Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
File: VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft (raw, json)
Hash identifier: x23zdkURRiabPCm9alpb5ps0yFKjcSh1XZjB2UP8xWg=
Subject key identifier: 80:54:21:6A:20:FF:D5:4D:3D:33:54:14:59:F5:08:34:0E:3E:AF:85
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Certificate issuer: /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial: 019D97E22C66C31F8C76C2D163A78C44D795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
Manifest number: 07E3
Signing time: Thu 16 Apr 2026 20:01:15 +0000
Manifest this update: Thu 16 Apr 2026 20:01:15 +0000
Manifest next update: Fri 17 Apr 2026 20:01:15 +0000
Files and hashes: 1: 0mKPMQWV_Qy-vh6NIOs-vGzzkcs.roa (hash: 40hzdqt6UbwBLVWM2lystwa7D/FQ/GMdaZDwu9K4ql4=)
2: BS20TmqftUiHcp-uC9dL2gI-BNc.roa (hash: pr6OCsI1Ad/tkV2rABLwG62aqjOA03sElNbNxIP4zvk=)
3: IHxGZu_O4SFl3mCd8QYX5eqd12E.roa (hash: 1i0b2nBfdKjb8NkkxZHECgejSLN+yW+3HQmhrGhzeOI=)
4: TC-CR-ZUgo3wldIr7f4nCXHpZbc.roa (hash: Tqa6a80CqmnICEwwvMch0Zn79fYz9/pDyy0fkcJDSKo=)
5: UMFicQc5pR1BZjbSliFsmn9hVsQ.roa (hash: J5/XGYpI2q8qdb/0SuhhGpJUPu+HCV/urhJXWQ6uRoM=)
6: VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl (hash: F11eoSl5ofxcv7Amb793OG5EcZNEWfZdUvrvAqIopZQ=)
7: Z111UjLnwgJb3LbHDJ7UAjwqf7M.roa (hash: oAjU5QxrjsRQZUa6m4Qsajh/Teoh609vw8i9IlPtf6I=)
8: zX0vtOpCmeQpkB3rn-rz1jkd-r4.roa (hash: jPj9zmWBHzHIPP8lAD+ZNC+krJqdUU0kA46if5ji8Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:2c:66:c3:1f:8c:76:c2:d1:63:a7:8c:44:d7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Validity
Not Before: Apr 16 20:01:15 2026 GMT
Not After : Apr 17 20:01:15 2026 GMT
Subject: CN=8054216a20ffd54d3d33541459f508340e3eaf85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:12:72:1f:92:7a:6d:7d:94:fa:86:12:54:
7a:ff:2d:78:95:be:e2:b2:17:b6:a8:6b:d3:8b:b6:
91:09:ef:9c:3e:b1:13:9f:eb:5b:28:9f:39:eb:3c:
a9:d8:8f:3d:a2:dd:13:43:fa:b2:43:52:c0:50:63:
72:eb:90:ae:b4:fd:e9:d0:44:44:08:05:dd:5e:60:
b4:91:d4:94:2d:45:19:9c:c8:77:57:05:4a:24:4c:
33:64:a1:86:03:ae:1f:ad:f2:6e:25:f3:91:47:07:
43:cc:11:ca:16:30:33:af:d2:e2:b0:94:cf:da:1f:
03:9f:33:4b:e1:d3:5b:0d:86:6c:46:27:ae:40:3e:
0f:11:5c:52:b5:00:33:a5:d2:a6:ad:3e:2c:c5:29:
95:c2:4c:d5:6a:f3:2d:f7:67:10:3c:1e:c7:76:96:
e8:9b:72:ba:a0:49:e4:07:e0:9b:25:b0:53:29:08:
ef:b9:6f:b5:d2:f9:a8:9f:64:3a:9c:09:59:7b:93:
06:09:44:6b:e2:8d:46:69:15:65:de:d8:eb:e7:c1:
45:3b:89:33:a7:4f:19:2e:80:03:c0:30:6a:ce:ac:
fa:f2:96:2f:a7:76:b4:2e:f0:2c:b8:25:37:84:ee:
88:db:0e:92:8d:a7:46:e2:81:76:9c:c2:08:e9:2b:
27:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:54:21:6A:20:FF:D5:4D:3D:33:54:14:59:F5:08:34:0E:3E:AF:85
X509v3 Authority Key Identifier:
keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:3c:aa:12:8b:75:3a:24:c9:4c:52:5c:7e:4c:5f:26:00:78:
07:3e:83:0e:ce:ad:b3:45:83:6d:ec:01:15:a1:50:52:3a:cf:
34:3f:31:46:31:ab:54:7c:2e:39:54:9a:e9:4f:8d:16:1a:ea:
3d:4f:69:76:a1:57:e5:6c:87:60:32:fb:34:ef:56:13:17:68:
d0:69:c5:cb:69:e4:3d:14:b5:c9:f0:9b:e9:41:aa:b6:b0:13:
9f:e8:53:0f:cb:32:13:ce:83:42:0b:6c:42:ca:3b:94:b3:45:
d0:8f:91:86:4e:61:aa:ba:1b:e8:b7:7f:7f:0d:8f:70:4e:bc:
8a:5b:5e:68:d9:c7:a1:4d:27:63:c5:36:35:e5:1c:f3:40:4d:
d3:d2:d1:3c:af:1b:a3:bb:09:e2:dc:15:5b:f9:48:3d:0f:fe:
a9:a0:fc:53:31:58:7b:06:34:98:b6:12:b5:39:b7:e5:43:4d:
e4:7d:91:ae:a2:ab:bd:59:4c:87:54:32:f9:d9:bc:c4:26:b4:
07:f0:c4:9c:61:3e:c1:89:3c:4f:a7:d8:f6:f3:50:4c:5b:bc:
34:dc:88:c8:93:7a:c8:3c:a1:95:db:68:3e:86:a0:ac:78:40:
fc:d6:fe:9c:bc:fd:cf:f7:25:55:e5:49:69:99:ac:8a:c3:2f:
ad:61:a0:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4ixmwx+MdsLRY6eMRNeVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MjRiMmUyNmRkM2FmY2M1YzFlYWMwMWY5MDI2M2QyMDFm
YmUwOTkwHhcNMjYwNDE2MjAwMTE1WhcNMjYwNDE3MjAwMTE1WjAzMTEwLwYDVQQD
Eyg4MDU0MjE2YTIwZmZkNTRkM2QzMzU0MTQ1OWY1MDgzNDBlM2VhZjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqQSch+Sem19lPqGElR6/y14lb7i
she2qGvTi7aRCe+cPrETn+tbKJ856zyp2I89ot0TQ/qyQ1LAUGNy65CutP3p0ERE
CAXdXmC0kdSULUUZnMh3VwVKJEwzZKGGA64frfJuJfORRwdDzBHKFjAzr9LisJTP
2h8DnzNL4dNbDYZsRieuQD4PEVxStQAzpdKmrT4sxSmVwkzVavMt92cQPB7Hdpbo
m3K6oEnkB+CbJbBTKQjvuW+10vmon2Q6nAlZe5MGCURr4o1GaRVl3tjr58FFO4kz
p08ZLoADwDBqzqz68pYvp3a0LvAsuCU3hO6I2w6SjadG4oF2nMII6SsnzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBUIWog/9VNPTNUFFn1CDQOPq+FMB8GA1UdIwQY
MBaAFFUksuJt06/MXB6sAfkCY9IB++CZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xNDMzOTItZDg2OC00YTI2LTg1NDMt
M2FhMjIyN2JhZGZlLzEvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xNDMzOTItZDg2OC00YTI2LTg1NDMtM2FhMjIyN2JhZGZl
LzEvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTyqEot1
OiTJTFJcfkxfJgB4Bz6DDs6ts0WDbewBFaFQUjrPND8xRjGrVHwuOVSa6U+NFhrq
PU9pdqFX5WyHYDL7NO9WExdo0GnFy2nkPRS1yfCb6UGqtrATn+hTD8syE86DQgts
Qso7lLNF0I+Rhk5hqrob6Ld/fw2PcE68ilteaNnHoU0nY8U2NeUc80BN09LRPK8b
o7sJ4twVW/lIPQ/+qaD8UzFYewY0mLYStTm35UNN5H2RrqKrvVlMh1Qy+dm8xCa0
B/DEnGE+wYk8T6fY9vNQTFu8NNyIyJN6yDyhldtoPoagrHhA/Nb+nLz9z/clVeVJ
aZmsisMvrWGgOg==
-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:42 2026 by rpki-client