Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
File: vqTtMeEp6Vu17P2FdXyddNO-42g.mft (raw, json)
Hash identifier: 33aP3jHDWSRCxVsSCWM5owj2D8jzyQXdvb43+MTvVYI=
Subject key identifier: 6C:21:1A:2B:E2:06:38:83:37:33:72:F5:D4:28:50:46:78:94:A1:39
Authority key identifier: BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68
Certificate issuer: /CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368
Certificate serial: 019D39099BBF504A3D6ACAC9355E7B3CBD25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
Manifest number: 0C8A
Signing time: Sun 29 Mar 2026 10:00:24 +0000
Manifest this update: Sun 29 Mar 2026 10:00:24 +0000
Manifest next update: Mon 30 Mar 2026 10:00:24 +0000
Files and hashes: 1: vqTtMeEp6Vu17P2FdXyddNO-42g.crl (hash: tr/rxyb74L57ISpkgQiL0mtc4iva63r6TBdTEnLlQwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:9b:bf:50:4a:3d:6a:ca:c9:35:5e:7b:3c:bd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368
Validity
Not Before: Mar 29 10:00:24 2026 GMT
Not After : Mar 30 10:00:24 2026 GMT
Subject: CN=6c211a2be2063883373372f5d42850467894a139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:38:7b:b9:58:d8:9d:d8:4d:49:ea:6e:4d:
6b:1b:b1:a6:d6:13:fe:e3:39:51:ea:db:95:8a:34:
92:3b:b8:0d:70:6d:64:09:99:9c:e7:b3:77:b6:02:
24:59:3f:84:b6:e3:7c:fe:f3:6e:c6:af:3b:ff:b1:
3f:04:49:1b:c4:2b:bc:38:24:67:f6:5b:54:b3:94:
a8:a7:9c:17:e7:03:f0:8f:6a:e6:6d:f3:da:d2:85:
5b:8f:9f:47:7d:30:ea:11:b9:da:64:e5:5e:f4:67:
d7:92:73:d5:cf:ae:d6:2c:04:bc:f5:68:84:e1:2b:
ff:b0:c9:2c:3a:6f:44:24:99:cb:74:1a:34:2d:74:
a7:71:15:63:f2:7d:24:01:71:56:f0:97:0b:c8:4a:
00:e7:74:11:df:e0:32:22:7e:8c:c7:6e:02:5a:3c:
33:04:69:d2:7c:b0:63:22:70:5b:68:6e:a1:e4:38:
2b:e8:cf:78:80:5d:a3:3f:a7:38:ab:11:5b:31:fe:
59:6f:44:e9:4d:6e:06:52:cd:4e:ed:89:7a:23:2b:
3f:9f:38:df:60:29:ba:74:56:7b:a7:84:ad:74:87:
f9:5a:3d:21:26:57:93:f5:a1:e0:54:5a:d6:61:5b:
4c:b3:fe:65:ed:4d:ac:19:de:8e:ac:8f:a0:7b:bc:
15:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:21:1A:2B:E2:06:38:83:37:33:72:F5:D4:28:50:46:78:94:A1:39
X509v3 Authority Key Identifier:
keyid:BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f6:03:ee:8c:34:68:80:dc:30:54:c8:a5:a0:99:d4:59:db:
28:0d:6c:26:16:41:b5:0a:e5:b4:fd:a2:be:c1:65:56:b0:c5:
53:d3:40:b8:1c:9a:92:1b:58:25:34:50:95:52:33:53:6d:b4:
a3:27:64:a6:43:23:7a:ce:40:01:ea:df:25:e6:f5:68:e0:eb:
98:4f:14:f7:9d:62:70:27:ef:bd:a8:4d:9a:ba:db:01:6d:d3:
10:74:34:d1:a7:5b:3b:1d:51:5a:38:cd:2c:3f:c5:f4:19:4f:
1a:f6:71:6c:91:50:c0:ed:1a:36:31:a9:9e:10:a1:71:dd:eb:
64:a5:2e:d9:d0:f4:6a:eb:41:11:63:71:07:fa:1d:4f:c8:1d:
d2:ab:07:0c:fc:59:2a:12:24:33:15:29:ff:cd:6d:a8:f2:56:
5f:82:1c:d7:3e:c9:29:14:46:d8:cb:1b:f1:4f:c2:5f:a3:c9:
34:cc:55:d5:38:02:17:e0:56:aa:69:51:83:1e:6d:65:26:c8:
bf:77:de:15:f8:45:95:c2:0e:f2:3e:35:36:42:fb:c9:5c:65:
13:66:1e:a8:e1:75:86:73:6a:3c:b6:63:e3:a0:13:8d:17:ab:
53:d6:89:99:6c:6d:14:0f:15:20:24:cd:be:2d:f7:da:c1:30:
80:84:60:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CZu/UEo9asrJNV57PL0lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTRlZDMxZTEyOWU5NWJiNWVjZmQ4NTc1N2M5ZDc0ZDNi
ZWUzNjgwHhcNMjYwMzI5MTAwMDI0WhcNMjYwMzMwMTAwMDI0WjAzMTEwLwYDVQQD
Eyg2YzIxMWEyYmUyMDYzODgzMzczMzcyZjVkNDI4NTA0Njc4OTRhMTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa84e7lY2J3YTUnqbk1rG7Gm1hP+
4zlR6tuVijSSO7gNcG1kCZmc57N3tgIkWT+EtuN8/vNuxq87/7E/BEkbxCu8OCRn
9ltUs5Sop5wX5wPwj2rmbfPa0oVbj59HfTDqEbnaZOVe9GfXknPVz67WLAS89WiE
4Sv/sMksOm9EJJnLdBo0LXSncRVj8n0kAXFW8JcLyEoA53QR3+AyIn6Mx24CWjwz
BGnSfLBjInBbaG6h5Dgr6M94gF2jP6c4qxFbMf5Zb0TpTW4GUs1O7Yl6Iys/nzjf
YCm6dFZ7p4StdIf5Wj0hJleT9aHgVFrWYVtMs/5l7U2sGd6OrI+ge7wV6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwhGiviBjiDNzNy9dQoUEZ4lKE5MB8GA1UdIwQY
MBaAFL6k7THhKelbtez9hXV8nXTTvuNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83NzMyYzAtODZmYS00ZTNhLWI2NTIt
OGM0YzY0MDUyNTFlLzEvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83NzMyYzAtODZmYS00ZTNhLWI2NTItOGM0YzY0MDUyNTFl
LzEvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPYD7ow0
aIDcMFTIpaCZ1FnbKA1sJhZBtQrltP2ivsFlVrDFU9NAuByakhtYJTRQlVIzU220
oydkpkMjes5AAerfJeb1aODrmE8U951icCfvvahNmrrbAW3TEHQ00adbOx1RWjjN
LD/F9BlPGvZxbJFQwO0aNjGpnhChcd3rZKUu2dD0autBEWNxB/odT8gd0qsHDPxZ
KhIkMxUp/81tqPJWX4Ic1z7JKRRG2Msb8U/CX6PJNMxV1TgCF+BWqmlRgx5tZSbI
v3feFfhFlcIO8j41NkL7yVxlE2YeqOF1hnNqPLZj46ATjRerU9aJmWxtFA8VICTN
vi332sEwgIRgGA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:20 2026 by rpki-client