Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
File: vWGQNE2etusMy5SON6oKqr4vLpA.mft (raw, json)
Hash identifier: F6eH6EONffgmvywWJNx0PEIMTM6KVcvfGaUxDOh8WOU=
Subject key identifier: CE:F6:90:74:12:77:68:35:EA:03:49:25:60:41:64:B5:FF:5F:56:13
Authority key identifier: BD:61:90:34:4D:9E:B6:EB:0C:CB:94:8E:37:AA:0A:AA:BE:2F:2E:90
Certificate issuer: /CN=bd6190344d9eb6eb0ccb948e37aa0aaabe2f2e90
Certificate serial: 019D9D3F8A31310FB014B2C1DDACE43FA187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWGQNE2etusMy5SON6oKqr4vLpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
Manifest number: E3
Signing time: Fri 17 Apr 2026 21:01:20 +0000
Manifest this update: Fri 17 Apr 2026 21:01:20 +0000
Manifest next update: Sat 18 Apr 2026 21:01:20 +0000
Files and hashes: 1: jtZWo2_OJ4vZNZgWUmJ6XplYoBw.asa (hash: 4Rm+AgcIx2QNLzodYb14yKwLv1JgZDJIFSxZdtp7HDw=)
2: vWGQNE2etusMy5SON6oKqr4vLpA.crl (hash: QhWibnv7XOvnu9ZvaImelyCPWMN3orrHZCQHQZ3hbJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWGQNE2etusMy5SON6oKqr4vLpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:8a:31:31:0f:b0:14:b2:c1:dd:ac:e4:3f:a1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6190344d9eb6eb0ccb948e37aa0aaabe2f2e90
Validity
Not Before: Apr 17 21:01:20 2026 GMT
Not After : Apr 18 21:01:20 2026 GMT
Subject: CN=cef6907412776835ea034925604164b5ff5f5613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:da:57:3a:a1:0d:d7:cd:11:d5:3f:4c:31:
5f:49:3c:8c:5a:7d:4f:ef:f2:6c:ad:03:53:1f:95:
1b:40:ac:35:e2:0f:5e:31:c7:d8:94:a7:0e:97:85:
41:49:b9:f8:60:3e:0b:75:be:36:98:2e:40:8e:0f:
04:69:77:ea:6e:f4:a5:f4:55:96:9e:d7:04:84:bd:
94:85:c3:20:b2:86:9d:60:40:44:99:d7:6b:41:18:
8e:fe:6f:a0:cd:fd:4c:84:2a:ae:05:dd:81:3e:98:
8e:75:3c:82:7c:11:a1:40:8b:1d:5d:82:36:43:9f:
5b:45:d6:57:e3:a8:45:71:b0:6f:08:77:41:4e:21:
9b:98:06:4b:26:93:83:88:56:e9:88:32:82:a6:26:
f5:3e:c0:fe:94:be:c7:01:28:6d:2e:a8:22:c2:7b:
85:1b:4c:64:cf:09:ca:dd:89:66:19:74:d0:e9:ca:
22:04:d5:1f:1a:78:4b:34:5c:64:e6:25:40:65:f8:
e0:bb:a8:13:36:cc:14:c9:54:46:05:96:88:85:6d:
38:9b:87:e9:28:b8:64:dd:52:cc:da:04:05:2a:61:
cf:df:46:55:35:f5:5e:28:18:cb:14:03:9f:33:d0:
7b:11:2e:db:d7:5d:b4:87:d4:5c:19:3d:d0:3d:53:
e3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F6:90:74:12:77:68:35:EA:03:49:25:60:41:64:B5:FF:5F:56:13
X509v3 Authority Key Identifier:
keyid:BD:61:90:34:4D:9E:B6:EB:0C:CB:94:8E:37:AA:0A:AA:BE:2F:2E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWGQNE2etusMy5SON6oKqr4vLpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0f:51:61:ba:8a:17:2d:e7:52:c0:a8:a7:a6:b2:9b:83:e3:
a2:76:43:e8:90:b5:12:bc:2e:94:77:0b:30:48:aa:f5:81:6c:
bb:9d:b3:f7:a3:d8:dd:15:bc:89:72:e2:b6:1c:24:35:98:89:
b5:64:b6:11:07:b3:4f:55:87:b8:b4:93:f1:11:a2:4d:2a:c4:
06:19:90:0f:21:cb:dd:99:3b:24:3a:ee:a9:03:97:0b:01:d0:
83:e2:43:bf:5b:b6:95:a6:a1:20:27:54:6c:4d:71:67:52:16:
c2:6c:3f:43:ef:09:47:31:c8:ce:76:f6:0a:fd:6d:91:28:12:
c0:0a:ad:86:fc:da:df:c9:49:7d:ac:59:8c:05:5e:b4:55:56:
b3:37:fe:f2:34:83:f4:79:b1:f6:e2:a1:a5:14:18:de:d7:43:
2c:20:1d:ee:1c:15:b8:18:54:7d:cb:bf:b6:a2:61:88:08:a5:
3e:63:2d:a5:9c:88:f4:85:42:2e:3c:f0:32:27:4d:5b:10:92:
f2:bb:6a:d9:24:e4:36:ce:cf:82:e3:f3:b2:d6:a8:fb:26:42:
6d:cf:69:0c:a5:2f:bb:0d:44:21:85:0b:8b:b1:f4:b5:f0:d4:
b5:be:7c:1c:ab:7c:e5:24:bf:9c:43:7e:f3:47:1b:47:e2:33:
be:64:ce:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dP4oxMQ+wFLLB3azkP6GHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjE5MDM0NGQ5ZWI2ZWIwY2NiOTQ4ZTM3YWEwYWFhYmUy
ZjJlOTAwHhcNMjYwNDE3MjEwMTIwWhcNMjYwNDE4MjEwMTIwWjAzMTEwLwYDVQQD
EyhjZWY2OTA3NDEyNzc2ODM1ZWEwMzQ5MjU2MDQxNjRiNWZmNWY1NjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0zaVzqhDdfNEdU/TDFfSTyMWn1P
7/JsrQNTH5UbQKw14g9eMcfYlKcOl4VBSbn4YD4Ldb42mC5Ajg8EaXfqbvSl9FWW
ntcEhL2UhcMgsoadYEBEmddrQRiO/m+gzf1MhCquBd2BPpiOdTyCfBGhQIsdXYI2
Q59bRdZX46hFcbBvCHdBTiGbmAZLJpODiFbpiDKCpib1PsD+lL7HAShtLqgiwnuF
G0xkzwnK3YlmGXTQ6coiBNUfGnhLNFxk5iVAZfjgu6gTNswUyVRGBZaIhW04m4fp
KLhk3VLM2gQFKmHP30ZVNfVeKBjLFAOfM9B7ES7b1120h9RcGT3QPVPjqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM72kHQSd2g16gNJJWBBZLX/X1YTMB8GA1UdIwQY
MBaAFL1hkDRNnrbrDMuUjjeqCqq+Ly6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldHUU5FMmV0dXNNeTVTT042b0txcjR2THBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lMzhmYzUtMTNhOS00OTA2LWI1NWUt
Nzk0NTNhZGZmMWJkLzEvdldHUU5FMmV0dXNNeTVTT042b0txcjR2THBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lMzhmYzUtMTNhOS00OTA2LWI1NWUtNzk0NTNhZGZmMWJk
LzEvdldHUU5FMmV0dXNNeTVTT042b0txcjR2THBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQ9RYbqK
Fy3nUsCop6aym4PjonZD6JC1ErwulHcLMEiq9YFsu52z96PY3RW8iXLithwkNZiJ
tWS2EQezT1WHuLST8RGiTSrEBhmQDyHL3Zk7JDruqQOXCwHQg+JDv1u2laahICdU
bE1xZ1IWwmw/Q+8JRzHIznb2Cv1tkSgSwAqthvza38lJfaxZjAVetFVWszf+8jSD
9Hmx9uKhpRQY3tdDLCAd7hwVuBhUfcu/tqJhiAilPmMtpZyI9IVCLjzwMidNWxCS
8rtq2STkNs7PguPzstao+yZCbc9pDKUvuw1EIYULi7H0tfDUtb58HKt85SS/nEN+
80cbR+IzvmTO3g==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:01:57 2026 by rpki-client