Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
File: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft (raw, json)
Hash identifier: 9tdLshdIbC2kt+ZX1/hRa+QVZbQgbvsAe6V0nth/gLE=
Subject key identifier: 40:3E:2E:6B:A3:D9:E3:DE:78:BC:45:5C:B0:EF:6A:47:8B:26:89:73
Authority key identifier: BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
Certificate issuer: /CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Certificate serial: 019D3909B6592A0AA9669108E09D2BB82450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
Manifest number: 17E6
Signing time: Sun 29 Mar 2026 10:00:30 +0000
Manifest this update: Sun 29 Mar 2026 10:00:30 +0000
Manifest next update: Mon 30 Mar 2026 10:00:30 +0000
Files and hashes: 1: 5supAJphl0r8bbob-Kiwa2s9Q0E.roa (hash: 3BmLyzQOS+6Kk+ZKBpt8B4neQYPPKen9M6XG2H5jhLc=)
2: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl (hash: grLeK7AfPXSxqIoszbEtvT1dl6ENz75VlEVqJlv3/CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b6:59:2a:0a:a9:66:91:08:e0:9d:2b:b8:24:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Validity
Not Before: Mar 29 10:00:30 2026 GMT
Not After : Mar 30 10:00:30 2026 GMT
Subject: CN=403e2e6ba3d9e3de78bc455cb0ef6a478b268973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:f7:fd:fa:32:1d:a4:03:e5:f7:df:ae:55:
e5:30:df:a3:8f:0b:de:08:6c:51:10:d0:f1:43:1f:
ad:5e:65:f8:67:cd:38:ee:d9:a7:80:43:ff:49:78:
8e:00:24:c4:70:f7:e9:c6:21:ca:d8:6c:6b:e0:f2:
68:e9:3a:d3:d5:20:2f:07:d3:a8:d8:a0:18:be:62:
2d:47:2e:66:0e:3d:33:8a:fd:27:9b:4f:b1:60:6d:
77:05:d5:99:87:be:ba:25:19:28:49:4c:fe:6b:a7:
f9:f9:34:ad:bf:8c:51:e1:84:e1:c9:06:84:7f:d1:
03:d5:38:14:d2:6d:88:7c:2e:8a:9c:fa:b6:b1:c7:
2a:c4:0b:f0:6f:5d:9d:00:f3:46:b1:3f:a3:56:27:
f1:eb:9d:dd:c6:76:e5:fa:53:18:8f:f4:e5:53:a5:
5c:31:07:8c:ac:fc:ec:42:41:a3:19:3f:cb:57:30:
cb:d5:13:63:9c:02:1e:1d:15:86:8c:66:d5:32:9a:
d3:51:31:79:21:20:a8:e6:17:c8:2f:e0:6b:14:ae:
28:bb:5d:40:21:69:65:da:83:b6:1a:5d:b4:f2:0a:
35:05:8a:e1:7e:0d:d5:d8:dc:cd:47:bb:d4:8a:2c:
aa:5e:0e:59:c5:55:3f:3c:65:0e:4f:d9:54:40:c5:
1b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3E:2E:6B:A3:D9:E3:DE:78:BC:45:5C:B0:EF:6A:47:8B:26:89:73
X509v3 Authority Key Identifier:
keyid:BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c9:8c:b5:90:24:d6:22:60:0b:62:82:3a:fa:56:38:bf:2e:
6a:bf:41:61:75:bf:ac:4d:ca:fe:76:14:65:58:f3:c3:4f:11:
ad:94:8d:d0:81:07:9d:ec:4d:8e:97:1e:fb:59:6c:a3:d0:31:
99:52:25:b1:5f:f2:f9:84:37:47:a3:e0:42:36:7b:3f:2f:eb:
5e:2a:ee:18:36:f8:7f:67:2a:82:f2:a4:5d:80:6a:31:93:75:
2e:55:e4:3a:c5:9f:7b:fb:63:23:ea:44:4f:fc:28:08:32:f8:
f3:6c:a2:ee:ca:6d:94:c5:78:c1:cf:10:40:84:23:ee:9c:40:
8d:72:bc:ae:44:39:76:29:db:c9:69:bd:78:a8:a7:49:aa:8c:
0f:55:93:42:99:10:c5:77:12:2b:66:e9:7e:63:77:a4:a7:2d:
32:19:2d:cd:14:05:44:4b:44:90:36:6f:f7:c6:f0:0d:dc:24:
39:2d:ee:02:2a:a8:ca:de:fb:c7:42:c6:e6:2b:9f:ec:c6:8d:
02:3f:d8:ba:bc:36:27:dd:04:34:50:ca:27:25:c8:6d:f0:c4:
f2:71:32:be:8f:b3:7f:0a:5a:68:b0:2e:71:72:96:30:48:43:
68:b7:47:61:06:f5:d6:95:01:6a:65:34:80:d4:4f:30:3e:93:
e4:95:b7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:24 2026 by rpki-client