Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
File: vqbKA6jBNc7q4jLJN8HuC6uH54I.mft (raw, json)
Hash identifier: N7HTnx2O7Slq7h/irmFrhCmIAwObA8oROz0bD1UgEe4=
Subject key identifier: F9:87:58:3D:1D:4A:E4:2B:F6:B5:A5:08:99:3A:8A:31:F6:83:6D:27
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Certificate issuer: /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial: 01A16EA4E20E45B71222AAD544A7DC50AB10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
Manifest number: 12DA
Signing time: Sat 24 Oct 2026 16:01:01 +0000
Manifest this update: Sat 24 Oct 2026 16:01:01 +0000
Manifest next update: Sun 25 Oct 2026 16:01:01 +0000
Files and hashes: 1: DK-XBDjvEUwNxsBmzqo8J9rquEU.roa (hash: r9pghvHN2qAAy+qaZ1juJScZuaWtFiuLGSgGufvS8U0=)
2: RHbtZEqS9voRzD3Cx6qusZzVcjk.roa (hash: Ee6+Bb2Hz6FnUnTIFNwJzEYwDsvhHHrdj4/evTKgHy8=)
3: vqbKA6jBNc7q4jLJN8HuC6uH54I.crl (hash: W5c3YniUhW5C0/zweOn/olWRvlGMRsK1IOcDWTuoIP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:a4:e2:0e:45:b7:12:22:aa:d5:44:a7:dc:50:ab:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Validity
Not Before: Oct 24 16:01:01 2026 GMT
Not After : Oct 25 16:01:01 2026 GMT
Subject: CN=f987583d1d4ae42bf6b5a508993a8a31f6836d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7b:d1:21:97:e3:36:23:78:a5:88:97:df:6f:
69:de:56:73:ff:95:2b:a1:2d:c8:5d:87:d7:4b:74:
d1:b9:57:0e:11:8b:aa:f3:40:0f:c6:72:69:59:8e:
29:4e:65:37:46:b3:56:f3:38:63:cc:6b:a8:8c:59:
1e:31:95:f1:ed:ac:e7:7e:15:47:57:2b:82:08:b1:
31:3b:7f:65:ad:d8:04:40:12:9e:99:ff:78:fe:dd:
d6:d4:4b:66:a4:4f:81:9d:6e:b7:c9:df:b9:7d:f4:
cb:ea:d2:7b:ff:3b:a3:c8:21:c0:0c:9a:0e:97:58:
7c:0a:f4:d9:7a:92:90:21:63:39:61:ac:39:08:2c:
54:91:b4:ec:67:6c:8b:d9:ee:b7:f5:b9:8f:6b:df:
48:57:39:c8:47:ac:21:31:f2:48:55:6f:7e:f3:e7:
b4:fc:31:01:34:bc:f3:0c:58:bb:2b:39:43:44:d0:
4d:bc:31:8d:ac:4f:25:40:31:0e:c7:3d:7f:fc:26:
4b:16:b5:f8:19:bb:44:76:bd:a6:65:37:bf:a0:6f:
4e:5b:40:70:bd:b7:e8:7c:2b:65:f2:7d:aa:26:30:
ff:cb:7d:d5:97:0c:ef:a0:60:3c:31:52:5f:d9:e1:
a5:12:c3:fc:20:fe:0b:37:f3:4f:52:e0:04:1b:6d:
50:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:87:58:3D:1D:4A:E4:2B:F6:B5:A5:08:99:3A:8A:31:F6:83:6D:27
X509v3 Authority Key Identifier:
keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:89:71:8d:d3:c7:df:fc:69:a8:66:d4:d7:8f:98:5d:22:83:
29:18:3b:5f:27:8f:71:82:6b:ee:c0:3a:67:2c:d9:75:fd:00:
fa:7c:07:99:a5:b6:49:e8:54:42:17:90:68:07:36:01:52:30:
2e:1f:7e:50:5d:8d:9a:3c:f1:6e:70:5a:31:b6:0d:fa:77:60:
6b:3c:c4:3f:5a:ec:ea:e0:03:d7:da:69:9d:22:4b:80:9e:94:
dc:b3:90:ac:91:a9:d0:db:98:14:89:bb:1f:c7:ee:0a:a3:6e:
39:c7:bb:69:4f:ac:02:66:9f:31:22:18:20:dc:0e:41:81:95:
6f:8a:05:9c:fb:ce:b8:84:f0:39:80:96:39:28:bf:81:ef:8b:
77:ad:06:db:c5:10:1d:85:0b:ca:aa:45:e8:57:fc:9c:0c:bf:
38:bf:da:c9:5d:cf:ea:59:82:bb:b2:63:f1:cc:a5:98:50:93:
15:af:3c:be:bc:52:f4:c9:6c:9e:2f:e7:8e:ce:b5:40:ec:e7:
21:8a:73:28:91:71:05:35:ce:bf:5d:62:21:34:6c:29:73:f9:
81:8c:7e:10:b5:b9:62:a6:53:5c:05:45:d5:68:bb:b8:8a:11:
b2:a4:7b:25:75:75:f9:48:b1:54:f8:db:e0:f0:e3:1d:3c:05:
fb:9e:d1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:25:20 2026 by rpki-client