Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
File: VqSYe_jGtM3WV7vC0KXhPptibLk.mft (raw, json)
Hash identifier: Mgcy7SACrp5cDwnBWK4vDz347jtqxuS4CNHRhB+nG1w=
Subject key identifier: AD:B8:7A:86:FA:DE:65:AC:75:8B:C3:F2:92:1F:B1:0C:2F:4E:EA:EC
Authority key identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
Certificate issuer: /CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Certificate serial: 01A0DF8619ACE45E9DA4810CD3C59196BA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
Manifest number: 1787
Signing time: Sat 26 Sep 2026 21:01:42 +0000
Manifest this update: Sat 26 Sep 2026 21:01:42 +0000
Manifest next update: Sun 27 Sep 2026 21:01:42 +0000
Files and hashes: 1: VqSYe_jGtM3WV7vC0KXhPptibLk.crl (hash: BJFSL61It9jWdpaTDHrVxRltlyCcDYaqYq9PWa8Ge1w=)
2: i90B_Aw4voLYSZN4ike1cX-64ao.roa (hash: S2axTVSBnRViE7pSNvyWUI1Y+GA1IV83phsw1P/KVYM=)
3: mHu2PftrGhok9VGv5OwCSXoy7kI.roa (hash: JIflhy4iOTQx/e8s4VaUUMCa1jVPoZ6lbcfSCtMt09k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:19:ac:e4:5e:9d:a4:81:0c:d3:c5:91:96:ba:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Validity
Not Before: Sep 26 21:01:42 2026 GMT
Not After : Sep 27 21:01:42 2026 GMT
Subject: CN=adb87a86fade65ac758bc3f2921fb10c2f4eeaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:65:4e:07:b7:c6:5d:2e:ea:c6:28:d8:c7:
6d:e3:38:f0:c2:c5:84:d3:ea:48:41:62:90:88:22:
f0:ea:23:c0:12:3d:f6:ae:b5:02:a1:d8:4b:8e:91:
9f:da:50:64:7c:b6:0e:bb:46:91:fb:5c:40:d4:cb:
55:9c:0f:34:bf:ef:a4:08:aa:cb:6a:fe:5f:ba:b5:
7e:a3:78:b8:a5:21:56:48:a6:3e:f5:87:c2:b0:4e:
84:83:32:a2:f2:7f:93:62:9c:15:92:af:c1:67:71:
d8:80:dd:9d:de:00:93:31:7f:51:8b:91:2a:a7:ce:
92:42:80:dc:84:0a:b0:1f:da:66:07:0d:04:e0:bc:
63:f3:65:17:ff:2f:a5:01:2f:86:6f:8e:62:cb:97:
5b:db:8b:43:1f:31:22:b3:92:e4:fb:89:47:89:3b:
94:39:2c:78:c1:d1:72:b5:89:fe:19:02:d9:e8:d5:
57:11:db:21:e0:6a:23:47:19:e4:fd:db:55:ed:cd:
59:9f:2c:bb:09:bd:65:cf:1a:08:fd:c0:d5:73:21:
55:12:be:60:8c:26:b7:2e:c0:c2:ae:6a:6c:ac:4f:
7d:97:e9:7d:2b:fb:32:3a:f7:2c:54:9f:8c:77:c8:
60:1f:73:1d:4c:36:bf:61:c0:e8:3b:35:aa:b3:95:
e5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B8:7A:86:FA:DE:65:AC:75:8B:C3:F2:92:1F:B1:0C:2F:4E:EA:EC
X509v3 Authority Key Identifier:
keyid:56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:98:a6:01:a3:9b:79:5e:62:d8:b7:14:95:f2:72:a5:c4:13:
82:7c:9a:cd:3e:d3:72:b6:06:f2:62:3e:d0:04:39:98:b9:d0:
1e:4b:25:d7:f8:22:a3:45:ef:f8:e8:22:fa:4c:20:63:92:d9:
e8:ee:06:78:01:26:d4:4e:db:47:c6:7a:f0:7b:60:1d:bd:33:
42:3b:4e:23:a2:65:23:bb:93:f2:9e:07:f7:c6:fa:f0:79:f6:
2b:e0:6c:aa:97:52:f4:6f:ae:4d:28:b9:fb:08:c5:14:f4:38:
25:f1:db:d9:89:02:5f:ea:fd:b2:a8:c4:f9:8e:6e:8e:97:c0:
e4:ca:28:92:c9:1a:e8:74:bc:c7:1e:76:c8:cf:7d:20:62:b5:
d5:4b:90:be:d7:2b:9d:fd:0f:a5:50:7e:24:03:94:ad:25:39:
33:a2:4f:bd:a8:dc:f7:de:fc:84:40:af:fa:91:91:7e:37:9e:
e7:c3:3d:51:31:1b:55:96:b5:43:ed:3b:7c:e6:92:05:15:1b:
b3:59:e9:77:50:d6:49:d4:0f:00:35:d9:39:c7:24:5a:31:4c:
3d:dc:5a:4c:e6:b3:a6:6e:62:bb:85:7c:f9:59:12:33:14:f9:
6e:42:48:9a:f2:0c:9e:e9:a0:47:fe:96:8c:5b:ac:9b:cb:25:
46:0e:ef:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:46:58 2026 by rpki-client