Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
File: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft (raw, json)
Hash identifier: QuTFj7yk4a1Oi4ZIT+WxUItrs0ZAP2D+VQiZJCoL5Xs=
Subject key identifier: 58:DC:7A:AA:8D:DC:E3:D3:26:C4:9F:4E:8A:89:31:2A:72:B9:5B:0E
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 019D38D3178930023980B14860F38D028B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
Manifest number: 05D5
Signing time: Sun 29 Mar 2026 09:00:51 +0000
Manifest this update: Sun 29 Mar 2026 09:00:51 +0000
Manifest next update: Mon 30 Mar 2026 09:00:51 +0000
Files and hashes: 1: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl (hash: Y8qvQQOwV35Z32YyEVcF4XnRqQ/0xKyLocXtFls+OaY=)
2: Wjs_phSFXCf5P7VyIC49aTpiAXE.roa (hash: lvpNQeyfYNhi6y1BNKSvPAqUckUzrotwMitNw+e8iYU=)
3: Xk5XLLpJTJ0en8K-haNjI8W7sqA.roa (hash: dyeK7boJ0LjO1L8yQnVoytvIo19PRNiRm/STwxfeu9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:17:89:30:02:39:80:b1:48:60:f3:8d:02:8b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Mar 29 09:00:51 2026 GMT
Not After : Mar 30 09:00:51 2026 GMT
Subject: CN=58dc7aaa8ddce3d326c49f4e8a89312a72b95b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:77:86:f9:88:95:74:5d:da:42:5c:cb:ac:
66:1a:fd:0b:36:9b:c6:25:72:77:2c:63:5f:ed:0c:
4b:b6:90:9a:72:63:43:b3:c0:77:29:62:52:a5:1f:
99:0d:10:1f:b7:14:9c:cb:43:13:70:98:67:a8:1f:
cb:ba:36:6d:30:79:b2:1d:be:92:92:72:cd:fb:69:
63:18:79:93:7b:45:f2:23:f5:8e:45:96:c7:25:3b:
6c:ae:d6:14:e4:ef:ca:45:81:0f:55:e5:38:11:6c:
37:e7:4f:c9:01:5a:26:8d:f7:62:bb:48:87:50:db:
4e:80:ee:03:bc:e4:f8:66:2c:17:98:73:b3:10:04:
55:fd:64:c1:73:93:3a:94:a3:38:36:1c:1e:cc:d2:
07:39:6d:0b:5f:eb:10:b8:c0:98:75:ab:56:58:8c:
00:52:14:8c:df:c5:49:6a:1c:32:81:fe:58:4b:a3:
cc:d8:97:16:8b:c7:dc:0b:34:ea:97:31:53:28:4c:
dd:c4:a6:23:09:fc:7b:e7:1f:ed:e7:a8:24:8c:b8:
4e:02:ca:31:ff:31:2d:3a:64:d5:6b:95:a9:91:a1:
83:85:58:a0:26:d1:c4:bb:01:7d:ce:2d:0f:7b:e6:
43:e7:be:56:fc:54:09:dd:db:62:70:5c:c5:e8:54:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DC:7A:AA:8D:DC:E3:D3:26:C4:9F:4E:8A:89:31:2A:72:B9:5B:0E
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:72:d5:6a:b8:13:d0:ea:38:af:74:48:a9:38:82:58:8a:be:
45:6b:5b:da:ec:3f:8b:75:f4:cb:50:0a:40:52:df:71:03:0b:
7e:c0:f5:5b:d3:40:15:c9:fa:64:88:e9:75:d2:a0:0c:31:4e:
f8:ef:fe:fc:b8:10:49:3e:e0:39:c2:40:c5:be:9c:70:04:58:
c2:7e:77:fb:50:b3:86:54:f6:96:de:aa:8d:6d:83:01:46:b8:
eb:9b:39:b5:2e:ca:79:4d:ac:59:9e:10:a0:7a:f9:45:45:f8:
03:87:e6:81:5f:63:9c:4d:5a:61:31:88:97:75:96:d5:fe:61:
aa:5c:ca:83:cb:a9:4e:cd:00:0d:62:fd:ca:7b:da:b4:4d:a3:
9b:a1:41:c0:a2:c1:5c:50:07:7e:30:72:c8:23:7a:89:23:75:
5f:f8:26:c0:dc:a7:b2:7c:86:6b:e2:5a:96:79:0f:04:3d:8d:
24:05:b1:53:12:94:1a:cb:5b:8f:92:82:1f:c5:44:ca:3b:3f:
e6:ba:b0:89:a3:41:a2:24:34:ac:db:b7:d4:83:82:86:75:ee:
8f:34:72:76:e2:eb:88:31:4e:86:b6:0b:0c:f6:49:84:b3:88:
bf:e0:17:93:1d:35:c2:f1:4a:2e:c8:22:56:3c:e8:28:ca:14:
38:52:4b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:20 2026 by rpki-client