Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
File: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft (raw, json)
Hash identifier: BdrtFM2NL50srWAP4EQFP+qRa32VydKcpSPqpQWPS7Y=
Subject key identifier: A1:85:48:7D:32:F9:C3:BF:98:56:2E:CE:37:D7:89:0B:51:BA:80:35
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 019F8757AD44942DB33B29E4B8FB8F0FD0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
Manifest number: 0708
Signing time: Wed 22 Jul 2026 01:01:37 +0000
Manifest this update: Wed 22 Jul 2026 01:01:37 +0000
Manifest next update: Thu 23 Jul 2026 01:01:37 +0000
Files and hashes: 1: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl (hash: by7vFrz2gFqVG0qWY7+FMHeIlC4N3K2FuKRPYy8c0+k=)
2: Xk5XLLpJTJ0en8K-haNjI8W7sqA.roa (hash: dyeK7boJ0LjO1L8yQnVoytvIo19PRNiRm/STwxfeu9A=)
3: _-6BMmBQ0AjWxQJhGIsBkpBk0MY.roa (hash: tFUIbxKks+dCCY65mjpFHkwOHonNu23gAu+XuHi4a8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:87:57:ad:44:94:2d:b3:3b:29:e4:b8:fb:8f:0f:d0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Jul 22 01:01:37 2026 GMT
Not After : Jul 23 01:01:37 2026 GMT
Subject: CN=a185487d32f9c3bf98562ece37d7890b51ba8035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:0f:1f:56:2a:2b:c8:e8:75:9e:62:52:cb:
d7:82:1e:15:ec:df:bd:77:3f:05:5f:8e:79:70:ae:
1d:28:57:92:3a:3d:23:1a:30:9c:4c:f6:58:66:79:
f9:7d:9f:47:a9:48:62:79:81:cc:4b:c3:1a:ba:64:
19:0f:11:e3:74:0e:dd:ef:5c:ca:bd:d9:0d:77:ea:
bc:61:81:fd:f5:eb:aa:d7:e1:56:ee:8c:7c:fb:a2:
9b:1c:3c:f1:7a:fe:f0:70:f2:93:82:c9:94:17:e0:
d3:7b:96:c9:b4:8a:cb:be:7b:47:6d:28:88:55:f6:
27:97:2f:c0:05:34:ce:d0:39:db:b5:8d:4e:fa:2c:
41:57:1e:bf:f4:87:dd:a6:ea:74:30:a8:fe:d8:9e:
61:82:b8:ac:a9:da:86:24:1c:24:f0:3d:94:d1:26:
b1:cf:58:d5:9b:fa:5a:4d:76:7e:33:2a:db:7d:67:
40:f2:6b:d5:45:0e:87:7e:46:62:55:80:4b:73:32:
79:a7:81:70:58:43:08:c1:8f:56:0f:79:83:19:d3:
29:2d:31:c4:9e:dd:a1:2c:a7:4e:97:a1:d1:f2:86:
06:74:79:bb:bc:fb:e7:d6:fa:eb:47:3e:8b:68:6f:
80:ae:15:82:2c:d5:77:4d:7e:37:7b:d8:e8:4b:33:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:85:48:7D:32:F9:C3:BF:98:56:2E:CE:37:D7:89:0B:51:BA:80:35
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:18:56:bd:a7:d9:c7:f9:3d:59:69:b9:3a:c4:73:2b:a0:9d:
eb:ed:c6:04:f9:d1:0f:1a:27:2e:65:f7:60:54:fa:35:42:a9:
50:c1:5a:51:50:e4:ba:98:8b:96:ea:cb:be:d3:0c:73:f4:e5:
e6:8d:31:99:83:8f:43:7a:55:1f:c1:8a:6c:79:bc:6a:af:e5:
40:36:3d:29:45:17:95:de:44:76:0a:da:c4:09:ec:63:8c:8f:
ed:bf:98:f4:ab:75:8d:6a:65:98:cd:e7:28:47:49:d4:b5:c8:
7b:bb:2e:8a:2c:6e:cb:7f:6c:15:0c:23:43:d6:18:23:a9:91:
19:c3:52:d1:81:bf:09:7e:19:0b:bf:5a:1b:97:7b:c5:5a:06:
42:3b:1e:af:67:4e:09:fa:8b:13:cd:77:c2:81:67:a9:02:ec:
2e:66:d5:e1:63:86:ff:ad:59:61:d7:ed:a0:ff:cb:45:4a:42:
f8:ac:a6:88:df:a0:27:1f:84:0b:58:35:06:11:31:0a:69:52:
e1:40:0f:b6:98:45:cf:4e:da:25:0e:de:c0:8e:0a:91:7f:f8:
a0:56:4c:76:80:e9:78:f3:bf:a2:76:08:c2:37:d6:5c:67:b4:
f1:f0:4e:54:d6:4a:80:48:e1:b0:07:29:05:12:52:3b:9f:9e:
02:5b:ed:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+HV61ElC2zOynkuPuPD9DaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MDMyNTFkYjY5NjkzMzYyYTkyN2UyYjEzMDQ2Nzk0NWM1
NGYwZmMwHhcNMjYwNzIyMDEwMTM3WhcNMjYwNzIzMDEwMTM3WjAzMTEwLwYDVQQD
EyhhMTg1NDg3ZDMyZjljM2JmOTg1NjJlY2UzN2Q3ODkwYjUxYmE4MDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh4PH1YqK8jodZ5iUsvXgh4V7N+9
dz8FX455cK4dKFeSOj0jGjCcTPZYZnn5fZ9HqUhieYHMS8MaumQZDxHjdA7d71zK
vdkNd+q8YYH99euq1+FW7ox8+6KbHDzxev7wcPKTgsmUF+DTe5bJtIrLvntHbSiI
VfYnly/ABTTO0DnbtY1O+ixBVx6/9Ifdpup0MKj+2J5hgrisqdqGJBwk8D2U0Sax
z1jVm/paTXZ+MyrbfWdA8mvVRQ6HfkZiVYBLczJ5p4FwWEMIwY9WD3mDGdMpLTHE
nt2hLKdOl6HR8oYGdHm7vPvn1vrrRz6LaG+ArhWCLNV3TX43e9joSzNCeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGFSH0y+cO/mFYuzjfXiQtRuoA1MB8GA1UdIwQY
MBaAFFUDJR22lpM2KpJ+KxMEZ5RcVPD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2It
M2NiYWQ1YjkwNGI1LzEvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2ItM2NiYWQ1YjkwNGI1
LzEvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRhWvafZ
x/k9WWm5OsRzK6Cd6+3GBPnRDxonLmX3YFT6NUKpUMFaUVDkupiLlurLvtMMc/Tl
5o0xmYOPQ3pVH8GKbHm8aq/lQDY9KUUXld5EdgraxAnsY4yP7b+Y9Kt1jWplmM3n
KEdJ1LXIe7suiixuy39sFQwjQ9YYI6mRGcNS0YG/CX4ZC79aG5d7xVoGQjser2dO
CfqLE813woFnqQLsLmbV4WOG/61ZYdftoP/LRUpC+KymiN+gJx+EC1g1BhExCmlS
4UAPtphFz07aJQ7ewI4KkX/4oFZMdoDpePO/onYIwjfWXGe08fBOVNZKgEjhsAcp
BRJSO5+eAlvtvA==
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:09:38 2026 by rpki-client