Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
File: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json)
Hash identifier: wSeQD0A+e8CDJBynbr1hdFN+B8gE4b9TnaIIKXbHy8U=
Subject key identifier: 76:1D:34:F7:FB:02:8D:90:1D:46:BE:4A:A7:14:EC:D4:1C:1B:62:24
Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
Certificate issuer: /CN=bea7769343c691f675bb369253cb3f6fc304b01f
Certificate serial: 019D38D2C8EA4938F317F81687CE232E81D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
Manifest number: 0C32
Signing time: Sun 29 Mar 2026 09:00:31 +0000
Manifest this update: Sun 29 Mar 2026 09:00:31 +0000
Manifest next update: Mon 30 Mar 2026 09:00:31 +0000
Files and hashes: 1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: fW/2wgFrFY40OoyTm7y2Iz7MY+U4O8Aacvqp92meHqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c8:ea:49:38:f3:17:f8:16:87:ce:23:2e:81:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f
Validity
Not Before: Mar 29 09:00:31 2026 GMT
Not After : Mar 30 09:00:31 2026 GMT
Subject: CN=761d34f7fb028d901d46be4aa714ecd41c1b6224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:6a:08:22:eb:0f:67:16:ed:74:aa:3f:05:
73:e2:3d:4b:9a:e0:f4:00:06:f2:44:64:32:03:8c:
0f:f4:9a:f7:54:22:ee:93:d3:a6:a9:d3:18:d7:0f:
45:79:d2:c7:95:ac:6c:4b:0b:55:c5:a6:a6:f1:05:
ed:a3:35:e7:2f:f5:00:7b:e6:36:32:8d:3c:e2:17:
27:8a:36:f0:e1:6f:5f:20:a4:b7:7d:c1:91:0b:2d:
8e:f8:02:d0:96:58:27:a9:51:71:23:75:a9:ba:00:
91:45:4d:d6:46:d6:f1:1b:fd:55:c7:35:ea:e2:ea:
4a:c6:88:cc:63:85:17:3c:5f:f3:53:31:f6:5f:cd:
c5:a2:91:70:ac:f1:fe:e6:e8:8c:70:1d:7c:9a:31:
9e:74:c8:00:4a:bf:95:72:61:74:20:da:5c:42:c2:
de:41:74:81:16:88:59:ea:c6:0d:6c:17:d4:63:27:
a3:74:a6:d0:8a:5d:9c:35:63:b7:76:ba:de:a7:59:
90:3d:eb:23:7b:85:0c:cc:9c:d4:b1:57:93:12:37:
39:f8:03:97:d0:b5:03:35:a2:eb:89:53:4a:37:1e:
94:92:8d:25:4b:0e:d7:d1:ee:55:e9:08:71:44:ad:
00:ba:b8:40:89:62:ab:3c:60:3f:38:48:33:56:40:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1D:34:F7:FB:02:8D:90:1D:46:BE:4A:A7:14:EC:D4:1C:1B:62:24
X509v3 Authority Key Identifier:
keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:4e:59:04:8d:45:0a:9b:6c:c4:99:24:e1:79:37:11:d8:a6:
8e:29:6a:7c:a8:ea:66:52:d3:e2:a5:b0:d3:b1:07:20:b5:52:
ea:89:15:63:b7:d5:22:f7:fa:5c:86:7c:87:49:bd:55:a7:8c:
6b:f6:40:0a:30:65:b6:41:83:2a:b6:a7:9f:8b:7c:ef:80:b4:
44:6b:14:8e:1c:be:02:35:17:d6:7d:69:6f:72:6a:8c:9e:c0:
e3:f9:22:90:8c:8e:89:94:9a:7d:54:47:32:c3:18:5c:b3:c6:
3a:4b:f2:0e:a2:3c:8e:a3:7c:3d:a6:64:05:ad:63:74:aa:df:
fe:35:b7:04:85:71:16:ca:0e:3a:e9:0b:42:36:c4:7a:fc:72:
45:ae:44:2f:9b:7b:b8:f6:3a:7b:ab:bd:aa:c6:70:a4:31:01:
7a:df:95:9a:34:0d:9d:a6:53:be:7f:44:6e:5d:45:8f:d3:3c:
7a:10:11:56:e9:f2:8a:e1:5b:6c:86:00:0c:47:a6:35:20:6e:
d8:e2:a3:21:c5:fc:9f:b7:7e:fc:00:03:53:6b:c7:b0:ca:a3:
26:a1:18:3a:1c:9a:5f:19:71:4f:cc:ee:69:cd:99:12:68:c4:
d9:fc:23:80:4a:8b:04:fb:94:e8:09:50:c8:70:18:c4:48:a3:
ba:bc:c6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:01 2026 by rpki-client