Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
File: vQQTxuRIJSdlFDEhETiDjhM4VN4.mft (raw, json)
Hash identifier: yEFwKOBBcvYVRLbc6QoKZvL88Ff6w9I4OpKgQS0Eqbs=
Subject key identifier: 37:36:07:C0:35:3B:12:65:7A:F6:59:0C:C5:C7:FB:02:95:AE:8B:A1
Authority key identifier: BD:04:13:C6:E4:48:25:27:65:14:31:21:11:38:83:8E:13:38:54:DE
Certificate issuer: /CN=bd0413c6e4482527651431211138838e133854de
Certificate serial: 01A14A9899F4AF8790D15BB1FC479C92B8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
Manifest number: 0249
Signing time: Sat 17 Oct 2026 16:01:17 +0000
Manifest this update: Sat 17 Oct 2026 16:01:17 +0000
Manifest next update: Sun 18 Oct 2026 16:01:17 +0000
Files and hashes: 1: J30uXUMfh3XSWzuHtItjsBGYdX4.roa (hash: aaHMMpoNlOvcxmyKWoi17KEu5KKWFZ9/oYArmo2lGEQ=)
2: msJhkdL8bYuRU99vqhG4kMQKpw0.asa (hash: VOW6ky2rKMJoy1zhKMhXGEnmbBhbE/wiZmk5aED6izs=)
3: vQQTxuRIJSdlFDEhETiDjhM4VN4.crl (hash: 7UHzD0JadqmvTMqNspHkHtFGSePhqGYfQhIF8UboUIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 16:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:98:99:f4:af:87:90:d1:5b:b1:fc:47:9c:92:b8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd0413c6e4482527651431211138838e133854de
Validity
Not Before: Oct 17 16:01:17 2026 GMT
Not After : Oct 18 16:01:17 2026 GMT
Subject: CN=373607c0353b12657af6590cc5c7fb0295ae8ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f8:a1:72:ae:17:04:bc:b7:ac:a1:be:99:dc:
4f:b4:c8:bf:03:9c:6b:9b:3c:a3:b8:44:d4:5d:fa:
f5:ce:68:68:ee:98:68:38:43:d3:38:7c:6d:01:f8:
bd:9c:a8:2e:2d:51:0f:52:69:14:4b:d3:40:66:76:
53:73:76:7d:a2:8f:ca:7d:e1:96:4e:8f:6d:72:bb:
1c:16:41:90:ed:6a:42:4a:48:50:e7:37:9a:bb:a2:
e1:f6:eb:be:cc:a6:1c:93:81:31:c2:1e:32:38:dc:
06:85:3f:8e:71:0f:0f:2a:ca:a0:85:1e:5d:59:7e:
2f:6b:a8:03:be:c8:a0:3c:8b:5c:ac:9b:c9:ee:0b:
b6:d3:49:08:59:22:88:87:b9:e6:a1:d9:96:3e:c5:
8a:21:bb:6d:42:b5:9d:31:5e:7f:99:b2:a0:1a:9a:
14:b1:3d:62:f8:44:90:14:41:52:8f:68:92:34:14:
8f:ba:93:3d:6c:95:e5:87:bc:d8:ed:02:06:42:a1:
51:64:a9:d0:84:41:bd:37:10:ea:4b:ba:78:ab:45:
87:ae:8e:c3:08:bd:fc:ad:60:68:38:05:03:2d:ab:
ec:7b:a2:77:56:54:19:64:6f:e0:31:ed:4a:c4:c0:
a5:1f:f1:c9:a7:dd:98:da:1f:31:61:36:42:95:48:
19:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:36:07:C0:35:3B:12:65:7A:F6:59:0C:C5:C7:FB:02:95:AE:8B:A1
X509v3 Authority Key Identifier:
keyid:BD:04:13:C6:E4:48:25:27:65:14:31:21:11:38:83:8E:13:38:54:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:50:2d:7a:94:11:b0:03:de:29:1f:59:80:6d:29:48:44:6a:
04:07:6c:c0:f5:df:e0:a1:50:f9:19:c1:03:e7:da:4e:fe:9e:
08:b8:5b:0e:bc:10:51:ce:04:ef:bf:21:76:b0:7e:09:c1:94:
0e:c2:65:7f:3e:ec:28:ec:75:64:a0:e9:20:62:36:27:75:ba:
8f:29:f8:85:b6:d5:d1:0c:27:3c:c2:8c:89:8c:cd:aa:1a:b9:
50:d9:4a:ca:23:ce:32:83:e8:3c:a8:51:7a:45:94:6e:5b:18:
4f:bc:04:b9:3e:4a:a8:96:4f:88:88:77:79:0d:93:ce:d3:fe:
6d:22:3f:37:96:55:29:33:28:1b:8f:e4:45:a9:41:26:49:60:
f4:64:9e:70:75:27:3b:90:8f:73:69:3f:44:61:0a:8f:bc:10:
e0:df:c8:ef:57:75:f9:d3:62:ed:59:d9:4d:62:e8:3e:63:1b:
0f:b6:fc:5e:50:44:d0:09:60:6e:7c:81:36:e9:84:3b:c4:82:
87:fe:81:8a:11:53:4a:6c:3f:fb:93:76:dd:ed:1a:15:53:cc:
03:ae:23:ac:70:b1:aa:79:f0:e8:80:39:50:b7:01:59:2b:68:
7b:ed:c1:a5:de:ef:b7:4b:a0:a4:b9:2f:7f:3a:0c:1f:1c:6d:
b3:d1:2f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 04:38:59 2026 by rpki-client