Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier: HNUCV4/Y+zVuip3+FWzYSlf7iBtXgL0BwiE4DvC4syA=
Subject key identifier: AA:1A:DF:52:B8:2E:AA:79:9D:C6:9B:59:90:57:CF:4B:0D:9C:35:60
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 019FAA87DFF0EB47FCF733D213687D2EFA28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number: 0D22
Signing time: Tue 28 Jul 2026 21:00:59 +0000
Manifest this update: Tue 28 Jul 2026 21:00:59 +0000
Manifest next update: Wed 29 Jul 2026 21:00:59 +0000
Files and hashes: 1: GrwS7z5skQLr1kWHFgshe5BTW1o.roa (hash: y+YqbBQOH20V6aaG8Rd/FbsV1PT5JFszmedwpyqgIUM=)
2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: 9GawVT14MSE4msdtLUb91G096XStNJHCJpUDE/fuLxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:df:f0:eb:47:fc:f7:33:d2:13:68:7d:2e:fa:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Jul 28 21:00:59 2026 GMT
Not After : Jul 29 21:00:59 2026 GMT
Subject: CN=aa1adf52b82eaa799dc69b599057cf4b0d9c3560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:1e:3d:53:e4:f8:18:f2:49:a9:3d:39:50:
be:ea:f3:03:9a:44:6d:d2:7e:68:fd:30:76:db:4d:
80:80:ac:e4:a9:26:34:86:11:e2:d9:32:11:27:bb:
52:bc:f9:dc:3d:89:23:69:84:e1:13:0a:4d:83:2b:
1b:67:1a:ae:32:b5:d2:e3:f6:3f:8f:d5:82:3a:e4:
39:8e:97:aa:30:7b:ae:4b:2d:a0:df:fb:6e:d2:ca:
cb:5a:cd:54:10:50:80:4e:45:38:4b:cc:a8:a3:ef:
d6:1f:40:53:fc:30:2e:73:2b:08:a7:49:7e:69:53:
ba:6b:41:19:e2:03:f9:cf:f6:72:30:be:9f:5f:30:
82:c4:a3:3e:81:0c:fa:7c:f2:59:c0:b6:91:b3:a6:
a3:77:7b:06:dd:f6:4f:a2:53:50:b8:72:18:97:b1:
77:42:6e:3f:f7:5c:8a:a7:54:c5:c5:80:5a:6e:7d:
39:d9:6c:0d:e9:89:7e:54:93:19:cf:98:82:2e:7a:
48:d9:09:22:25:4e:2d:fb:70:ff:7f:f1:2d:91:98:
d8:98:de:69:eb:f0:92:3c:95:a2:40:04:f5:d7:0c:
4a:8e:d6:ab:9e:b4:6a:8e:0b:b9:bf:15:96:fb:ee:
4c:9b:7b:13:20:17:bd:15:2a:a2:9f:fb:1b:bc:5f:
a3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1A:DF:52:B8:2E:AA:79:9D:C6:9B:59:90:57:CF:4B:0D:9C:35:60
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b8:64:df:3b:ac:5a:ac:71:76:a0:70:92:17:9f:92:32:f8:
17:02:a7:fa:82:77:e0:ab:e9:34:e7:68:5f:18:65:1a:a4:da:
b3:c5:df:88:ef:f1:1a:17:8b:20:70:f9:4c:90:59:19:8d:02:
98:52:cf:25:89:e3:b8:50:4b:aa:35:b0:fa:9d:7c:ad:4e:47:
a3:bd:10:e2:ec:d7:98:c3:17:36:87:fe:a6:d6:0c:4d:5c:bd:
90:3f:e9:b3:00:20:c9:e3:78:33:a6:c3:7f:ee:13:74:13:13:
8e:44:05:85:eb:02:41:c1:f8:c9:59:fa:1b:b7:8c:80:a4:b5:
a3:4f:40:d2:a5:56:6f:ca:46:b2:e0:86:29:60:a0:6e:7d:a6:
d2:16:c9:26:eb:12:69:90:77:26:6c:19:98:ba:cb:33:68:b0:
5b:4f:4c:74:e0:39:8d:e7:c9:1e:46:44:37:05:61:dd:64:d7:
6b:e3:b4:f3:5f:35:36:05:49:82:f3:91:6c:15:f3:04:62:25:
d4:03:ff:cc:1c:b9:c1:6f:b3:3e:61:f3:37:65:2b:5f:79:7f:
b9:c5:89:a5:13:67:31:8c:53:ce:4e:5e:14:d5:8b:42:f5:ed:
b5:af:7f:39:3b:47:2f:27:b6:22:8e:6a:14:a1:6f:d9:5f:ac:
27:f4:2c:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh9/w60f89zPSE2h9LvooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTZjNDZkN2Q5MGZlYjRhNzI4YWYwZjhhZTExYmZhMGQ0
ZjhjYjEwHhcNMjYwNzI4MjEwMDU5WhcNMjYwNzI5MjEwMDU5WjAzMTEwLwYDVQQD
EyhhYTFhZGY1MmI4MmVhYTc5OWRjNjliNTk5MDU3Y2Y0YjBkOWMzNTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ0ePVPk+BjySak9OVC+6vMDmkRt
0n5o/TB2202AgKzkqSY0hhHi2TIRJ7tSvPncPYkjaYThEwpNgysbZxquMrXS4/Y/
j9WCOuQ5jpeqMHuuSy2g3/tu0srLWs1UEFCATkU4S8yoo+/WH0BT/DAucysIp0l+
aVO6a0EZ4gP5z/ZyML6fXzCCxKM+gQz6fPJZwLaRs6ajd3sG3fZPolNQuHIYl7F3
Qm4/91yKp1TFxYBabn052WwN6Yl+VJMZz5iCLnpI2QkiJU4t+3D/f/EtkZjYmN5p
6/CSPJWiQAT11wxKjtarnrRqjgu5vxWW++5Mm3sTIBe9FSqin/sbvF+jCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoa31K4Lqp5ncabWZBXz0sNnDVgMB8GA1UdIwQY
MBaAFFSmxG19kP60pyivD4rhG/oNT4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGIt
MGZjOWJmY2Q3NGE2LzEvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGItMGZjOWJmY2Q3NGE2
LzEvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrhk3zus
WqxxdqBwkhefkjL4FwKn+oJ34KvpNOdoXxhlGqTas8XfiO/xGheLIHD5TJBZGY0C
mFLPJYnjuFBLqjWw+p18rU5Ho70Q4uzXmMMXNof+ptYMTVy9kD/pswAgyeN4M6bD
f+4TdBMTjkQFhesCQcH4yVn6G7eMgKS1o09A0qVWb8pGsuCGKWCgbn2m0hbJJusS
aZB3JmwZmLrLM2iwW09MdOA5jefJHkZENwVh3WTXa+O08181NgVJgvORbBXzBGIl
1AP/zBy5wW+zPmHzN2UrX3l/ucWJpRNnMYxTzk5eFNWLQvXtta9/OTtHLye2Io5q
FKFv2V+sJ/Qssg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:26 2026 by rpki-client