
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
File: VNb_E0vWVvDOFNQQsCvsVR62miw.mft (raw, json)
Hash identifier: LAd4kSTLYevaeXM1eBq5G3jUPE7zNg7B64GflIWCmNg=
Subject key identifier: 2A:F6:8E:41:59:BF:F8:8F:B2:21:BF:64:5A:59:47:BE:BC:25:38:22
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial: 019D996255641A3DBDBF667619207B41AB96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
Manifest number: 14F0
Signing time: Fri 17 Apr 2026 03:00:51 +0000
Manifest this update: Fri 17 Apr 2026 03:00:51 +0000
Manifest next update: Sat 18 Apr 2026 03:00:51 +0000
Files and hashes: 1: 9W5GOtFDpWBFLP39aI9-GYTv67w.roa (hash: Ly+0aJYut/pTQfmmUwMydFSUtJuswgS18u/UPXI+/4A=)
2: VNb_E0vWVvDOFNQQsCvsVR62miw.crl (hash: MnAY6g0YnGwkyV8WwaUJVWO2Ovyf7aYDTMmAOZPjpaI=)
3: vmidCd491rgHxm_kqaantMVtBCY.roa (hash: S7soOr3p/jzFrWPo7JyKIxI7COyYwQ/uXhA0aHPeUi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:55:64:1a:3d:bd:bf:66:76:19:20:7b:41:ab:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Validity
Not Before: Apr 17 03:00:51 2026 GMT
Not After : Apr 18 03:00:51 2026 GMT
Subject: CN=2af68e4159bff88fb221bf645a5947bebc253822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:aa:0a:7a:70:80:96:db:6f:3a:09:41:e9:
bf:2c:f3:20:a9:ae:00:6f:2c:6d:b4:bd:25:f2:28:
26:8d:43:ce:46:77:79:72:1d:45:d5:7b:3b:c1:2a:
54:e3:20:43:bf:ed:bc:38:f0:fc:4a:40:f0:e2:fe:
62:ef:33:9e:a9:ee:79:24:73:05:6c:dc:f4:ff:37:
ef:ff:72:e8:ba:35:b4:d7:c9:70:41:82:07:e8:b2:
66:ff:29:19:ae:ea:c6:79:29:e2:96:f2:48:5d:03:
21:fd:0b:80:3c:90:cc:22:4a:5f:c2:a9:72:10:70:
d4:5e:10:eb:26:c9:e0:02:00:f6:30:2f:f2:7e:1c:
36:86:a2:6f:c3:ae:17:d7:24:42:96:01:f9:93:d6:
78:04:f8:43:aa:7f:10:fc:27:08:79:eb:b5:bb:92:
c4:d8:36:2e:51:69:a4:eb:fc:d3:19:93:54:c9:83:
62:f1:1f:8d:d8:09:11:42:76:45:cd:1e:7d:e3:a2:
4f:7f:80:28:d8:31:bd:82:59:cf:72:79:3b:7b:eb:
5c:a6:72:40:5b:24:df:e7:9f:a6:0e:37:3b:56:13:
0b:18:9c:11:17:fa:dd:71:2e:5e:ae:09:7e:8a:67:
85:2e:c1:60:c9:b3:aa:2d:8e:8f:20:24:28:a9:4d:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F6:8E:41:59:BF:F8:8F:B2:21:BF:64:5A:59:47:BE:BC:25:38:22
X509v3 Authority Key Identifier:
keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:83:71:79:eb:fe:b4:bb:8c:bc:98:89:15:53:77:3d:57:e0:
c5:bc:ff:0b:4d:8d:28:2e:fa:92:86:ce:d0:97:ac:54:65:f7:
59:88:2e:41:58:10:91:fb:80:78:32:35:df:2d:db:b7:10:e4:
65:26:46:1e:3a:e0:e2:0c:e9:e4:c3:db:b5:42:1e:6d:f9:80:
3c:16:66:d2:8c:15:68:63:44:e8:d0:76:df:4f:51:83:25:54:
1e:80:61:14:79:35:59:f2:91:fd:13:e4:46:0e:c8:54:0e:2f:
74:dd:83:53:97:a6:9b:af:6a:85:e6:34:c9:64:b9:d9:df:cc:
a4:81:da:2d:bf:9f:61:e2:78:8a:f1:78:95:3a:89:43:3a:24:
7c:04:a5:9a:ff:0c:85:fe:de:8f:47:b8:c8:fa:bd:da:a1:f2:
59:5c:8e:59:13:5b:fd:02:05:ad:eb:0f:f1:59:35:79:79:a9:
f0:b0:53:6c:7b:2a:e9:f7:fc:28:2d:63:62:76:41:60:e5:74:
fa:bc:7d:c0:a3:38:96:3b:76:df:cd:78:c5:6e:82:d6:8c:e3:
ed:53:de:93:73:d9:9b:48:88:87:b5:46:0d:db:d9:82:2a:65:
f7:ee:ea:66:e5:9e:2b:69:49:31:0d:85:0e:d7:60:92:e8:3f:
cd:e8:34:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYlVkGj29v2Z2GSB7QauWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZDZmZjEzNGJkNjU2ZjBjZTE0ZDQxMGIwMmJlYzU1MWVi
NjlhMmMwHhcNMjYwNDE3MDMwMDUxWhcNMjYwNDE4MDMwMDUxWjAzMTEwLwYDVQQD
EygyYWY2OGU0MTU5YmZmODhmYjIyMWJmNjQ1YTU5NDdiZWJjMjUzODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujKqCnpwgJbbbzoJQem/LPMgqa4A
byxttL0l8igmjUPORnd5ch1F1Xs7wSpU4yBDv+28OPD8SkDw4v5i7zOeqe55JHMF
bNz0/zfv/3LoujW018lwQYIH6LJm/ykZrurGeSnilvJIXQMh/QuAPJDMIkpfwqly
EHDUXhDrJsngAgD2MC/yfhw2hqJvw64X1yRClgH5k9Z4BPhDqn8Q/CcIeeu1u5LE
2DYuUWmk6/zTGZNUyYNi8R+N2AkRQnZFzR5946JPf4Ao2DG9glnPcnk7e+tcpnJA
WyTf55+mDjc7VhMLGJwRF/rdcS5ergl+imeFLsFgybOqLY6PICQoqU2+dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCr2jkFZv/iPsiG/ZFpZR768JTgiMB8GA1UdIwQY
MBaAFFTW/xNL1lbwzhTUELAr7FUetposMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMjFlZTctNDkyNS00ZGQ2LWIyMDIt
NjQyNzhjMGQ4ZWJmLzEvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mMjFlZTctNDkyNS00ZGQ2LWIyMDItNjQyNzhjMGQ4ZWJm
LzEvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoNxeev+
tLuMvJiJFVN3PVfgxbz/C02NKC76kobO0JesVGX3WYguQVgQkfuAeDI13y3btxDk
ZSZGHjrg4gzp5MPbtUIebfmAPBZm0owVaGNE6NB2309RgyVUHoBhFHk1WfKR/RPk
Rg7IVA4vdN2DU5emm69qheY0yWS52d/MpIHaLb+fYeJ4ivF4lTqJQzokfASlmv8M
hf7ej0e4yPq92qHyWVyOWRNb/QIFresP8Vk1eXmp8LBTbHsq6ff8KC1jYnZBYOV0
+rx9wKM4ljt23814xW6C1ozj7VPek3PZm0iIh7VGDdvZgipl9+7qZuWeK2lJMQ2F
Dtdgkug/zeg0Fg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:37 2026 by rpki-client