Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
File: VqSYe_jGtM3WV7vC0KXhPptibLk.mft (raw, json)
Hash identifier: JnfoYZIIZRzC2QXb1dSgSazzuI5IS4qKiak+mTxorgk=
Subject key identifier: EA:84:BC:A5:2C:09:83:D2:80:1E:1B:81:61:B9:9B:AC:59:4F:76:F8
Authority key identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
Certificate issuer: /CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Certificate serial: 019F935B12FB1762A38FD54174140804DEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
Manifest number: 16DB
Signing time: Fri 24 Jul 2026 09:00:47 +0000
Manifest this update: Fri 24 Jul 2026 09:00:47 +0000
Manifest next update: Sat 25 Jul 2026 09:00:47 +0000
Files and hashes: 1: VqSYe_jGtM3WV7vC0KXhPptibLk.crl (hash: PoRQIHAF6Yk4+o4u0sB4NkpA1kIppihMRcL3FdEvJiw=)
2: i90B_Aw4voLYSZN4ike1cX-64ao.roa (hash: S2axTVSBnRViE7pSNvyWUI1Y+GA1IV83phsw1P/KVYM=)
3: mHu2PftrGhok9VGv5OwCSXoy7kI.roa (hash: JIflhy4iOTQx/e8s4VaUUMCa1jVPoZ6lbcfSCtMt09k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:12:fb:17:62:a3:8f:d5:41:74:14:08:04:de:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Validity
Not Before: Jul 24 09:00:47 2026 GMT
Not After : Jul 25 09:00:47 2026 GMT
Subject: CN=ea84bca52c0983d2801e1b8161b99bac594f76f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:10:32:57:2e:47:6d:ba:e4:dc:fb:a8:9b:61:
37:df:9f:ce:98:28:b3:70:dd:04:80:3e:71:fb:c9:
37:20:36:f5:6c:54:72:d8:2d:d1:50:85:81:42:29:
2b:d6:3d:63:8e:6b:21:30:4c:e0:bb:08:50:2c:ab:
5a:9f:6b:43:05:85:fa:59:76:4c:71:0c:ca:0f:6a:
fd:28:c6:eb:c8:4c:dc:7b:29:bb:6b:64:4c:06:51:
ee:5e:dc:69:71:c1:78:80:bd:9c:65:7a:27:61:3e:
a1:12:ee:b7:01:5a:8a:26:ca:80:42:f2:f0:d2:b8:
de:29:84:ca:0e:6a:ec:65:53:38:6a:3a:59:63:0b:
4e:ac:7b:83:01:db:35:58:54:c1:28:10:8c:51:6b:
8a:18:8e:7f:89:05:a4:1e:1b:7b:cf:06:c0:ec:49:
82:15:74:f3:20:48:c1:3a:3a:b5:d6:10:19:44:fc:
87:fa:9b:ae:4c:7e:dd:f7:6c:07:ca:45:4e:40:7a:
44:96:4e:c8:9a:ee:27:53:f5:34:80:8b:ad:c5:36:
56:ec:33:fe:6b:e2:4e:27:d4:05:39:c7:8f:1c:5a:
89:4d:f8:bd:0f:47:16:ec:d2:09:82:d8:cc:12:54:
eb:51:7b:b9:3e:d9:6f:9a:48:60:63:39:bf:47:98:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:84:BC:A5:2C:09:83:D2:80:1E:1B:81:61:B9:9B:AC:59:4F:76:F8
X509v3 Authority Key Identifier:
keyid:56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f2:d2:9a:5e:af:3f:6b:d1:7e:d4:c6:22:19:b3:9a:1d:6b:
d3:6d:64:59:91:d3:14:b1:d6:54:82:67:87:b4:7b:08:97:3a:
4f:79:0c:1a:5b:ec:68:3b:00:35:7c:cf:25:32:40:9a:86:15:
f2:45:10:16:ad:ff:4d:62:f2:11:7b:8f:df:c3:2b:53:3d:2a:
6a:e9:ed:3c:62:be:48:fc:a2:56:4f:0f:69:41:9a:3b:70:aa:
73:3d:b9:e7:1b:69:b6:24:55:76:1e:4b:84:d7:e8:3f:3a:08:
5e:72:ff:2f:dc:9b:2e:78:a1:24:87:0d:44:bd:a7:75:64:37:
f3:0a:1c:63:c0:35:8b:a7:4e:c0:1a:53:4c:4f:e0:91:f7:63:
62:66:32:86:d1:78:7e:ab:28:4c:aa:92:41:5c:1f:0b:dc:60:
b7:da:3e:80:a5:a7:65:e3:db:4e:8e:08:ae:ec:92:fe:79:0c:
2a:ab:fe:02:18:a2:d5:f8:44:45:e5:a5:4c:f4:5d:cd:b5:51:
2c:6a:57:9a:94:8b:ba:67:68:e1:8e:48:72:59:37:e4:b2:2c:
d2:ce:57:b2:6b:4c:af:e8:c7:3e:92:18:9b:c5:4e:e4:33:14:
60:38:ea:bd:b5:be:5a:43:ae:5a:6f:43:c4:14:9f:c8:25:ba:
8e:51:d0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:33 2026 by rpki-client