Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
File: VFmECNI871JWD36q1OHbDIYgYsM.mft (raw, json)
Hash identifier: z9/PQvO6RI1sO4RBq6I+bNO/TKGkP3tNZfqPxiMymyo=
Subject key identifier: C3:C7:04:49:7B:5D:57:63:FC:43:64:1A:89:A2:17:B4:30:9C:EE:5F
Authority key identifier: 54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
Certificate issuer: /CN=54598408d23cef52560f7eaad4e1db0c862062c3
Certificate serial: 019CABD91460D7302929F9004015A76F635D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:00:56 +0000
Manifest this update: Mon 02 Mar 2026 00:00:56 +0000
Manifest next update: Tue 03 Mar 2026 00:00:56 +0000
Files and hashes: 1: VFmECNI871JWD36q1OHbDIYgYsM.crl (hash: uwOmCUsiMn0iEjPkQYKTVGiTyrDd4Z7JRPNj16/rNHA=)
2: Zu8OUTqEJdgOEuCrzaxS93F6oOw.roa (hash: nLLJAITVfYEFMYRyN3x5RMOELDek19fGEta6GIsZ1vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:14:60:d7:30:29:29:f9:00:40:15:a7:6f:63:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54598408d23cef52560f7eaad4e1db0c862062c3
Validity
Not Before: Mar 2 00:00:56 2026 GMT
Not After : Mar 3 00:00:56 2026 GMT
Subject: CN=c3c704497b5d5763fc43641a89a217b4309cee5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:56:ed:d5:48:8d:e0:67:a4:23:ce:9f:68:51:
7f:5f:a1:27:08:95:55:dc:3f:23:f6:d1:5d:be:dc:
4d:d0:eb:9a:f9:23:65:1c:50:6d:86:f8:07:1f:cf:
80:69:fc:fe:80:4e:81:b1:ca:70:e9:8f:da:6f:f6:
12:dd:b1:2d:26:e0:ff:4e:38:5c:18:0d:e3:db:6f:
b3:05:f4:c6:b3:51:42:58:e9:78:c8:98:f8:0f:19:
bd:04:b4:29:3c:4e:4a:26:c2:c8:60:4c:cb:77:21:
67:a4:f2:34:e0:06:3a:d2:40:87:3e:2b:b6:69:9a:
ed:8b:39:75:a3:f7:48:a7:9c:c1:b1:f3:ca:97:1e:
e8:9c:6d:71:01:5f:d0:8b:ac:bc:30:95:ca:a5:4a:
75:4c:b7:4a:28:d8:e9:38:39:0c:ae:ef:64:03:e4:
35:63:fe:ac:b2:1c:7f:47:87:a2:73:02:fa:ee:0c:
88:5f:63:77:04:9a:d5:b4:83:f5:d5:91:aa:70:a1:
e4:f3:f5:cc:bc:eb:0d:99:33:3c:ba:92:15:e1:dd:
6d:95:ff:83:59:7e:78:8b:43:a7:f3:97:2a:f5:7a:
d5:4c:f5:ff:8c:8d:58:21:d0:1e:7b:f3:ad:42:e0:
24:f3:1c:05:5f:25:0b:5e:0d:28:af:ff:4e:69:a1:
3f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C7:04:49:7B:5D:57:63:FC:43:64:1A:89:A2:17:B4:30:9C:EE:5F
X509v3 Authority Key Identifier:
keyid:54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:f8:60:31:34:ce:89:8c:ba:13:40:5c:ee:c2:2b:d7:98:f7:
97:6a:88:c3:ad:96:70:c9:4d:0a:16:62:3e:89:9b:3e:fe:ac:
6c:2c:55:29:a0:30:dc:7c:90:82:77:eb:14:fb:d3:36:c2:b1:
6e:2a:9e:83:d1:27:b5:93:89:ec:16:97:e2:a1:11:a8:e9:5b:
a8:28:cd:48:1e:f4:7b:00:d3:70:d7:ac:46:31:4f:ed:b3:41:
ac:0c:68:ea:30:c8:6d:22:07:17:07:8f:54:b3:cc:4a:06:64:
18:7d:92:9e:5f:de:a0:50:3d:44:49:e2:69:e1:51:48:c0:05:
31:74:fe:90:80:95:67:4b:74:cc:25:62:e2:83:c3:f7:22:39:
94:05:c1:79:a5:90:ba:cb:f3:92:48:f4:4c:e7:19:92:ca:de:
a9:01:e4:12:6c:0f:73:03:2f:76:5e:81:41:9c:a2:36:d3:00:
5e:85:fb:30:09:33:d1:82:5a:0b:a1:2c:3a:e9:7a:91:a4:2c:
92:5c:09:04:40:3e:a6:68:37:76:a9:77:90:11:30:9f:0b:28:
b4:cc:a4:c8:61:70:86:3c:ca:38:44:00:a4:b3:e0:62:a5:c3:
13:f7:e6:1d:70:8c:1c:b7:a3:9a:86:24:13:3e:68:88:cb:99:
06:2a:a4:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2RRg1zApKfkAQBWnb2NdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NTk4NDA4ZDIzY2VmNTI1NjBmN2VhYWQ0ZTFkYjBjODYy
MDYyYzMwHhcNMjYwMzAyMDAwMDU2WhcNMjYwMzAzMDAwMDU2WjAzMTEwLwYDVQQD
EyhjM2M3MDQ0OTdiNWQ1NzYzZmM0MzY0MWE4OWEyMTdiNDMwOWNlZTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVbt1UiN4GekI86faFF/X6EnCJVV
3D8j9tFdvtxN0Oua+SNlHFBthvgHH8+Aafz+gE6Bscpw6Y/ab/YS3bEtJuD/Tjhc
GA3j22+zBfTGs1FCWOl4yJj4Dxm9BLQpPE5KJsLIYEzLdyFnpPI04AY60kCHPiu2
aZrtizl1o/dIp5zBsfPKlx7onG1xAV/Qi6y8MJXKpUp1TLdKKNjpODkMru9kA+Q1
Y/6sshx/R4eicwL67gyIX2N3BJrVtIP11ZGqcKHk8/XMvOsNmTM8upIV4d1tlf+D
WX54i0On85cq9XrVTPX/jI1YIdAee/OtQuAk8xwFXyULXg0or/9OaaE/ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPHBEl7XVdj/ENkGomiF7QwnO5fMB8GA1UdIwQY
MBaAFFRZhAjSPO9SVg9+qtTh2wyGIGLDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkZtRUNOSTg3MUpXRDM2cTFPSGJESVlnWXNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mOWQxNTItY2EwMC00NmM0LTkzNmEt
ZTkwOTNmZWUzZmQzLzEvVkZtRUNOSTg3MUpXRDM2cTFPSGJESVlnWXNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9mOWQxNTItY2EwMC00NmM0LTkzNmEtZTkwOTNmZWUzZmQz
LzEvVkZtRUNOSTg3MUpXRDM2cTFPSGJESVlnWXNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxfhgMTTO
iYy6E0Bc7sIr15j3l2qIw62WcMlNChZiPombPv6sbCxVKaAw3HyQgnfrFPvTNsKx
biqeg9EntZOJ7BaX4qERqOlbqCjNSB70ewDTcNesRjFP7bNBrAxo6jDIbSIHFweP
VLPMSgZkGH2Snl/eoFA9REniaeFRSMAFMXT+kICVZ0t0zCVi4oPD9yI5lAXBeaWQ
usvzkkj0TOcZksreqQHkEmwPcwMvdl6BQZyiNtMAXoX7MAkz0YJaC6EsOul6kaQs
klwJBEA+pmg3dql3kBEwnwsotMykyGFwhjzKOEQApLPgYqXDE/fmHXCMHLejmoYk
Ez5oiMuZBiqkYQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:42 2026 by rpki-client