Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.mft
File: VQde88Il_ro2rGM15il3wabY5zY.mft (raw, json)
Hash identifier: GrhS4372UW2xzziRh+ZTcx20mjP4XblGVnbJ9EB7y24=
Subject key identifier: 3D:91:8E:EC:B0:E1:1C:7D:B3:AE:21:47:67:7B:14:08:F0:2C:83:53
Authority key identifier: 55:07:5E:F3:C2:25:FE:BA:36:AC:63:35:E6:29:77:C1:A6:D8:E7:36
Certificate issuer: /CN=55075ef3c225feba36ac6335e62977c1a6d8e736
Certificate serial: 01A196FC4894D1D56E83BE522A3254BC13A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQde88Il_ro2rGM15il3wabY5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.mft
Manifest number: A3
Signing time: Sun 01 Nov 2026 12:01:18 +0000
Manifest this update: Sun 01 Nov 2026 12:01:18 +0000
Manifest next update: Mon 02 Nov 2026 12:01:18 +0000
Files and hashes: 1: VQde88Il_ro2rGM15il3wabY5zY.crl (hash: PD8mIw3iG+NvtiRBgUWZxP0/hygWEXX5qrEkPwc8hkQ=)
2: o6X1xXFcVuNeFtHtNbTAwmHed4o.roa (hash: 5N9Ci5RBIs/RxRxfkx3BB13wY8BUdFcia7okNDTuesU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQde88Il_ro2rGM15il3wabY5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:fc:48:94:d1:d5:6e:83:be:52:2a:32:54:bc:13:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55075ef3c225feba36ac6335e62977c1a6d8e736
Validity
Not Before: Nov 1 12:01:18 2026 GMT
Not After : Nov 2 12:01:18 2026 GMT
Subject: CN=3d918eecb0e11c7db3ae2147677b1408f02c8353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:82:98:56:61:e7:c5:f9:93:4b:9f:26:19:b8:
01:ec:4f:89:2a:d5:94:13:98:a3:b3:0d:a4:4e:a2:
45:72:4e:c7:b8:28:98:b3:9e:d0:85:e3:a5:4b:bc:
a4:5c:4e:ee:f8:ed:81:24:f1:22:06:06:90:a3:6d:
82:1b:65:56:2e:22:78:f7:4b:12:26:3b:be:94:60:
d5:16:a3:05:e6:cc:59:9e:42:44:92:2d:62:b7:43:
b7:4a:ee:e9:e7:48:ce:2e:d3:c3:0b:45:02:cd:34:
42:e2:0a:f2:ef:12:72:c5:c9:f6:dc:c1:1f:4b:ee:
8d:4b:b1:9d:f9:fa:c9:ab:56:a7:19:28:93:a8:e2:
bd:2f:00:b2:e3:3a:ea:e6:49:45:d0:81:59:7e:76:
e9:27:ab:50:f0:cc:4a:f5:6d:4c:36:42:8e:0e:df:
84:a8:ee:4a:98:41:a6:a2:d0:30:4f:ac:db:42:f4:
d9:34:1b:57:8e:fa:fb:5a:c9:f5:55:c8:4f:8d:11:
3d:93:d9:54:ed:3e:ed:e3:ad:b4:72:cf:39:45:8c:
e3:98:5e:ce:db:1b:b9:38:ac:6d:9f:b7:ef:24:d3:
80:99:15:b4:76:7e:6d:a9:53:fe:3b:15:ca:5b:cb:
c6:03:55:37:02:9d:5f:65:30:6b:55:00:31:75:d9:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:91:8E:EC:B0:E1:1C:7D:B3:AE:21:47:67:7B:14:08:F0:2C:83:53
X509v3 Authority Key Identifier:
keyid:55:07:5E:F3:C2:25:FE:BA:36:AC:63:35:E6:29:77:C1:A6:D8:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQde88Il_ro2rGM15il3wabY5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3d:e9:2f:20:85:a4:a2:75:3b:fb:29:f9:c1:7c:81:97:7c:
e2:3c:e2:19:c1:89:84:ed:c6:25:26:76:ad:08:7c:ca:2c:c8:
8e:8c:2e:19:ad:4c:c2:21:61:db:82:5d:d6:f8:d2:b6:1a:c2:
11:85:60:af:52:82:28:78:27:0b:5e:c4:59:bd:66:52:94:d1:
bb:df:9f:ad:e3:69:45:60:d5:0b:82:99:d8:80:a4:6c:8a:6c:
5f:f5:93:78:97:4f:25:7f:05:f7:62:73:d3:44:5c:c7:43:cf:
cb:16:0c:a2:e1:1c:e4:78:4b:74:43:2d:28:57:92:8e:5b:96:
5c:a9:fe:d3:fe:12:6e:13:04:48:22:3f:d3:52:3b:51:cf:ef:
81:52:05:7d:78:53:d3:80:22:d4:86:53:f2:c9:61:a2:17:78:
23:5f:a4:50:e6:fb:93:2c:44:3a:4d:14:9e:50:86:bc:18:1f:
60:8f:cf:2b:92:43:0e:b0:7e:77:ee:46:bd:c6:f1:f2:a0:9b:
56:92:57:0c:46:9a:c9:26:71:84:bf:9f:a6:bd:6b:4a:86:dc:
29:12:97:74:9f:67:d1:56:b6:1a:81:aa:8d:94:ca:28:2c:3f:
65:95:84:2a:e4:ab:54:ef:73:61:fd:08:e0:d6:5c:b4:3d:13:
c2:1e:91:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:30:29 2026 by rpki-client