Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
File: VayAK4V_5CVyI6jlUIWlCzt3DsY.mft (raw, json)
Hash identifier: 1oF/BQ+Li/vjD9TJ4Gx9x8OdOW1wP8/zHwYmGJZGhAg=
Subject key identifier: FF:35:9B:83:E4:69:43:EF:A9:36:CE:8D:D4:1F:73:AF:9E:17:63:94
Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
Certificate issuer: /CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Certificate serial: 019D99997B2662FB87888E7609F0A7730948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 04:01:05 +0000
Manifest this update: Fri 17 Apr 2026 04:01:05 +0000
Manifest next update: Sat 18 Apr 2026 04:01:05 +0000
Files and hashes: 1: KT7j6_HQv5rlMFhwBY1TdhgJ4Rc.roa (hash: CMCFJ522ifdqt0xcDWNSZop/WrNivf5oelP7FfWl5vI=)
2: VayAK4V_5CVyI6jlUIWlCzt3DsY.crl (hash: MTazJb3D+MYz+rJhsL1ZM7Do11vFtzZsONcmkeXm+A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:7b:26:62:fb:87:88:8e:76:09:f0:a7:73:09:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Validity
Not Before: Apr 17 04:01:05 2026 GMT
Not After : Apr 18 04:01:05 2026 GMT
Subject: CN=ff359b83e46943efa936ce8dd41f73af9e176394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8e:0b:cf:49:1f:d6:05:fb:3b:fc:d2:3e:c7:
ef:b1:cf:5c:27:87:dd:ef:de:9a:a9:65:45:50:44:
c3:7c:85:4b:fc:d2:d9:fa:d4:59:5d:0e:cb:be:53:
4f:6f:2b:f7:0d:f8:0b:97:4b:77:38:0e:0a:53:7f:
e8:7f:3f:37:28:43:32:8b:70:97:85:56:5a:b0:41:
3d:39:6f:5e:8a:38:fe:fe:92:4f:dd:6a:95:10:82:
4f:9d:97:fb:d5:eb:68:52:2c:f1:1a:fd:ab:5d:79:
5c:94:a3:44:a3:37:c1:94:3d:b4:b5:19:e8:df:ec:
47:6e:28:45:44:ea:65:8a:a5:c4:b5:40:20:11:4c:
68:00:4e:74:f0:8b:1d:29:bd:a5:98:81:95:31:a2:
cf:4f:5a:26:9a:40:67:79:57:28:82:7b:bf:a7:21:
5c:e1:84:f9:5b:67:56:02:75:83:6e:38:1e:d1:b8:
93:3d:b0:00:28:5a:d2:03:e4:f4:e3:d0:91:50:48:
95:ac:f9:cc:e2:e1:0b:e0:78:15:13:c3:1b:c5:6e:
95:77:7e:60:bc:55:71:d2:62:43:fb:80:60:ae:53:
2d:0e:9e:fb:67:47:b8:a1:ae:aa:15:a0:da:07:ca:
29:1c:10:9d:f7:01:cc:8d:0c:2c:27:7c:a0:c4:c4:
67:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:35:9B:83:E4:69:43:EF:A9:36:CE:8D:D4:1F:73:AF:9E:17:63:94
X509v3 Authority Key Identifier:
keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:84:cc:d2:f0:90:23:cb:23:1d:89:7d:dc:6c:61:1d:a6:17:
3e:03:b8:99:3a:49:77:3c:3f:32:8f:75:f5:a7:eb:9c:45:cf:
ef:24:ae:94:b2:fe:ac:43:db:11:7a:b9:bc:65:38:1c:a3:7e:
f1:e6:36:51:66:7d:aa:fa:a0:00:46:39:72:f3:a2:07:27:40:
0e:f6:d0:af:d6:46:1f:33:45:44:66:2a:47:f2:22:33:28:d6:
eb:ed:a0:9f:3a:af:6d:70:bb:90:e0:f7:56:ef:06:a8:14:cb:
34:57:47:47:b3:61:ba:f7:b3:8c:0d:89:fd:a6:86:2b:16:fd:
a8:c9:f2:dd:d5:20:37:a8:54:61:24:8f:b9:e8:a9:da:82:38:
4d:6c:8b:1b:91:ca:cb:20:6b:84:44:2a:3f:d4:c2:97:13:de:
2a:7e:41:1e:9c:88:e0:90:19:9d:07:55:50:7c:3f:df:45:91:
56:e4:dc:51:b0:20:10:85:72:62:54:cd:ce:54:92:e4:ab:0a:
a5:86:18:bf:c2:35:0d:0d:17:6e:bb:9c:8f:4b:f0:b7:ba:ce:
83:a8:09:78:77:b1:1b:fd:be:19:34:44:f1:20:36:b7:6b:26:
3e:3c:91:2a:9c:c2:a9:65:d3:e8:b9:1a:ce:ba:b0:eb:be:09:
55:5c:e1:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmXsmYvuHiI52CfCncwlIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YWM4MDJiODU3ZmU0MjU3MjIzYThlNTUwODVhNTBiM2I3
NzBlYzYwHhcNMjYwNDE3MDQwMTA1WhcNMjYwNDE4MDQwMTA1WjAzMTEwLwYDVQQD
EyhmZjM1OWI4M2U0Njk0M2VmYTkzNmNlOGRkNDFmNzNhZjllMTc2Mzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA344Lz0kf1gX7O/zSPsfvsc9cJ4fd
796aqWVFUETDfIVL/NLZ+tRZXQ7LvlNPbyv3DfgLl0t3OA4KU3/ofz83KEMyi3CX
hVZasEE9OW9eijj+/pJP3WqVEIJPnZf71etoUizxGv2rXXlclKNEozfBlD20tRno
3+xHbihFROpliqXEtUAgEUxoAE508IsdKb2lmIGVMaLPT1ommkBneVcognu/pyFc
4YT5W2dWAnWDbjge0biTPbAAKFrSA+T049CRUEiVrPnM4uEL4HgVE8MbxW6Vd35g
vFVx0mJD+4BgrlMtDp77Z0e4oa6qFaDaB8opHBCd9wHMjQwsJ3ygxMRniQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP81m4PkaUPvqTbOjdQfc6+eF2OUMB8GA1UdIwQY
MBaAFFWsgCuFf+QlciOo5VCFpQs7dw7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80OTBmM2MtNmY3Yy00NTY0LTljNmIt
NjY5NzlhMDQ4MGIwLzEvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80OTBmM2MtNmY3Yy00NTY0LTljNmItNjY5NzlhMDQ4MGIw
LzEvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYTM0vCQ
I8sjHYl93GxhHaYXPgO4mTpJdzw/Mo919afrnEXP7ySulLL+rEPbEXq5vGU4HKN+
8eY2UWZ9qvqgAEY5cvOiBydADvbQr9ZGHzNFRGYqR/IiMyjW6+2gnzqvbXC7kOD3
Vu8GqBTLNFdHR7NhuvezjA2J/aaGKxb9qMny3dUgN6hUYSSPueip2oI4TWyLG5HK
yyBrhEQqP9TClxPeKn5BHpyI4JAZnQdVUHw/30WRVuTcUbAgEIVyYlTNzlSS5KsK
pYYYv8I1DQ0Xbrucj0vwt7rOg6gJeHexG/2+GTRE8SA2t2smPjyRKpzCqWXT6Lka
zrqw674JVVzh5Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:35 2026 by rpki-client