Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
File: vhqIfnZTot5E8TFj4YcDcyaimgM.mft (raw, json)
Hash identifier: uiY1HO9ZbYAu3EeguSSjeoFVWOUbRmm64yrEv3OC9ik=
Subject key identifier: 5B:A6:90:10:FF:A8:C2:AF:BF:BC:6A:D0:96:F5:9B:66:8F:80:00:A9
Authority key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
Certificate issuer: /CN=be1a887e7653a2de44f13163e187037326a29a03
Certificate serial: 019D37C09353FB3357F018C823ECA5C0F15D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 04:01:00 +0000
Manifest this update: Sun 29 Mar 2026 04:01:00 +0000
Manifest next update: Mon 30 Mar 2026 04:01:00 +0000
Files and hashes: 1: 26V_3Mvd5HzKd--IVekz7E66T7M.roa (hash: vR3cG90fuQ7doDsdAb/Dcwa0EbD0JM2o7zzPUpuTRJk=)
2: 6hrWVEe7zJkcCCVfgajlhSv4cmY.roa (hash: K44F0Q+oZ6GMy0chonyVI2Ng0iyBpdcLQQo+pkOJBvA=)
3: vhqIfnZTot5E8TFj4YcDcyaimgM.crl (hash: FA7Foqly8b51Yz7t6u7kxxSVM678sAIjCohvHkxIxwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:93:53:fb:33:57:f0:18:c8:23:ec:a5:c0:f1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1a887e7653a2de44f13163e187037326a29a03
Validity
Not Before: Mar 29 04:01:00 2026 GMT
Not After : Mar 30 04:01:00 2026 GMT
Subject: CN=5ba69010ffa8c2afbfbc6ad096f59b668f8000a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6e:95:1f:21:3e:14:08:1f:5b:cb:e7:7d:4c:
06:a9:67:0b:f0:e9:d3:cb:2d:5b:e4:13:fe:01:81:
bf:3f:7d:d0:51:12:61:2c:91:5b:3a:28:a7:10:d4:
a6:c2:17:49:9d:24:75:d2:3f:6a:08:c7:8b:cd:ce:
ed:c5:b8:d2:6d:da:60:6d:92:94:a1:d0:3c:8d:c3:
78:25:3d:26:50:53:80:69:b6:9b:6d:85:fc:f6:d4:
72:e0:b7:7f:58:98:7b:41:89:f9:a8:8a:d1:f4:14:
06:0d:1d:8d:a8:0d:f3:6e:69:25:e3:ad:ac:47:88:
45:4f:1b:73:8c:56:a5:95:96:87:e0:c3:7c:b7:e6:
65:f3:ae:7e:3d:17:31:8f:36:13:d8:f4:70:fd:6b:
38:d0:ad:a2:de:70:1a:c5:a2:04:46:6e:26:ee:aa:
74:ef:35:e1:1e:e2:be:13:93:63:d7:2c:98:30:ca:
cb:83:cf:3c:7b:41:f4:d9:11:2d:10:6f:0a:27:6c:
ef:5b:dd:dc:d5:38:c8:21:ff:67:c6:d8:00:23:f8:
12:31:49:06:e2:da:09:4d:f5:51:c3:79:48:41:0d:
6e:32:ac:a1:4b:12:ca:24:1f:57:45:f8:3e:a2:ff:
13:2c:7e:af:a0:c4:78:38:05:ad:33:2a:f2:5a:52:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A6:90:10:FF:A8:C2:AF:BF:BC:6A:D0:96:F5:9B:66:8F:80:00:A9
X509v3 Authority Key Identifier:
keyid:BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:97:08:f8:dc:04:a2:54:e5:08:1a:77:ff:a6:cc:be:cb:a7:
85:3d:b3:b0:32:06:73:78:c8:82:34:73:88:71:66:2a:76:03:
fa:6f:00:a7:8a:24:9d:21:d4:41:f2:fa:3b:f2:2d:e7:ea:93:
99:57:11:11:91:e0:a2:ee:e3:a5:08:76:65:65:99:ba:89:74:
af:48:f4:a5:09:22:83:48:6e:00:68:fa:8c:2e:3d:ef:5b:18:
ca:21:83:7f:e5:fa:24:b5:07:fa:02:8f:0f:9d:7a:40:00:c9:
69:ec:77:cb:01:9c:2f:d5:5e:75:79:99:cc:3a:bd:8f:35:dc:
e2:af:0e:c5:72:ba:ff:37:e3:53:e0:ca:fb:1f:9d:ba:55:59:
98:3e:6b:2a:93:cd:ab:57:ed:71:62:a0:5d:73:65:4c:96:f7:
62:59:3c:ac:03:28:6c:9d:d6:64:90:6d:0f:3e:96:71:57:3c:
97:31:72:92:4b:94:80:fb:40:7b:85:dd:c9:78:a5:07:82:86:
86:c2:c5:21:7e:9d:7e:50:ad:2b:59:a9:53:a0:ee:97:37:c8:
25:fb:3e:35:c7:68:f7:92:b5:7f:89:94:b6:3a:16:71:bc:e3:
5f:8a:ea:7e:a8:89:01:75:b5:db:64:44:6d:6f:c6:b6:b4:d3:
f2:47:1d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:47 2026 by rpki-client