Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier: T7i/xQy9XXWwgEiA74BCfjxrAcf0pGGS2YDmgW+gXR4=
Subject key identifier: C0:7E:30:A8:EB:63:9C:4E:33:27:A5:85:D3:48:64:F0:18:F8:E7:65
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 019CABD924F02925B58B587DE9543BD79677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number: 0B95
Signing time: Mon 02 Mar 2026 00:01:00 +0000
Manifest this update: Mon 02 Mar 2026 00:01:00 +0000
Manifest next update: Tue 03 Mar 2026 00:01:00 +0000
Files and hashes: 1: GrwS7z5skQLr1kWHFgshe5BTW1o.roa (hash: y+YqbBQOH20V6aaG8Rd/FbsV1PT5JFszmedwpyqgIUM=)
2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: QjTT4N4aqNgvotpg463sKTXb5Sau/WED/6Xhs/gM32U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:24:f0:29:25:b5:8b:58:7d:e9:54:3b:d7:96:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Mar 2 00:01:00 2026 GMT
Not After : Mar 3 00:01:00 2026 GMT
Subject: CN=c07e30a8eb639c4e3327a585d34864f018f8e765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:63:73:2d:b3:7e:5a:f9:92:06:dd:09:3d:
78:29:d3:34:86:39:60:e4:1b:1d:8b:ac:55:36:d8:
e0:2f:0a:d0:70:93:b4:20:64:63:6f:02:a6:18:48:
53:90:e5:0b:47:4c:93:8e:0f:83:01:22:90:fa:7e:
ea:81:98:92:d3:09:5e:82:70:4b:b5:0b:93:23:46:
a6:33:ed:30:ba:4c:2e:00:5c:57:f9:e1:16:6f:cc:
c6:7d:5c:63:04:d5:ef:49:2c:bd:66:53:ce:74:4a:
bc:99:e6:88:5e:07:03:ba:f0:4c:ef:96:c1:33:67:
79:4c:7e:e1:4e:24:27:ff:c7:63:06:89:0d:a1:9c:
a7:8f:d0:53:b5:95:67:15:9e:d0:8a:bb:ed:ab:2e:
85:32:4c:c8:51:0f:16:ed:70:40:4a:74:b6:12:a4:
9b:ae:76:ec:1a:22:0c:80:09:6f:72:de:bc:65:66:
a8:11:67:0b:6b:42:02:8a:07:4b:36:6d:57:01:aa:
56:ee:58:a3:96:9e:c9:cd:81:d3:24:8e:06:eb:13:
75:ee:64:0c:0d:b3:17:ca:c3:bc:cd:ce:bd:ba:c7:
1a:df:d6:f2:84:95:17:93:5a:f7:e7:37:6b:62:f5:
4c:07:20:fe:7e:bf:b1:e1:10:86:b5:a6:a8:14:66:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7E:30:A8:EB:63:9C:4E:33:27:A5:85:D3:48:64:F0:18:F8:E7:65
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:c0:d6:47:1e:2a:47:2d:96:0b:30:7f:98:f5:3f:c6:44:c4:
e8:f6:05:f2:aa:e1:51:13:6d:e6:a0:a9:86:f3:6b:35:65:09:
e7:ee:78:ec:ab:80:8a:5f:c3:42:46:dd:f9:b1:ee:9d:ec:28:
90:43:aa:e5:bf:79:c4:41:cc:96:fa:92:1d:da:f7:ce:06:a8:
2d:5b:f5:6a:96:6f:46:d6:74:8f:6a:94:63:7c:b3:13:97:b4:
52:b3:30:28:ca:c2:d2:fa:74:29:da:89:9c:e1:1d:26:e0:aa:
7a:1e:f0:f7:6e:20:43:69:76:8a:61:d1:2c:02:41:6e:c1:25:
e8:f0:cd:98:48:90:e8:68:ed:10:fd:98:ce:0e:d1:f0:4f:2b:
99:c4:35:62:76:f5:f4:f8:a7:3b:2e:ee:19:33:12:46:ac:93:
60:b8:97:71:e5:2d:f7:eb:c8:42:b8:a6:a9:9d:b7:89:5c:c1:
40:27:2e:c5:c9:24:8c:ff:6f:19:83:ce:f7:fd:c2:50:6d:13:
14:c7:a0:e2:44:40:bc:c1:50:31:4c:80:1a:17:29:76:6a:6c:
7d:88:1c:cb:25:06:31:6a:51:5d:b0:76:b2:c4:6e:93:a9:2e:
dc:fd:1d:2e:b3:16:98:51:bb:e4:33:f4:cd:1d:06:e2:3a:9b:
c0:a7:08:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2STwKSW1i1h96VQ715Z3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTZjNDZkN2Q5MGZlYjRhNzI4YWYwZjhhZTExYmZhMGQ0
ZjhjYjEwHhcNMjYwMzAyMDAwMTAwWhcNMjYwMzAzMDAwMTAwWjAzMTEwLwYDVQQD
EyhjMDdlMzBhOGViNjM5YzRlMzMyN2E1ODVkMzQ4NjRmMDE4ZjhlNzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHJjcy2zflr5kgbdCT14KdM0hjlg
5Bsdi6xVNtjgLwrQcJO0IGRjbwKmGEhTkOULR0yTjg+DASKQ+n7qgZiS0wlegnBL
tQuTI0amM+0wukwuAFxX+eEWb8zGfVxjBNXvSSy9ZlPOdEq8meaIXgcDuvBM75bB
M2d5TH7hTiQn/8djBokNoZynj9BTtZVnFZ7Qirvtqy6FMkzIUQ8W7XBASnS2EqSb
rnbsGiIMgAlvct68ZWaoEWcLa0ICigdLNm1XAapW7lijlp7JzYHTJI4G6xN17mQM
DbMXysO8zc69usca39byhJUXk1r35zdrYvVMByD+fr+x4RCGtaaoFGY9IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMB+MKjrY5xOMyelhdNIZPAY+OdlMB8GA1UdIwQY
MBaAFFSmxG19kP60pyivD4rhG/oNT4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGIt
MGZjOWJmY2Q3NGE2LzEvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGItMGZjOWJmY2Q3NGE2
LzEvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv8DWRx4q
Ry2WCzB/mPU/xkTE6PYF8qrhURNt5qCphvNrNWUJ5+547KuAil/DQkbd+bHunewo
kEOq5b95xEHMlvqSHdr3zgaoLVv1apZvRtZ0j2qUY3yzE5e0UrMwKMrC0vp0KdqJ
nOEdJuCqeh7w924gQ2l2imHRLAJBbsEl6PDNmEiQ6GjtEP2Yzg7R8E8rmcQ1Ynb1
9PinOy7uGTMSRqyTYLiXceUt9+vIQrimqZ23iVzBQCcuxckkjP9vGYPO9/3CUG0T
FMeg4kRAvMFQMUyAGhcpdmpsfYgcyyUGMWpRXbB2ssRuk6ku3P0dLrMWmFG75DP0
zR0G4jqbwKcIEw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:51:36 2026 by rpki-client