Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
File: vqse58Ta0p0SfVZdG5N5RlwoiTc.mft (raw, json)
Hash identifier: lgkOPqZVj+YpFFQ0p7+PWAxlOLUmo8leIz0LSdYTnd4=
Subject key identifier: AA:60:D2:4D:40:1A:3E:46:CD:BD:FB:11:5C:DA:FA:19:BD:43:05:0E
Authority key identifier: BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
Certificate issuer: /CN=beab1ee7c4dad29d127d565d1b9379465c288937
Certificate serial: 019D39AF6A405DCA1D64E956E7639C084999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 13:01:30 +0000
Manifest this update: Sun 29 Mar 2026 13:01:30 +0000
Manifest next update: Mon 30 Mar 2026 13:01:30 +0000
Files and hashes: 1: 6V9ylZM4ScnVCgD7KK6ET2PRqIU.roa (hash: 28gc2ZI73zeIbD15Qm/WZMAQ+uvvtF2FWZ9P2SGE4vo=)
2: vqse58Ta0p0SfVZdG5N5RlwoiTc.crl (hash: sck0Sb7pqPmpG+jeQxE3wpwaHbDyVIApwV4QKS4Cy6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:6a:40:5d:ca:1d:64:e9:56:e7:63:9c:08:49:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beab1ee7c4dad29d127d565d1b9379465c288937
Validity
Not Before: Mar 29 13:01:30 2026 GMT
Not After : Mar 30 13:01:30 2026 GMT
Subject: CN=aa60d24d401a3e46cdbdfb115cdafa19bd43050e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:af:bf:45:c4:c1:5d:63:95:9b:c3:1b:6e:64:
4a:b9:c1:f7:fc:3f:88:2b:3b:82:9f:80:a7:0a:91:
df:a7:b4:be:47:16:e7:f2:f4:30:2a:e3:3a:e2:2f:
e5:7a:80:10:53:65:ad:ff:0d:d3:b4:48:ef:95:6c:
73:d0:a1:14:78:5c:01:62:dc:db:2c:19:04:7a:e0:
9a:51:95:b6:99:9c:42:1d:3b:34:af:ee:0d:a1:f3:
32:98:32:1d:d8:bb:c8:94:d4:80:c1:cf:b8:fa:74:
7e:2a:0a:1a:ad:ca:84:6d:0d:3c:97:3b:6a:63:85:
37:bc:f5:72:f8:1d:ff:9f:1a:48:58:e6:5c:b0:8c:
80:8c:0f:6c:9c:32:a4:02:ef:35:74:ff:c8:40:0b:
48:4c:8d:8b:b6:83:d5:50:96:5e:f0:2c:08:e0:aa:
68:ae:f7:1c:20:66:07:4d:7f:0a:ca:51:d8:1d:0e:
bd:94:07:cd:2f:db:ec:f1:51:63:cb:1a:18:79:a2:
a8:0e:02:1a:08:3a:ab:fa:69:5c:62:c5:51:48:d4:
d5:e8:b4:e7:1b:dc:a4:84:76:61:b3:0e:f5:10:a6:
39:02:15:50:53:53:6b:ad:8c:67:e2:97:ae:55:1b:
62:c5:12:a2:ee:01:83:f6:00:7f:e4:4f:1b:dd:94:
77:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:60:D2:4D:40:1A:3E:46:CD:BD:FB:11:5C:DA:FA:19:BD:43:05:0E
X509v3 Authority Key Identifier:
keyid:BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cc:cf:9c:51:62:e1:61:41:f7:4a:ba:e8:3c:85:26:e4:41:
ad:8c:92:fb:35:d0:16:37:7e:42:03:4c:0f:f5:5a:42:98:5d:
3e:4c:f1:19:14:80:4e:15:f0:30:22:07:65:2e:68:54:19:c1:
94:f0:0a:92:1e:5c:12:2a:f7:d3:63:ea:81:ba:49:fa:b7:90:
f5:af:b7:1b:5e:a4:5e:03:79:95:b0:36:2f:04:6f:1f:fd:8c:
86:61:b9:b4:06:c2:7c:f1:41:81:57:49:a7:cb:bd:4d:d4:4a:
ae:15:fa:ae:d8:ba:a9:6f:b0:17:19:16:eb:a4:fd:f0:7a:ea:
4b:e3:4e:7a:67:04:fc:1d:05:32:76:c1:01:b3:1c:64:1d:43:
5c:a5:66:78:96:16:d3:0f:df:76:aa:ff:c3:55:1d:e9:17:f7:
87:45:17:61:67:9b:f2:68:d3:3b:50:4f:f2:1b:cf:a4:86:aa:
7c:78:ba:44:7d:95:bc:95:39:60:72:ac:2b:42:de:32:a8:af:
89:6a:a1:90:be:70:c3:0f:f2:fe:11:a0:1a:34:b6:7b:ac:65:
d5:99:ce:4c:67:eb:c2:34:2a:65:63:99:b9:18:1f:20:13:f9:
d2:0d:fe:5c:ec:a9:ca:bd:e1:99:16:3e:51:e3:a7:0e:0f:61:
91:17:6f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:58 2026 by rpki-client