:10:3b:0d:5f:a9:39:02:39:46:91:b1:
9a:55:20:15:24:08:27:48:9b:c9:42:b9:c7:87:52:
0c:51:88:35:fc:83:8e:d7:f3:d8:32:9c:b7:4b:ba:
ee:1e:e8:96:17:6b:8d:92:94:5f:b5:f1:ad:80:7d:
94:62:d3:09:0b:44:39:16:18:d4:eb:8a:e7:b9:1c:
a5:e4:e4:ed:65:ac:62:67:ea:5b:c6:8e:7f:28:2d:
34:f1:d1:9d:d5:4e:e9:7e:49:2e:85:c7:d2:0f:6e:
e1:30:35:37:91:27:f2:ea:5c:62:50:5a:f2:0e:c2:
ba:24:14:be:9e:f4:c1:64:8c:9c:71:1f:9e:af:23:
20:91:85:cb:f4:6f:70:95:7a:ac:30:e5:f7:ec:bd:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:72:D0:BD:CE:59:45:8D:CB:47:DE:5D:55:A2:21:2D:E0:EA:7B:3F
X509v3 Authority Key Identifier:
keyid:54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fe:94:68:c2:52:dc:d0:dd:46:b2:4d:f1:08:63:8d:0d:e6:
bc:74:74:14:a2:6c:25:c3:82:4f:63:37:e5:8c:53:20:d9:d1:
35:61:b1:64:14:e1:4d:b3:41:69:ca:bb:29:76:5e:8a:75:a6:
81:da:31:60:bc:50:99:0d:b0:70:6f:58:bc:c7:41:19:dc:26:
d7:3e:1a:eb:78:6f:4c:f1:a2:43:92:29:37:6e:51:45:32:3e:
87:3a:5a:43:b2:b4:39:71:56:19:f1:bb:f6:fa:d3:e0:d9:d5:
25:5e:09:79:fd:f9:09:6b:20:65:57:80:47:94:c4:a0:54:db:
e5:e5:1a:1d:00:b7:ae:02:63:bb:41:b6:74:80:c5:ed:09:c0:
c9:e5:7f:39:db:dc:13:45:dc:e4:67:96:b2:db:e9:80:76:41:
10:dc:bb:e8:48:25:06:a6:ef:72:7c:50:d8:bb:bf:34:9c:1a:
8c:6b:3e:aa:bd:7e:05:53:42:bd:eb:fc:e0:14:7e:b8:c7:83:
49:5a:79:6e:1d:30:d7:03:7b:84:ad:d3:12:02:a0:56:ef:d1:
10:54:9d:d1:b2:01:9d:1b:c1:b5:e5:75:36:19:2b:63:09:53:
55:f2:0a:9c:85:5b:01:24:2d:ab:ed:d2:9b:53:54:ec:f2:d8:
9c:f1:ab:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/YND121tgaMBTV6c7UUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NDkwNWVhYWQ0Y2VhNmMzZjJkNjUwYzA4ZmFlM2Q0NDUx
ODY3NTIwHhcNMjYwMzAxMjAwMTA2WhcNMjYwMzAyMjAwMTA2WjAzMTEwLwYDVQQD
EygwMTcyZDBiZGNlNTk0NThkY2I0N2RlNWQ1NWEyMjEyZGUwZWE3YjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhapGK+Tmlc/VyhLJlFmSROJjcxDo
Q1lTjp2YS4+I+Vs6kwhjqUCc8TDt+QSU6FM0VVvu4LDu27nw5YW9xyI4wY6URc67
B7bB3dcYAmYqT+p7+pwN1RJznxBCTgxDhuZ6udD1FRdM8yFGvq19EDsNX6k5AjlG
kbGaVSAVJAgnSJvJQrnHh1IMUYg1/IOO1/PYMpy3S7ruHuiWF2uNkpRftfGtgH2U
YtMJC0Q5FhjU64rnuRyl5OTtZaxiZ+pbxo5/KC008dGd1U7pfkkuhcfSD27hMDU3
kSfy6lxiUFryDsK6JBS+nvTBZIyccR+eryMgkYXL9G9wlXqsMOX37L3G2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFy0L3OWUWNy0feXVWiIS3g6ns/MB8GA1UdIwQY
MBaAFFRJBeqtTOpsPy1lDAj649RFGGdSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVrRjZxMU02bXdfTFdVTUNQcmoxRVVZWjFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85OWNjZmEtYzk2Zi00ZDEyLWIxOGYt
NWIzYTQxMTI1YmVhLzEvVkVrRjZxMU02bXdfTFdVTUNQcmoxRVVZWjFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85OWNjZmEtYzk2Zi00ZDEyLWIxOGYtNWIzYTQxMTI1YmVh
LzEvVkVrRjZxMU02bXdfTFdVTUNQcmoxRVVZWjFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/6UaMJS
3NDdRrJN8QhjjQ3mvHR0FKJsJcOCT2M35YxTINnRNWGxZBThTbNBacq7KXZeinWm
gdoxYLxQmQ2wcG9YvMdBGdwm1z4a63hvTPGiQ5IpN25RRTI+hzpaQ7K0OXFWGfG7
9vrT4NnVJV4Jef35CWsgZVeAR5TEoFTb5eUaHQC3rgJju0G2dIDF7QnAyeV/Odvc
E0Xc5GeWstvpgHZBENy76EglBqbvcnxQ2Lu/NJwajGs+qr1+BVNCvev84BR+uMeD
SVp5bh0w1wN7hK3TEgKgVu/REFSd0bIBnRvBteV1NhkrYwlTVfIKnIVbASQtq+3S
m1NU7PLYnPGrlg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:54 2026 by rpki-client