Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
File: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft (raw, json)
Hash identifier: cKeCpeWbHwobccPFgasxlLItCr/c9JHP5/fOPZqbJ2U=
Subject key identifier: 7C:62:5A:B0:23:29:C3:4B:A2:60:F7:6D:39:FA:A7:29:62:67:82:AD
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 01A17BBB1FA8D0B9B49AAC186068C709683C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
Manifest number: 080D
Signing time: Tue 27 Oct 2026 05:00:23 +0000
Manifest this update: Tue 27 Oct 2026 05:00:23 +0000
Manifest next update: Wed 28 Oct 2026 05:00:23 +0000
Files and hashes: 1: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl (hash: S0Zf5P4NpyyJ4dCX8RD+aWviGD0EB/eWsCoKZVkktmQ=)
2: XMuew5EBmV8Kanlpc99YZsjTFtY.roa (hash: OLPUwCo5Dzk8l66Gu9CWVKCHZAkW6jtTxV6Sfd8Pz5k=)
3: Xk5XLLpJTJ0en8K-haNjI8W7sqA.roa (hash: dyeK7boJ0LjO1L8yQnVoytvIo19PRNiRm/STwxfeu9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:1f:a8:d0:b9:b4:9a:ac:18:60:68:c7:09:68:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Oct 27 05:00:23 2026 GMT
Not After : Oct 28 05:00:23 2026 GMT
Subject: CN=7c625ab02329c34ba260f76d39faa729626782ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:22:b5:4a:06:4d:2d:20:f2:ee:c7:05:7d:
eb:34:f5:73:3d:1f:c4:38:6e:d8:7c:69:26:9f:5c:
72:12:c8:47:6b:7f:79:fa:ba:97:45:ee:df:ec:d3:
eb:47:47:99:82:6c:54:6b:f5:99:55:8a:49:14:91:
f8:0e:a4:70:20:c0:6c:70:05:c3:41:77:29:68:e6:
f7:a4:21:e4:7c:8d:00:b4:c0:b8:40:10:0e:b4:2c:
ec:66:e2:63:b5:80:f4:e1:6b:dc:bd:2b:12:42:67:
58:9d:b4:d9:d4:6f:0d:87:a0:67:64:7f:39:dc:d8:
b0:84:a8:13:ab:80:54:b0:f1:87:ea:ec:b8:ba:ae:
6e:9a:20:31:20:16:05:77:7e:9e:8c:06:e7:3a:3d:
1c:87:d6:4e:51:0a:03:a6:59:92:66:76:3c:c8:e8:
3a:43:95:94:1c:ab:4b:4f:d2:e2:f0:40:72:49:70:
09:4d:e0:02:7f:98:45:6c:37:cb:c1:e4:cd:d3:81:
5d:a6:cd:0d:72:8a:cb:f4:29:4a:d7:5b:07:39:3c:
a6:f1:ab:fc:b2:e0:28:f9:b5:09:fa:72:d9:49:cf:
76:2a:d4:bb:94:a8:3a:96:53:3c:b0:2c:12:ec:70:
e6:ec:ff:1f:4a:cb:e3:76:3b:9b:cc:eb:10:2b:2c:
d1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:62:5A:B0:23:29:C3:4B:A2:60:F7:6D:39:FA:A7:29:62:67:82:AD
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d4:fd:90:ec:69:3f:e3:de:31:20:5c:77:a4:00:f9:7c:7b:
2e:7b:b5:80:ee:b4:29:87:52:a5:f3:53:ac:81:7c:3d:b3:29:
d5:5e:84:4b:7f:57:cb:d5:09:a3:95:f3:51:aa:ac:ad:29:a8:
ac:20:77:d4:56:88:4d:dc:b4:ff:3f:3b:f4:3c:e5:db:11:8c:
9c:da:ed:67:a8:ad:7d:4f:25:63:bb:a3:36:1e:7e:49:71:5e:
cf:58:78:83:a0:e9:54:71:37:a4:8a:c1:07:9e:ff:e5:d3:50:
13:e2:a2:c2:13:e8:ea:29:1c:7e:61:70:bb:fc:07:85:0a:ce:
80:93:ba:31:0e:bc:e9:d2:9e:04:8c:a5:d5:86:71:0a:84:27:
af:47:fe:46:8e:c4:6d:8a:3e:37:66:b8:e7:0e:a1:45:41:67:
5b:72:ee:7e:01:55:bd:61:a4:65:57:d9:e1:3b:76:2f:a4:be:
2b:21:fe:b0:91:10:86:ef:dc:e9:74:c2:e1:64:02:d9:5e:f0:
17:06:07:69:e7:d0:00:5f:4c:31:27:74:1a:fd:98:a4:ce:4a:
d4:58:0a:c8:59:4b:ed:cc:2d:b4:e3:b5:4f:b0:a8:4e:89:8a:
19:f1:bb:5b:8d:0c:cc:6a:24:84:d7:bf:cf:21:b1:9a:a3:1b:
f3:56:d8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:49:55 2026 by rpki-client