Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
File: vqPSZTUbZfI58pl94eioBneTOl4.mft (raw, json)
Hash identifier: CnSy/QawfiW9SnIPXDciFwK9aI5mKlB7YBqak5zU26s=
Subject key identifier: 05:24:2A:31:55:32:B6:70:63:EA:4F:DE:77:CC:FC:4B:29:5F:08:D7
Authority key identifier: BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
Certificate issuer: /CN=bea3d265351b65f239f2997de1e8a80677933a5e
Certificate serial: 019D37893DB6FABA6A70F19B786C4840D90A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
Manifest number: 06B4
Signing time: Sun 29 Mar 2026 03:00:34 +0000
Manifest this update: Sun 29 Mar 2026 03:00:34 +0000
Manifest next update: Mon 30 Mar 2026 03:00:34 +0000
Files and hashes: 1: PIxJAOWfVeBmU76JbXSAooErb1U.roa (hash: T08H7sWyCft7hkyKVMhTHqrQKcUGSoqeo9MGAcS4sOs=)
2: vqPSZTUbZfI58pl94eioBneTOl4.crl (hash: MP7tYwzAyfguM2dGrGrCng9S4Hzo70tZarAstA/mkd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:3d:b6:fa:ba:6a:70:f1:9b:78:6c:48:40:d9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea3d265351b65f239f2997de1e8a80677933a5e
Validity
Not Before: Mar 29 03:00:34 2026 GMT
Not After : Mar 30 03:00:34 2026 GMT
Subject: CN=05242a315532b67063ea4fde77ccfc4b295f08d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:10:0c:f8:26:1c:f1:2b:0b:34:da:a2:85:
80:08:ac:21:a7:d6:51:a0:37:98:58:82:e0:9d:3b:
44:48:ac:6c:3a:05:ed:0a:55:84:3f:8d:73:df:5d:
6f:09:6c:a6:b0:f1:f5:fe:5d:4d:9c:fa:73:35:ec:
1b:95:be:09:5e:c7:84:99:eb:d3:1c:75:3b:d4:1f:
cc:a5:dd:40:99:0b:2a:28:4b:21:db:6b:a3:1a:66:
a6:e6:a5:cd:3d:e6:53:02:88:3b:67:3b:8e:1c:73:
ac:ec:a7:a9:a1:84:8a:a5:9b:97:de:da:1d:8d:21:
6d:12:c3:60:b7:ed:86:b1:1f:7e:3b:9c:ea:20:5d:
5a:b9:78:58:78:72:9b:fe:e6:c5:8a:64:1b:79:5e:
b1:b3:e6:cf:a3:8c:c4:20:11:47:12:fa:aa:60:e2:
40:37:e9:94:00:85:46:44:b6:8a:f8:dc:ec:24:e1:
98:cc:23:89:13:c9:87:13:2a:25:3f:42:34:2a:46:
ac:81:8d:ec:2d:21:bf:2e:1b:15:f5:69:8e:c2:4c:
a5:91:f0:67:f2:7c:ca:a9:98:4b:08:a8:97:f8:c0:
c5:4a:e4:8e:36:13:db:1c:8a:da:1a:fa:d4:15:3d:
f3:7b:d8:b8:d3:58:b0:2a:38:0a:ce:46:62:ea:0f:
03:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:24:2A:31:55:32:B6:70:63:EA:4F:DE:77:CC:FC:4B:29:5F:08:D7
X509v3 Authority Key Identifier:
keyid:BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:74:94:65:5f:03:6e:66:fd:e2:cf:9d:57:0e:7c:b7:15:e9:
d6:1d:25:8f:19:31:a3:19:ad:08:5d:13:7e:dc:89:ea:48:2c:
78:12:86:1f:69:ed:7a:84:c4:3d:f8:73:2d:e0:10:83:e2:31:
b9:53:81:ad:99:11:a5:5f:b8:e2:e7:e7:6e:3b:29:c2:b2:f4:
3b:f9:31:d2:51:50:2c:4d:49:d9:17:95:33:62:d1:f5:3b:c9:
bf:b4:ca:ea:ca:20:fc:41:07:e2:e3:09:b1:f1:dd:c9:44:7e:
ae:91:17:f4:83:b6:65:b0:a9:15:41:3d:6a:c3:9c:3b:98:41:
ff:1c:fd:79:dd:ee:9c:d6:e5:13:98:65:49:61:74:33:85:42:
a7:93:ad:ce:84:f5:3d:55:9c:c1:20:2e:89:af:ae:6d:24:42:
f5:ab:23:86:2e:db:70:be:80:35:53:87:1a:e2:57:19:95:ee:
ec:eb:b3:1a:03:5b:dc:b8:4d:38:80:89:fa:28:53:2d:d0:20:
52:19:97:69:b8:47:a0:d4:21:54:bf:38:b4:23:01:a6:1e:46:
2e:57:05:f1:81:ff:3d:45:cd:2d:df:a1:9f:a6:99:96:93:d7:
12:05:66:56:28:2b:16:09:01:cf:88:53:58:db:51:ce:c5:2f:
d4:95:a1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:06 2026 by rpki-client