Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
File: VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft (raw, json)
Hash identifier: yKch3htZBxoJsp0OUVnMzDErBIVoUy0+2aQSEzM4lio=
Subject key identifier: 51:7F:66:FF:46:54:0A:F7:E1:35:00:5A:B3:CA:C6:6D:AC:03:7F:44
Authority key identifier: 55:04:D4:A9:A7:86:C8:14:9D:AC:52:AC:5D:A3:72:12:03:AC:3A:37
Certificate issuer: /CN=5504d4a9a786c8149dac52ac5da3721203ac3a37
Certificate serial: 01A0EBF9E763A0A8B1AD6095149B75BF4025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQTUqaeGyBSdrFKsXaNyEgOsOjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
Manifest number: 01FA
Signing time: Tue 29 Sep 2026 07:03:38 +0000
Manifest this update: Tue 29 Sep 2026 07:03:38 +0000
Manifest next update: Wed 30 Sep 2026 07:03:38 +0000
Files and hashes: 1: 797n5tNvO4FTahlhh50sMolaFFk.roa (hash: epHzyMWa5qoGZ2kXq/ODWaLhqBNZGkxNuRScN/tpqOk=)
2: VQTUqaeGyBSdrFKsXaNyEgOsOjc.crl (hash: kCA148IT5F46EbCseO62ngDa+dmH3RgB0JvY/DaCUJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQTUqaeGyBSdrFKsXaNyEgOsOjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:e7:63:a0:a8:b1:ad:60:95:14:9b:75:bf:40:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5504d4a9a786c8149dac52ac5da3721203ac3a37
Validity
Not Before: Sep 29 07:03:38 2026 GMT
Not After : Sep 30 07:03:38 2026 GMT
Subject: CN=517f66ff46540af7e135005ab3cac66dac037f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:35:7f:50:27:fd:45:12:fa:44:63:81:f0:69:
8c:71:a5:dd:46:25:fc:86:06:8a:33:ce:5e:09:5a:
be:bd:b5:d1:ae:75:99:a4:2a:b9:9d:c9:91:e4:f3:
3f:f4:24:f2:66:b2:85:02:5b:4c:00:7e:54:c7:5d:
f8:78:f3:c9:17:56:98:60:33:2a:95:d1:4b:66:50:
3f:59:c0:d0:77:89:8e:32:70:15:58:aa:9d:87:65:
97:97:0c:a6:ad:f1:e0:f9:16:31:d4:cf:48:fa:00:
57:8b:9b:06:4e:ba:b2:c2:80:07:0a:49:bc:54:bf:
77:8f:e3:76:03:88:47:b2:7c:47:aa:de:d3:3b:a0:
f5:c3:f7:3e:d5:d4:ba:d2:21:86:4c:c1:76:26:3c:
09:81:34:91:d1:46:d7:ef:7e:81:f4:44:72:79:fb:
c3:bd:d7:c8:07:f8:80:49:80:ee:ab:87:de:ba:68:
3c:e3:3f:9e:0a:81:89:7d:4b:9d:a4:ba:c8:5f:6a:
1a:15:33:8d:a6:cd:03:56:bf:14:1e:25:98:04:dd:
e5:f4:c6:b0:e5:b3:0e:31:21:9b:24:15:8a:83:5e:
ef:8a:47:55:88:ff:91:3e:a1:7e:35:f2:54:04:cf:
bf:20:4b:98:d8:3f:41:fd:2f:da:a0:d6:a2:50:00:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7F:66:FF:46:54:0A:F7:E1:35:00:5A:B3:CA:C6:6D:AC:03:7F:44
X509v3 Authority Key Identifier:
keyid:55:04:D4:A9:A7:86:C8:14:9D:AC:52:AC:5D:A3:72:12:03:AC:3A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQTUqaeGyBSdrFKsXaNyEgOsOjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8f:5d:ff:f2:00:2f:68:aa:fa:29:a7:55:eb:42:3a:0c:aa:
dc:13:f2:20:03:ad:0a:31:cf:a6:dd:d2:d5:07:80:9e:86:a4:
18:76:13:b2:2b:a7:d1:61:8d:4f:bb:84:a9:6c:d2:b4:41:9a:
87:cd:fe:c9:84:2e:a3:66:36:4a:90:6d:21:9c:e0:7f:43:b5:
c0:65:31:04:4f:fd:0a:b5:59:fd:89:9c:54:65:f0:bd:e8:36:
2d:60:d7:cd:b2:fa:09:8c:3f:f6:e3:88:4e:93:01:4f:7a:bc:
1a:50:d7:e6:06:77:d7:0e:2f:8a:a1:a2:77:f1:7a:c5:ba:f0:
52:ba:73:91:e1:65:ce:17:d5:e3:77:25:56:64:14:ff:2b:a1:
6f:41:54:24:4e:d2:99:d8:f2:0e:ca:8f:ab:0b:e9:9a:7c:dc:
3a:fa:0c:b4:46:93:a8:6c:ad:26:68:d7:ab:6f:60:e5:26:3d:
0e:27:da:12:40:f5:f9:9a:76:a9:72:6a:5b:4c:23:15:80:e1:
42:3f:b0:84:86:97:3f:9c:77:b9:5f:70:93:ce:27:fa:d9:38:
c7:fa:dd:f4:d0:6c:ff:d7:f3:8a:c3:a5:ba:06:a0:e1:a8:8a:
0b:e3:ec:ef:97:87:9d:66:8c:92:1a:99:71:49:a6:c5:e5:62:
bc:52:aa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:14:21 2026 by rpki-client