Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
File: vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft (raw, json)
Hash identifier: GzTFnXCb9sDEA3ZFYFxdUI5eiYx41/1xXG5QXjnIZLU=
Subject key identifier: 33:E3:95:E5:AB:D8:E5:AF:11:C0:66:85:84:6D:67:94:E3:66:54:0C
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial: 019D382E0A3FD167FD93D7ECB97711643CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
Manifest number: 10CF
Signing time: Sun 29 Mar 2026 06:00:34 +0000
Manifest this update: Sun 29 Mar 2026 06:00:34 +0000
Manifest next update: Mon 30 Mar 2026 06:00:34 +0000
Files and hashes: 1: SCfxhTRg7vuqifF8bQRKgajG91E.roa (hash: wp0+S1qlwyLRk1HvINrBgxEXYo/XnKOOpIUSgnFHiUs=)
2: vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl (hash: SQ6ZvhzPLDrO+EsQq/MmkWPku8RA7CVyQjlx4BVzdVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0a:3f:d1:67:fd:93:d7:ec:b9:77:11:64:3c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Validity
Not Before: Mar 29 06:00:34 2026 GMT
Not After : Mar 30 06:00:34 2026 GMT
Subject: CN=33e395e5abd8e5af11c06685846d6794e366540c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cf:fa:ba:07:29:85:e5:09:9e:57:c2:74:72:
c8:43:73:d9:d9:d0:85:af:3d:5d:7c:1f:13:42:de:
df:2f:66:14:28:78:54:d8:a7:1e:cc:ec:8e:44:36:
1f:96:c1:28:0a:44:49:de:ac:d8:31:7e:e1:cc:4d:
7c:e2:f1:d2:d5:f3:70:71:bf:4d:f6:2f:d7:0d:e4:
20:cd:d5:e5:06:ad:eb:54:5e:4d:73:bc:6d:a3:f2:
3d:39:dc:5d:c0:d8:08:58:35:42:28:8a:3e:1e:32:
45:43:2a:03:f4:1e:2a:da:34:b9:21:37:7f:ef:42:
4b:00:2f:b5:09:04:a0:21:64:83:4e:9f:06:10:fb:
9f:a5:29:1c:4e:98:57:b3:5f:9a:c1:03:68:d9:19:
82:cd:d0:96:29:9d:03:fb:a0:9b:a9:e3:38:7f:2a:
bc:09:ae:ea:f9:21:71:3f:2d:ae:59:1d:53:87:ef:
af:0b:48:6b:aa:7a:a3:65:78:7a:6a:1f:b9:a3:44:
75:db:4a:0b:57:46:22:65:c1:87:6b:11:5e:68:a3:
4d:29:88:30:9a:1f:e8:9f:42:63:57:42:1c:e0:8b:
c3:45:cb:ff:e9:17:5f:0b:b1:27:76:98:51:30:b6:
ca:27:c4:31:6d:5b:69:d1:9e:b6:c4:fb:a2:57:d3:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E3:95:E5:AB:D8:E5:AF:11:C0:66:85:84:6D:67:94:E3:66:54:0C
X509v3 Authority Key Identifier:
keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5f:8b:33:97:e5:26:b5:32:70:39:71:57:ea:e8:f3:fd:2a:
98:26:83:98:d8:34:1a:41:c1:10:fd:db:62:20:c7:d7:92:ab:
2d:d5:07:54:af:16:cd:58:c6:bb:2e:9d:98:87:01:67:9f:2c:
74:f2:19:65:80:56:0e:10:f5:13:bf:af:85:5f:ba:2a:e3:5e:
e6:bc:c4:94:83:ea:7e:91:4f:9a:13:70:fd:44:bc:25:0d:d8:
46:ec:6e:08:62:57:43:09:28:88:b3:d1:01:c6:59:f8:d9:f0:
3d:ea:0e:95:a0:cd:c1:fe:62:79:48:e8:c0:b2:cf:ca:f7:70:
e6:53:61:46:89:98:14:ab:ed:44:10:19:71:9e:70:07:94:7a:
39:f1:0d:ec:5f:93:4a:a8:bd:97:bc:d9:53:f3:7d:9a:a5:81:
8a:ba:03:a7:54:49:a3:72:51:dd:f5:e9:ed:bd:cc:eb:30:8b:
d0:92:23:94:f6:d2:25:22:d1:a8:02:7a:d6:de:2d:dd:8a:96:
13:eb:f7:65:c2:c8:7d:e5:b9:a3:cb:86:ec:a7:67:dd:79:b2:
3f:6c:ed:6f:46:2e:22:45:57:64:6d:79:1e:46:9f:52:80:5e:
55:1b:79:20:ec:39:72:0e:dd:92:ee:94:65:87:69:4e:b2:dd:
67:d9:a7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:15 2026 by rpki-client