Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
File: VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft (raw, json)
Hash identifier: Al+HacqHsPq9vdiP0kuo5w5fjNyQ9ICLsUfnyaZh0p8=
Subject key identifier: DA:88:A5:9B:90:0B:C7:C7:17:81:D8:0A:DA:99:74:3B:89:9E:37:22
Authority key identifier: 55:04:D4:A9:A7:86:C8:14:9D:AC:52:AC:5D:A3:72:12:03:AC:3A:37
Certificate issuer: /CN=5504d4a9a786c8149dac52ac5da3721203ac3a37
Certificate serial: 019D2E181D987BEEBA6B3C3AE9F58E84CF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQTUqaeGyBSdrFKsXaNyEgOsOjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
Manifest number: 0A
Signing time: Fri 27 Mar 2026 07:00:25 +0000
Manifest this update: Fri 27 Mar 2026 07:00:25 +0000
Manifest next update: Sat 28 Mar 2026 07:00:25 +0000
Files and hashes: 1: 797n5tNvO4FTahlhh50sMolaFFk.roa (hash: epHzyMWa5qoGZ2kXq/ODWaLhqBNZGkxNuRScN/tpqOk=)
2: VQTUqaeGyBSdrFKsXaNyEgOsOjc.crl (hash: 3uU2pj5QlgRevL0yZQAsamQncVHlaqifUR7paCT+7Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQTUqaeGyBSdrFKsXaNyEgOsOjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:18:1d:98:7b:ee:ba:6b:3c:3a:e9:f5:8e:84:cf:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5504d4a9a786c8149dac52ac5da3721203ac3a37
Validity
Not Before: Mar 27 07:00:25 2026 GMT
Not After : Mar 28 07:00:25 2026 GMT
Subject: CN=da88a59b900bc7c71781d80ada99743b899e3722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:55:62:5e:f1:64:82:c2:64:b2:1c:43:34:4c:
2f:ae:14:91:4e:04:3e:71:c0:1c:18:07:27:e5:d0:
1f:4d:4e:b5:55:b7:f5:05:63:f5:f1:fc:b4:8e:17:
a1:19:fb:95:2b:5e:80:32:2a:4b:fd:39:e3:42:03:
2b:3a:62:e7:d6:09:a2:0e:2b:10:29:be:ae:7a:83:
f8:fc:70:3c:40:57:d9:f2:f6:db:db:cd:02:6f:8b:
1b:a7:b0:83:f2:87:e3:19:22:1b:5a:2c:80:ce:88:
7b:36:3f:04:a9:3d:fa:9a:e2:a1:4a:94:cf:ef:c3:
c6:fc:73:76:81:2f:1a:e4:ac:f0:07:81:c0:53:1b:
ea:6c:60:8a:a0:89:2a:80:1d:65:aa:7f:b2:35:1a:
2b:5a:91:cb:19:d9:b4:22:73:5a:04:6e:38:ec:18:
0e:7b:e9:3c:98:09:c2:3e:47:52:f9:4e:32:62:da:
8d:1a:c3:4f:e7:90:38:19:16:4f:61:09:5a:ec:f6:
61:da:38:d6:1b:9f:5c:fa:4a:27:c0:f3:aa:1d:39:
5f:5d:70:14:09:0b:f8:fa:5d:85:e0:f0:6f:72:dd:
d4:87:e3:0a:85:be:f9:2a:d6:7e:af:a4:3a:e1:d6:
35:23:29:61:46:0e:3e:cb:4a:db:32:9e:a2:3c:3d:
16:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:88:A5:9B:90:0B:C7:C7:17:81:D8:0A:DA:99:74:3B:89:9E:37:22
X509v3 Authority Key Identifier:
keyid:55:04:D4:A9:A7:86:C8:14:9D:AC:52:AC:5D:A3:72:12:03:AC:3A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQTUqaeGyBSdrFKsXaNyEgOsOjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f7:d7:25:ff:d3:d6:a5:94:a7:03:5d:b4:fc:c1:42:2d:8c:
21:8b:9a:63:98:4f:da:f6:12:4e:cd:7b:a2:0c:8f:89:5f:7d:
d7:38:a0:d0:82:88:3e:a0:20:91:04:f4:33:09:48:f4:b8:72:
7b:b2:a3:d2:4d:c7:17:ee:ef:c7:bf:10:92:7a:4e:04:26:33:
b5:ab:f1:f9:9f:c9:97:46:46:ef:5f:32:c0:ec:a2:98:b9:db:
7a:67:06:45:d3:c7:d2:65:16:48:8c:3f:85:ce:40:e6:4d:0c:
89:16:ed:74:e9:ca:a7:bc:82:a8:fd:51:9d:2e:26:36:f6:6d:
cc:cc:05:41:20:e8:80:fe:1f:54:95:1f:e8:9e:4b:4f:1e:20:
82:43:3d:5b:38:fe:3c:4b:5a:e9:af:36:63:ca:b1:44:3d:52:
4b:59:0b:08:cb:1c:5e:10:16:c1:83:d5:a3:ec:95:31:6c:c5:
4e:80:c6:d7:5f:82:36:51:12:65:f9:8f:44:9d:d6:d0:e1:6b:
ba:39:82:d8:ce:fe:e3:82:e6:0f:e3:67:f7:f0:ca:4a:e6:18:
a7:ff:c9:e6:d0:b3:20:4a:a5:58:e1:d3:5d:57:a2:84:62:30:
b1:e0:61:85:1a:4d:27:fa:3e:60:d7:50:10:30:b0:9e:08:47:
ad:87:11:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 16:05:05 2026 by rpki-client