Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
File: VqSYe_jGtM3WV7vC0KXhPptibLk.mft (raw, json)
Hash identifier: /9icdF9oJr+mgZpbluH4PY7F1BOklzuDiSki0kKYTRI=
Subject key identifier: AB:08:0E:AB:94:F2:74:69:63:9A:35:E9:D1:FE:FC:4E:0B:08:98:6A
Authority key identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
Certificate issuer: /CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Certificate serial: 019D38D2AF74905C87B071E36AA8D63CD3E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
Manifest number: 15A3
Signing time: Sun 29 Mar 2026 09:00:24 +0000
Manifest this update: Sun 29 Mar 2026 09:00:24 +0000
Manifest next update: Mon 30 Mar 2026 09:00:24 +0000
Files and hashes: 1: VqSYe_jGtM3WV7vC0KXhPptibLk.crl (hash: /Bb4FZrYeBV6ecHs4HBN7R2LkjxuG5kRN3ZekpcSy+k=)
2: i90B_Aw4voLYSZN4ike1cX-64ao.roa (hash: S2axTVSBnRViE7pSNvyWUI1Y+GA1IV83phsw1P/KVYM=)
3: mHu2PftrGhok9VGv5OwCSXoy7kI.roa (hash: JIflhy4iOTQx/e8s4VaUUMCa1jVPoZ6lbcfSCtMt09k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:af:74:90:5c:87:b0:71:e3:6a:a8:d6:3c:d3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Validity
Not Before: Mar 29 09:00:24 2026 GMT
Not After : Mar 30 09:00:24 2026 GMT
Subject: CN=ab080eab94f27469639a35e9d1fefc4e0b08986a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:56:a8:2f:9d:e0:64:5a:71:7e:f4:90:fc:
60:4d:98:68:3b:bf:78:d8:a1:02:7d:c1:e5:3c:4b:
ca:9f:59:8e:8c:60:04:d5:76:5f:97:64:17:e5:0a:
8b:ac:61:68:bf:73:06:69:98:f0:05:b7:fc:71:37:
e7:3f:d0:1d:c2:f3:58:0c:fa:9e:8f:a5:29:b0:e7:
35:51:5b:7c:19:b4:fb:c9:13:6c:53:db:5c:24:b5:
17:38:2e:5f:7c:6e:76:f3:33:5a:a8:01:66:e8:50:
ef:18:b3:eb:d8:05:a0:f3:67:f8:dc:8e:7c:f1:1e:
de:0b:4c:98:59:6c:23:86:ec:c4:7f:71:87:6d:48:
25:cd:78:bc:51:07:57:2a:b6:88:27:e7:ec:cc:ff:
64:13:c7:3d:a7:f7:d3:c8:8b:e4:16:61:41:24:3d:
3f:d5:2f:31:e8:f4:1e:0e:56:95:39:77:f9:db:ab:
f8:a9:86:c7:c4:f6:54:2c:18:42:c9:44:61:b8:36:
4d:79:02:28:ff:57:87:76:e5:6a:7f:13:87:c3:2a:
72:93:8b:1f:0f:f8:ec:24:35:aa:cd:28:4c:95:5e:
d8:57:32:e3:e1:1a:76:c6:f2:b3:11:12:90:23:fc:
72:4f:86:4c:c0:a1:36:66:ed:11:7e:70:ca:bf:cb:
22:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:08:0E:AB:94:F2:74:69:63:9A:35:E9:D1:FE:FC:4E:0B:08:98:6A
X509v3 Authority Key Identifier:
keyid:56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:12:71:26:d0:b2:da:68:b8:ac:c8:e3:4e:70:99:aa:23:62:
f3:92:76:11:e4:7c:d6:55:6c:ec:f6:e5:42:c2:b0:1c:ee:3c:
fb:f9:08:7f:aa:5a:ba:86:d4:fe:7e:44:a4:28:c3:46:46:ca:
23:ae:74:ea:19:b0:79:5f:d4:5e:5d:4b:f7:7a:24:50:08:5d:
61:80:bb:61:dd:39:7f:ca:b6:f5:fd:29:4a:a5:c6:2f:2b:3e:
b1:94:7a:0c:b7:66:2f:8c:84:25:57:89:e9:06:11:b9:d3:c7:
43:b0:6c:18:ac:6f:e1:3f:d0:8a:f3:84:dd:b4:d2:10:43:be:
7b:b5:e9:7f:c2:44:99:95:59:e6:25:74:a9:98:f3:b4:1e:b8:
da:46:4c:34:14:4e:db:51:e5:6f:0d:12:ab:82:7c:0e:ba:d0:
3a:53:82:82:a7:27:a3:36:88:84:90:d3:45:df:54:20:be:5a:
e4:b0:4e:b2:dc:79:5c:5c:21:a3:5b:74:8b:74:ad:99:4f:13:
c0:a0:83:3a:7e:ae:03:cf:81:4d:16:2e:1f:64:06:d0:50:cc:
15:08:fd:96:3d:03:3e:b4:2f:1d:cb:9b:3a:d5:91:c9:94:21:
6b:a7:ac:4c:18:0a:1a:b1:66:74:60:82:47:3c:ec:8b:ef:bf:
95:91:9d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:45:00 2026 by rpki-client