Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
File: VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft (raw, json)
Hash identifier: hSPIbSY8nJUrUp74+i7/InGZ2ui32khQmF1B4qaCh1A=
Subject key identifier: 59:49:7C:BC:E8:F7:91:72:B4:06:70:8F:2C:4D:D9:12:71:48:1A:3A
Authority key identifier: 54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E
Certificate issuer: /CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
Certificate serial: 019D389C6EAFD29850CE946DFDF46F8C394C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
Manifest number: 1500
Signing time: Sun 29 Mar 2026 08:01:09 +0000
Manifest this update: Sun 29 Mar 2026 08:01:09 +0000
Manifest next update: Mon 30 Mar 2026 08:01:09 +0000
Files and hashes: 1: TzFMlyGi4zFmCDU2h2qG4O6pMds.roa (hash: TJpZbRVZ7iaxJCXPVUNPAifcE/xvT1lmZtmQUt0op4c=)
2: VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl (hash: VCjzJ4LrNb7pHgKDALqN+crwkMZ9KYVoI/OpEyFK90M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:6e:af:d2:98:50:ce:94:6d:fd:f4:6f:8c:39:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
Validity
Not Before: Mar 29 08:01:09 2026 GMT
Not After : Mar 30 08:01:09 2026 GMT
Subject: CN=59497cbce8f79172b406708f2c4dd91271481a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:11:11:44:83:ca:eb:8e:13:ce:84:2b:3b:
e8:1b:7b:8e:43:e5:62:6c:28:8d:f0:3a:5c:6e:a4:
e1:08:fe:68:af:57:38:0f:fb:a1:5f:b0:ab:59:09:
94:7d:b9:19:80:3f:28:ab:9b:19:ec:1a:1c:ad:10:
54:3c:8f:1b:d9:75:07:3b:fc:c0:de:9f:9b:0c:32:
59:e0:b8:49:64:de:b7:7c:e7:95:6d:61:56:34:e9:
ac:5a:89:6a:ef:ca:ae:e7:b6:62:0b:ae:70:f7:79:
d3:21:35:7c:d6:2a:9e:89:fd:70:74:9d:e4:76:5b:
15:06:10:7d:80:60:bf:1c:6c:cd:6b:13:87:60:01:
27:7c:9c:6a:3c:98:18:d5:38:ec:0b:c5:81:ed:3d:
ff:d6:79:9e:af:de:15:67:e9:8b:7c:c4:63:65:c0:
de:af:bb:85:1d:d4:90:da:ee:44:55:dc:01:49:ce:
56:10:73:63:34:aa:71:ff:a1:70:65:b8:d4:63:3a:
58:ea:df:a6:0c:5a:7f:0d:70:62:96:84:92:42:dd:
6d:dd:aa:f1:be:65:c2:dc:d6:63:d8:9b:e6:88:fe:
43:39:e6:02:d1:6b:61:20:e9:cd:0d:43:93:ba:82:
55:9a:d8:9c:a8:8c:47:9f:02:86:12:16:34:ce:17:
2a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:49:7C:BC:E8:F7:91:72:B4:06:70:8F:2C:4D:D9:12:71:48:1A:3A
X509v3 Authority Key Identifier:
keyid:54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:cf:84:7b:eb:b2:03:8e:5f:50:a1:66:dc:8d:9b:a7:ea:96:
0b:47:90:74:6b:b6:f5:d9:17:e6:0a:32:48:e9:07:24:a5:95:
f4:a8:f2:31:4c:4a:ca:3f:b6:19:31:91:16:5d:3e:f7:22:dc:
5e:f5:83:0d:5e:c6:a5:92:7e:7e:d5:9c:ab:82:14:bc:9d:4c:
d2:24:0c:1a:01:32:f9:e6:1b:47:37:27:36:91:3a:af:fc:a5:
b8:38:7f:42:0b:4b:34:e9:0a:4f:e7:b5:1f:2f:b9:18:dc:7a:
ce:8e:20:dd:b6:3e:3f:a0:b0:29:64:74:40:8a:70:e5:aa:11:
99:c6:b4:03:7d:e3:b7:a4:87:f6:b8:7e:36:84:72:60:af:6c:
01:dd:20:49:e3:0d:55:e4:6e:19:f4:98:18:9e:15:81:bc:96:
0a:3e:3c:83:c5:f9:e6:55:1c:f5:41:d9:d7:f3:f1:c0:b9:d4:
61:05:38:2d:d4:af:e2:ef:75:9e:d7:e2:ab:14:55:8e:ce:8c:
1e:d9:9e:da:cf:b1:62:d6:89:6c:a6:26:9e:1b:f5:5c:3b:79:
27:5e:0b:12:6d:fd:31:75:15:c8:ad:df:33:49:8b:e9:74:db:
40:17:d1:db:d3:d0:65:b2:f0:b1:d9:27:a7:99:eb:0a:e3:2a:
8c:4f:47:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:05 2026 by rpki-client