Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
File: veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft (raw, json)
Hash identifier: xQQvuOXSoYKT+1d5DDr4Zeiwjd7wOq/cSkDJ2X27qMc=
Subject key identifier: 87:F1:D0:41:A7:B6:B1:1E:98:21:A0:05:7A:E8:15:9B:EB:59:13:48
Authority key identifier: BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4
Certificate issuer: /CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4
Certificate serial: 019CADC78EAE7D8FA2EFB457201C27B38D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
Manifest number: 1498
Signing time: Mon 02 Mar 2026 09:01:02 +0000
Manifest this update: Mon 02 Mar 2026 09:01:02 +0000
Manifest next update: Tue 03 Mar 2026 09:01:02 +0000
Files and hashes: 1: veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl (hash: pD/D/ZsR3s1ger3F1/5Sg2ULYZUmtwqKbBgC0Ls5Cco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:8e:ae:7d:8f:a2:ef:b4:57:20:1c:27:b3:8d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4
Validity
Not Before: Mar 2 09:01:02 2026 GMT
Not After : Mar 3 09:01:02 2026 GMT
Subject: CN=87f1d041a7b6b11e9821a0057ae8159beb591348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:6b:9c:f2:ff:e7:b6:f2:5f:22:84:54:40:
b3:e9:c6:bb:53:b2:a2:98:1c:80:49:06:e3:39:e8:
de:8b:db:05:8e:3e:54:97:c6:83:c4:91:0e:c8:b8:
db:d2:9e:40:dc:01:3c:cf:34:01:2b:b9:4a:93:a6:
5d:23:00:7f:15:33:c1:04:80:7b:63:cf:f8:3d:c3:
e7:bc:bc:a1:47:39:f6:68:87:57:70:ef:81:eb:50:
d5:c0:31:5a:e0:f8:50:f7:f4:9b:52:3d:01:27:8c:
a6:7d:00:92:e6:53:c9:e5:8b:a5:7a:78:a4:73:52:
11:d3:53:0d:ff:37:5e:b0:72:67:a7:bc:57:cd:c3:
01:b4:ee:00:fe:9b:bc:4b:e1:a4:01:c9:ac:9e:4c:
96:2e:a5:89:6d:93:e4:74:b8:50:06:07:fe:ee:7d:
b5:13:8b:31:32:1f:ed:01:53:26:93:f1:57:35:1d:
a2:8d:f2:58:e7:c2:f4:6f:5c:88:5e:11:1c:d7:b0:
c1:8a:f3:0d:1d:3f:73:c6:e0:5b:45:5d:b8:bb:c9:
88:57:3f:32:25:d1:cc:bd:c9:aa:c3:04:59:66:de:
8b:0b:6a:06:fc:3a:40:2c:f7:34:0a:4d:51:82:b1:
43:90:6d:10:24:be:60:bf:09:19:75:a3:ad:3c:3a:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F1:D0:41:A7:B6:B1:1E:98:21:A0:05:7A:E8:15:9B:EB:59:13:48
X509v3 Authority Key Identifier:
keyid:BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d0:ee:d2:37:fe:83:e4:98:82:7b:c4:26:44:8a:04:14:55:
00:33:81:24:31:0a:2a:70:bb:b5:e7:1e:ff:fd:f6:74:5e:ed:
39:da:4e:74:49:b3:6b:68:31:57:22:07:c1:5c:05:79:3d:3c:
e9:89:7b:cb:ad:8e:55:f8:2d:68:ed:8b:3a:7f:27:ac:ff:c2:
97:2b:c2:7e:f0:86:96:3e:35:6e:4e:a9:68:0f:59:b2:55:56:
b9:0d:c2:cc:10:6a:b9:3a:8f:10:86:83:ae:04:61:99:bd:63:
54:e5:17:ab:a0:16:48:4d:e8:dd:e0:cc:35:94:df:df:f9:31:
40:18:6b:20:7b:dc:db:4b:5c:af:52:a8:8e:ab:08:b7:f9:4e:
de:e6:f9:73:b7:28:24:4a:98:c0:b7:7c:63:23:4c:aa:e9:a8:
ee:0b:8d:7e:25:00:8c:84:f1:e0:27:ee:70:78:e6:e0:5e:e6:
07:fb:d3:c6:08:0c:62:55:ca:10:6b:f7:8f:e2:df:cc:c1:08:
f1:93:2c:77:5d:c8:c2:12:a4:d7:dd:67:da:f9:01:18:d3:88:
ef:b5:7c:20:8d:10:71:b2:b3:72:d5:f1:14:a7:3e:cc:d5:b1:
98:0d:4f:6f:f6:2a:65:b4:bc:36:6a:bd:1e:8e:b7:57:47:b7:
2f:2c:a9:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx46ufY+i77RXIBwns42eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTNhNGZiMjY4MWRiMjhiNWMzZjVmMWQ0NmEyZDM1OTk2
MGZhYTQwHhcNMjYwMzAyMDkwMTAyWhcNMjYwMzAzMDkwMTAyWjAzMTEwLwYDVQQD
Eyg4N2YxZDA0MWE3YjZiMTFlOTgyMWEwMDU3YWU4MTU5YmViNTkxMzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XlrnPL/57byXyKEVECz6ca7U7Ki
mByASQbjOejei9sFjj5Ul8aDxJEOyLjb0p5A3AE8zzQBK7lKk6ZdIwB/FTPBBIB7
Y8/4PcPnvLyhRzn2aIdXcO+B61DVwDFa4PhQ9/SbUj0BJ4ymfQCS5lPJ5Yulenik
c1IR01MN/zdesHJnp7xXzcMBtO4A/pu8S+GkAcmsnkyWLqWJbZPkdLhQBgf+7n21
E4sxMh/tAVMmk/FXNR2ijfJY58L0b1yIXhEc17DBivMNHT9zxuBbRV24u8mIVz8y
JdHMvcmqwwRZZt6LC2oG/DpALPc0Ck1RgrFDkG0QJL5gvwkZdaOtPDoUjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfx0EGntrEemCGgBXroFZvrWRNIMB8GA1UdIwQY
MBaAFL3jpPsmgdsotcP18dRqLTWZYPqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVPay15YUIyeWkxd19YeDFHb3ROWmxnLXFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8yMWRlNjctNDk3NS00N2E4LTg0NmMt
ODA4ZmVhYWY5ODdkLzEvdmVPay15YUIyeWkxd19YeDFHb3ROWmxnLXFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8yMWRlNjctNDk3NS00N2E4LTg0NmMtODA4ZmVhYWY5ODdk
LzEvdmVPay15YUIyeWkxd19YeDFHb3ROWmxnLXFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9Du0jf+
g+SYgnvEJkSKBBRVADOBJDEKKnC7tece//32dF7tOdpOdEmza2gxVyIHwVwFeT08
6Yl7y62OVfgtaO2LOn8nrP/ClyvCfvCGlj41bk6paA9ZslVWuQ3CzBBquTqPEIaD
rgRhmb1jVOUXq6AWSE3o3eDMNZTf3/kxQBhrIHvc20tcr1KojqsIt/lO3ub5c7co
JEqYwLd8YyNMqumo7guNfiUAjITx4CfucHjm4F7mB/vTxggMYlXKEGv3j+LfzMEI
8ZMsd13IwhKk191n2vkBGNOI77V8II0QcbKzctXxFKc+zNWxmA1Pb/YqZbS8Nmq9
Ho63V0e3Lyypvw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:16:30 2026 by rpki-client