Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File: VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier: Z1WteCD/6qlj2NqeGOiKl9e/ToOOykHcAasMIEwlDj4=
Subject key identifier: A1:7E:0D:61:90:B7:28:F8:68:56:AF:22:24:CB:C4:FE:72:9B:EB:36
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 019DA30A12D2FB7A290B516F526ADD5DB0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number: 0AE2
Signing time: Sun 19 Apr 2026 00:00:39 +0000
Manifest this update: Sun 19 Apr 2026 00:00:39 +0000
Manifest next update: Mon 20 Apr 2026 00:00:39 +0000
Files and hashes: 1: 44eS9htfDegZUnC2w7wAUmZuaWA.roa (hash: 6w+zcuKEWJgbCaB6Bdw72Y4/uXhHkVUunNc7dMXW0G0=)
2: 60wJ4Ifb12thZkTYydBMGCHyhjU.roa (hash: loGVk4GY7PqMyMndtxYwq4ib8ZW1ZuV/iu1LnLyoy/k=)
3: BP73BKF5mJwPLLJxOSLVxLOWrtk.roa (hash: Ld3t48e3ZQBGQXb3cT/E5oe6b14FRU/wgq1qRxepE/s=)
4: HMrWWr_GpU-7TilUWTszNhM4XF4.roa (hash: ZxbJ+8rmhmPIZSt+dx++l6IVbkPcuwgYpg8+JSAPwH4=)
5: KjnHPRF-cTfafr7GSVcAiCyWeb0.roa (hash: 3qGWJTyestuh3mdWTHBj0z2W00hoEy0Lbm5OnbjIxk0=)
6: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: WhquJHWpR5MhzAuH8oTlwIQjg7AcjHKLccvSnoJHZPg=)
7: iCDpMweR3UnjQ3t5pDnJ4r1H_Z8.roa (hash: p7eqJ/28CY3BrDo7BINDBAyzyYyfthKUBP0i3u+PKTY=)
8: zSQVk9Uctt-RfcBSveyCr38CFfA.roa (hash: tRgRAlHE1zW+KtCt3216eqpIBlefLEs1R+bVPcz6sq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:12:d2:fb:7a:29:0b:51:6f:52:6a:dd:5d:b0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Apr 19 00:00:39 2026 GMT
Not After : Apr 20 00:00:39 2026 GMT
Subject: CN=a17e0d6190b728f86856af2224cbc4fe729beb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:bd:92:11:09:a5:dc:69:b1:8f:c6:1a:f9:
0e:46:8d:1b:c0:7c:fd:ff:41:b3:e7:c4:c4:67:88:
7d:d1:53:0b:83:96:4b:37:c5:e0:1c:10:f2:92:81:
8b:b5:48:12:02:00:d7:67:15:3f:c5:0f:da:9a:65:
48:0e:e0:06:3f:1a:6f:10:54:8a:85:44:92:5b:df:
aa:32:ee:fc:e3:1b:9e:bc:ba:0e:09:b2:2d:27:57:
96:dd:c4:07:d1:70:c5:ec:79:40:f9:ce:b1:41:e8:
a9:87:a2:32:06:67:11:2d:65:b6:cc:68:17:6c:9c:
d1:3d:0b:6c:37:81:77:4b:c4:7c:fb:3e:df:e1:bf:
b1:13:be:b9:2b:ea:60:14:4d:35:97:d3:e6:9c:a2:
08:20:1c:09:28:c3:49:ad:ae:73:c1:11:eb:53:2d:
5e:fa:16:7d:78:9f:9e:d3:25:22:32:5c:91:7c:1e:
a5:cb:d7:9f:9e:d6:47:e1:92:1d:04:6b:6c:76:a8:
e5:f7:42:d0:3d:85:b1:81:e8:58:92:a4:0f:2f:22:
44:ae:1a:97:6c:23:b2:1c:73:37:4a:cc:bf:2b:3e:
90:96:7c:38:54:e2:8f:b7:26:77:02:5b:29:48:5e:
5f:c4:4a:54:8c:39:87:aa:8b:bc:71:71:c6:78:bf:
a4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7E:0D:61:90:B7:28:F8:68:56:AF:22:24:CB:C4:FE:72:9B:EB:36
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7c:1e:f6:ca:4e:fd:fc:7a:47:56:67:08:1e:f6:cd:0a:99:
58:62:c7:ce:3e:e3:b3:96:e9:77:b2:7d:13:58:5e:16:04:6e:
29:a9:98:08:8b:d9:4f:fe:6a:db:97:21:5b:b8:55:ea:d5:22:
7c:65:9f:2a:bb:2c:87:0e:16:41:71:e3:43:26:b4:d5:6f:bc:
f4:da:a2:9c:ad:8c:61:80:78:87:b6:9e:ad:92:c2:4c:bf:15:
19:87:22:0e:1f:19:67:30:4b:b7:01:ce:54:b4:d6:a5:41:ee:
5e:e8:05:9e:06:e2:fb:37:a9:31:8d:6b:aa:3d:d5:75:ae:ee:
68:de:19:73:09:43:34:de:3c:07:e6:55:23:b8:60:87:fa:9c:
e6:79:b3:3c:12:c8:df:e2:72:e9:16:4e:d4:d3:36:b8:75:70:
d8:68:0d:ab:15:f7:ae:e4:99:67:79:5f:99:f7:c0:ad:4e:f6:
96:1f:96:61:2b:17:eb:c2:7e:9f:34:16:43:ab:7b:f1:61:eb:
ef:3d:60:a0:b1:96:6d:fc:0b:98:07:61:bb:11:3e:50:71:4a:
ac:62:b6:cf:b3:6a:1f:66:6f:90:0e:0d:ec:04:c3:ca:e7:65:
50:24:67:12:55:3f:b7:82:25:40:80:d7:8b:5e:a8:1c:96:64:
b2:60:2b:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jChLS+3opC1FvUmrdXbDgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2M1YzM0YTYyZmZiZWQ4ZmMwZjBlYzAxYjQyYzBjNTBl
ZTdlZjcwHhcNMjYwNDE5MDAwMDM5WhcNMjYwNDIwMDAwMDM5WjAzMTEwLwYDVQQD
EyhhMTdlMGQ2MTkwYjcyOGY4Njg1NmFmMjIyNGNiYzRmZTcyOWJlYjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomO9khEJpdxpsY/GGvkORo0bwHz9
/0Gz58TEZ4h90VMLg5ZLN8XgHBDykoGLtUgSAgDXZxU/xQ/ammVIDuAGPxpvEFSK
hUSSW9+qMu784xuevLoOCbItJ1eW3cQH0XDF7HlA+c6xQeiph6IyBmcRLWW2zGgX
bJzRPQtsN4F3S8R8+z7f4b+xE765K+pgFE01l9PmnKIIIBwJKMNJra5zwRHrUy1e
+hZ9eJ+e0yUiMlyRfB6ly9efntZH4ZIdBGtsdqjl90LQPYWxgehYkqQPLyJErhqX
bCOyHHM3Ssy/Kz6Qlnw4VOKPtyZ3AlspSF5fxEpUjDmHqou8cXHGeL+kyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKF+DWGQtyj4aFavIiTLxP5ym+s2MB8GA1UdIwQY
MBaAFFQ8XDSmL/vtj8Dw7AG0LAxQ7n73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYt
ZjRmMWY5M2UwNDY3LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYtZjRmMWY5M2UwNDY3
LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnwe9spO
/fx6R1ZnCB72zQqZWGLHzj7js5bpd7J9E1heFgRuKamYCIvZT/5q25chW7hV6tUi
fGWfKrsshw4WQXHjQya01W+89NqinK2MYYB4h7aerZLCTL8VGYciDh8ZZzBLtwHO
VLTWpUHuXugFngbi+zepMY1rqj3Vda7uaN4ZcwlDNN48B+ZVI7hgh/qc5nmzPBLI
3+Jy6RZO1NM2uHVw2GgNqxX3ruSZZ3lfmffArU72lh+WYSsX68J+nzQWQ6t78WHr
7z1goLGWbfwLmAdhuxE+UHFKrGK2z7NqH2ZvkA4N7ATDyudlUCRnElU/t4IlQIDX
i16oHJZksmAriA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:23:33 2026 by rpki-client