Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
File: vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft (raw, json)
Hash identifier: 62Sd/d1pdrAHY11KbSN/E2ZCI+H2vFMGCFMEv96PxC4=
Subject key identifier: 1B:48:25:99:51:D8:EC:F5:FA:13:75:A3:F1:15:15:87:12:75:A0:E2
Authority key identifier: BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24
Certificate issuer: /CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
Certificate serial: 019CE59119D80637507D90EBDF735B4564C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
Manifest number: 11D2
Signing time: Fri 13 Mar 2026 05:00:17 +0000
Manifest this update: Fri 13 Mar 2026 05:00:17 +0000
Manifest next update: Sat 14 Mar 2026 05:00:17 +0000
Files and hashes: 1: QR-4xyPmxQoNOzw8r8G1312CGFY.roa (hash: mQraALPAX5RAPWW2mrRXlTw0EIho9B1EEiVrzSs5Y7E=)
2: vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl (hash: WzKXd9AZ12YnevpNKUHTBLD1DAO/Oj37huBgLJETy4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:19:d8:06:37:50:7d:90:eb:df:73:5b:45:64:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
Validity
Not Before: Mar 13 05:00:17 2026 GMT
Not After : Mar 14 05:00:17 2026 GMT
Subject: CN=1b48259951d8ecf5fa1375a3f11515871275a0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:ef:2d:e6:c2:6c:84:36:a0:cb:a3:31:ca:
5f:bd:8c:52:9a:a5:ca:b7:67:af:db:50:c5:46:bc:
98:0f:54:39:f3:67:c9:5a:81:9b:47:d6:e4:d1:51:
d8:1b:0b:7b:e3:d1:de:a4:cc:c9:a5:20:01:93:d0:
23:ec:67:8d:39:d9:77:4e:a0:8d:cc:c7:5e:ef:e7:
11:6b:5c:f1:16:0a:ad:b3:a6:a2:be:f4:b2:39:2e:
7b:a3:07:34:4b:ad:a2:e6:b3:56:5f:2f:53:30:3d:
74:80:24:11:81:2b:8b:e3:a2:50:0c:be:09:90:1c:
7e:92:1a:dd:d2:d5:14:59:5b:64:bc:41:69:ae:c5:
e4:90:a8:98:34:ea:16:7f:63:91:3b:68:1b:a5:2f:
e6:ea:45:40:47:18:3c:47:8c:f0:80:bb:4a:ab:34:
ad:b1:f2:6a:43:12:25:30:b5:de:65:20:bc:0c:f5:
1e:59:6e:1b:30:62:70:75:03:72:5b:18:b7:d4:0f:
0b:e7:59:0b:e0:bc:c1:53:f0:ab:8f:62:2b:e0:7d:
43:d2:5e:78:f4:94:eb:8e:69:5b:73:ef:8b:5f:1e:
e6:38:b8:c1:43:21:fa:32:3b:de:de:73:c5:d1:6a:
1c:e3:f5:50:30:33:66:26:ec:78:4b:54:bf:ce:d5:
4b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:48:25:99:51:D8:EC:F5:FA:13:75:A3:F1:15:15:87:12:75:A0:E2
X509v3 Authority Key Identifier:
keyid:BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2f:6b:2c:7d:5e:19:e0:fa:36:d2:ab:19:3f:be:62:65:60:
e8:66:b9:45:a7:32:f3:b9:d0:8c:34:d3:77:70:05:eb:79:ad:
71:5a:e7:2d:9c:7a:a4:89:16:1e:28:70:55:1b:a3:8a:00:78:
ec:7e:95:ec:5e:55:6d:6b:40:7e:c3:ba:3c:c1:04:18:fc:fd:
fd:1e:03:db:5c:dc:8e:b5:f8:30:5f:ab:59:30:c5:d0:a3:c6:
fe:df:37:3d:93:76:c9:cd:9f:49:07:30:25:e5:8b:e9:1a:b5:
22:d3:65:a8:1d:d8:81:bf:43:14:51:84:f4:07:30:7e:b5:ea:
ec:5b:df:2b:1f:93:f0:51:aa:ee:25:6b:1c:8a:d5:0e:70:9b:
65:33:0c:64:47:94:25:d0:c9:f2:47:1f:01:4b:ae:5f:3c:98:
49:3f:ad:7c:b9:38:6f:d2:74:88:99:c5:d7:b9:ba:27:71:f6:
d6:fa:ea:c2:e9:ef:7c:45:c5:df:b4:9e:c7:25:1e:0e:77:70:
00:9f:db:e3:30:6b:d8:3f:bb:da:c3:2f:02:1a:5b:4b:ac:f4:
59:45:1b:d0:be:13:2a:9a:cd:fb:04:bc:70:b5:17:48:35:66:
cb:4f:8d:0b:e2:43:96:25:ec:9b:1f:93:4e:38:08:4a:01:ce:
35:5f:a7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:15:28 2026 by rpki-client