Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
File: VqAi3rCSj10aCl-wDpbK1MfZEdg.mft (raw, json)
Hash identifier: 3yzuhbnK39iaAGn7jNJXfozzGPc/mmqLDXhVZSUZ8sU=
Subject key identifier: 47:57:04:2A:65:E4:65:40:AC:4F:16:EF:8C:8D:A7:2C:CC:F0:1B:82
Authority key identifier: 56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8
Certificate issuer: /CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
Certificate serial: 019D382E1EB11BD831FC05286EFDF13553FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:39 +0000
Manifest this update: Sun 29 Mar 2026 06:00:39 +0000
Manifest next update: Mon 30 Mar 2026 06:00:39 +0000
Files and hashes: 1: VqAi3rCSj10aCl-wDpbK1MfZEdg.crl (hash: op1fQXqINONWKmGyvhVx54+AySbQLmmVYWWMdekEazQ=)
2: suOB_ZQoCS-jB4-4M7W0CkzCA10.roa (hash: fu8wltWFAdaXQHJ+Qv7XTp7V+UFU1J7Zj9suudIqJF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:1e:b1:1b:d8:31:fc:05:28:6e:fd:f1:35:53:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
Validity
Not Before: Mar 29 06:00:39 2026 GMT
Not After : Mar 30 06:00:39 2026 GMT
Subject: CN=4757042a65e46540ac4f16ef8c8da72cccf01b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:c9:8f:ec:0d:f4:7b:67:9b:31:4c:36:26:
6a:70:9c:d1:72:50:08:85:54:02:13:c1:a7:64:9d:
95:1f:4b:d6:8e:35:03:6b:1e:39:dc:32:4a:3a:7e:
33:5b:ce:01:dd:f1:c1:0f:c3:0e:f8:e3:17:9a:39:
7e:b4:02:c3:21:da:51:a0:0d:98:87:1b:45:c9:cc:
62:33:08:73:bc:cb:c3:19:b3:d7:c7:0b:df:b3:53:
bb:c7:40:ae:8e:87:56:f1:1e:c2:76:95:3b:b0:2b:
24:d4:21:7d:79:68:06:6f:d1:36:27:5a:01:df:3a:
a3:80:71:7a:8c:02:b8:d6:88:aa:f1:42:c1:cb:46:
5b:ae:bd:1d:2a:68:08:2b:a3:85:ee:fe:2c:c4:1e:
ef:71:b3:47:b0:b7:d8:f9:0f:7c:50:7b:56:f0:43:
d0:5f:0e:66:7f:f1:b1:2a:6e:ac:2e:46:a2:6a:01:
40:f1:e0:be:52:5f:6e:4e:95:20:30:78:af:ef:75:
5f:79:61:08:af:82:9f:99:ba:74:b1:ee:d2:09:ea:
a6:9e:eb:d5:e8:b3:a1:67:d6:6a:d5:5a:ff:18:cb:
8e:30:33:d8:60:bf:0c:9f:b3:fb:8b:1c:ff:b1:23:
d7:5d:c3:78:6a:d9:17:3d:0a:71:03:d4:78:85:31:
03:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:57:04:2A:65:E4:65:40:AC:4F:16:EF:8C:8D:A7:2C:CC:F0:1B:82
X509v3 Authority Key Identifier:
keyid:56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:fe:8e:18:ad:47:6a:cf:66:5e:0a:ba:8b:60:ad:c2:7f:dc:
f2:39:6f:3e:52:61:d1:cd:17:90:ef:10:7b:6c:b8:19:f5:50:
99:ad:4d:bb:69:47:ac:c2:2d:f2:9a:e0:cf:0b:f8:a8:d9:9c:
c0:08:50:eb:04:47:e6:97:2d:a5:c3:03:6a:15:69:57:de:70:
74:9c:5c:fa:eb:76:29:38:f8:f8:6b:49:a1:9b:bc:9a:f0:cf:
3d:f0:78:89:1b:4d:c7:a6:3b:f5:1c:95:50:50:75:60:eb:a7:
0c:c0:0e:cd:f9:72:c1:7f:5c:46:6a:15:8b:e4:62:4b:35:b3:
ed:66:43:4d:dd:ac:d0:91:68:34:6d:e2:98:47:de:b0:30:ea:
c7:04:04:79:8d:6e:7a:b0:35:c5:57:a9:3d:75:fa:b2:32:9a:
21:93:b9:fb:9a:18:2d:2f:bc:75:16:8d:e2:3f:2b:90:1b:c1:
b2:81:39:99:27:5a:de:22:a5:60:4b:59:72:4d:c3:b3:4a:ea:
0f:01:39:f8:c7:ba:10:5f:ac:c8:ea:ac:7f:5c:b9:e4:13:b0:
56:cc:9b:3f:7b:3a:e4:a6:c6:3a:74:b6:80:4f:d9:57:27:bb:
79:10:4e:6a:b0:0f:19:5c:a7:14:aa:b7:7e:46:3b:05:5a:c7:
20:30:95:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:38 2026 by rpki-client