Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
File: vqPSZTUbZfI58pl94eioBneTOl4.mft (raw, json)
Hash identifier: eP/WBvHZVjK9g1v4H0njuh9wuYZKc7Bh7Qq7mLklyc8=
Subject key identifier: BC:2D:ED:64:87:3C:55:98:54:D1:91:B5:07:F6:D2:83:D6:06:DC:7B
Authority key identifier: BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
Certificate issuer: /CN=bea3d265351b65f239f2997de1e8a80677933a5e
Certificate serial: 019D281648CE240CF76F577DF3AA3BBA2DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
Manifest number: 06AC
Signing time: Thu 26 Mar 2026 03:00:42 +0000
Manifest this update: Thu 26 Mar 2026 03:00:42 +0000
Manifest next update: Fri 27 Mar 2026 03:00:42 +0000
Files and hashes: 1: PIxJAOWfVeBmU76JbXSAooErb1U.roa (hash: T08H7sWyCft7hkyKVMhTHqrQKcUGSoqeo9MGAcS4sOs=)
2: vqPSZTUbZfI58pl94eioBneTOl4.crl (hash: uB/od4lZUjmeixn2TCmsguEsKINV/zqckJP3i6KteHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:48:ce:24:0c:f7:6f:57:7d:f3:aa:3b:ba:2d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea3d265351b65f239f2997de1e8a80677933a5e
Validity
Not Before: Mar 26 03:00:42 2026 GMT
Not After : Mar 27 03:00:42 2026 GMT
Subject: CN=bc2ded64873c559854d191b507f6d283d606dc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:65:c1:5b:81:31:54:b7:d7:2a:87:8a:3e:
69:45:4b:6c:24:12:65:97:25:8e:06:95:c5:73:0c:
23:15:4c:79:04:6a:de:bb:66:b5:b1:6f:a1:39:0d:
1a:76:e4:e1:33:54:00:e0:56:89:7e:0a:ee:00:f8:
7b:59:61:42:dd:5e:dd:68:fd:ef:83:7c:61:47:ad:
f8:e4:ea:0f:28:4f:b2:4d:14:3f:a6:79:06:1d:25:
2c:bb:d4:4b:a0:a0:6f:2a:42:e6:ed:d8:8d:23:5b:
62:54:4e:5b:3e:ef:ea:f9:bf:02:c9:81:4f:ae:98:
56:cb:46:2c:6b:9a:2d:96:ec:a6:dd:1f:88:4b:bc:
41:3b:68:a4:54:67:f3:7c:9a:f9:1e:e4:e1:7a:c3:
4d:f5:53:52:91:4b:a7:a5:60:97:37:49:f8:7e:69:
f6:39:6c:7f:9d:0d:60:ec:ca:12:d0:36:20:e7:35:
50:27:18:bb:99:e0:4b:b0:e5:ed:e6:77:c8:06:be:
86:f9:7e:93:03:75:38:f1:47:68:4e:41:2d:3b:2f:
26:04:5c:d5:47:02:06:1d:f1:74:3f:3f:75:79:28:
ff:1c:d2:c1:a8:fa:82:db:c7:1c:33:e8:17:d6:5c:
d6:b2:73:40:ec:b2:5e:c0:ed:fa:30:c6:c4:6b:1e:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2D:ED:64:87:3C:55:98:54:D1:91:B5:07:F6:D2:83:D6:06:DC:7B
X509v3 Authority Key Identifier:
keyid:BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ee:80:19:c9:2e:ea:42:5a:40:35:b2:2a:28:41:e2:ba:52:
89:76:f3:0e:d0:9f:4d:4c:5b:c2:b1:05:6d:62:be:98:e0:f9:
fa:6f:bf:37:96:43:5e:df:bb:da:49:c0:69:14:92:9d:93:2c:
99:e4:e0:a8:f5:9e:20:09:cb:ad:bd:11:04:09:98:9b:5e:54:
51:5a:fb:27:34:b9:84:7d:af:79:db:cd:70:29:85:bb:88:e9:
d9:9a:c2:f6:d3:93:69:53:df:8e:3d:52:e7:e5:6c:b6:4e:36:
f0:ef:f2:27:b9:95:68:7d:27:10:7c:53:ad:c8:2c:d5:89:6f:
42:bf:73:60:ca:ae:e2:0e:26:28:64:4e:bd:47:3e:3c:6a:34:
73:e6:92:38:fd:e9:6a:5a:1a:c0:ee:e7:b1:d8:b9:dc:23:fd:
5d:08:44:73:51:d9:58:1b:5c:91:f5:1b:55:20:72:87:27:3a:
27:a6:c2:e6:17:da:22:a4:ae:05:21:f5:cf:42:51:e9:b5:b1:
dd:da:46:6c:d6:48:e5:f1:64:28:d3:ce:04:3c:85:f1:de:ef:
7b:0b:c5:52:ef:3c:4e:d8:27:13:27:ba:5d:11:08:8e:57:88:
e9:c7:ca:36:7e:15:e2:a3:7f:27:11:85:c2:b1:d1:81:f1:20:
9a:11:2e:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFkjOJAz3b1d986o7ui31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTNkMjY1MzUxYjY1ZjIzOWYyOTk3ZGUxZThhODA2Nzc5
MzNhNWUwHhcNMjYwMzI2MDMwMDQyWhcNMjYwMzI3MDMwMDQyWjAzMTEwLwYDVQQD
EyhiYzJkZWQ2NDg3M2M1NTk4NTRkMTkxYjUwN2Y2ZDI4M2Q2MDZkYzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMdlwVuBMVS31yqHij5pRUtsJBJl
lyWOBpXFcwwjFUx5BGreu2a1sW+hOQ0aduThM1QA4FaJfgruAPh7WWFC3V7daP3v
g3xhR6345OoPKE+yTRQ/pnkGHSUsu9RLoKBvKkLm7diNI1tiVE5bPu/q+b8CyYFP
rphWy0Ysa5otluym3R+IS7xBO2ikVGfzfJr5HuThesNN9VNSkUunpWCXN0n4fmn2
OWx/nQ1g7MoS0DYg5zVQJxi7meBLsOXt5nfIBr6G+X6TA3U48UdoTkEtOy8mBFzV
RwIGHfF0Pz91eSj/HNLBqPqC28ccM+gX1lzWsnNA7LJewO36MMbEax7tpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwt7WSHPFWYVNGRtQf20oPWBtx7MB8GA1UdIwQY
MBaAFL6j0mU1G2XyOfKZfeHoqAZ3kzpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFQU1pUVWJaZkk1OHBsOTRlaW9CbmVUT2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jMDg3OGQtYWZjNi00ZTcwLTkwZDMt
ZjUzYzVjMTc1NmQ3LzEvdnFQU1pUVWJaZkk1OHBsOTRlaW9CbmVUT2w0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jMDg3OGQtYWZjNi00ZTcwLTkwZDMtZjUzYzVjMTc1NmQ3
LzEvdnFQU1pUVWJaZkk1OHBsOTRlaW9CbmVUT2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKu6AGcku
6kJaQDWyKihB4rpSiXbzDtCfTUxbwrEFbWK+mOD5+m+/N5ZDXt+72knAaRSSnZMs
meTgqPWeIAnLrb0RBAmYm15UUVr7JzS5hH2vedvNcCmFu4jp2ZrC9tOTaVPfjj1S
5+Vstk428O/yJ7mVaH0nEHxTrcgs1YlvQr9zYMqu4g4mKGROvUc+PGo0c+aSOP3p
aloawO7nsdi53CP9XQhEc1HZWBtckfUbVSByhyc6J6bC5hfaIqSuBSH1z0JR6bWx
3dpGbNZI5fFkKNPOBDyF8d7vewvFUu88TtgnEye6XREIjleI6cfKNn4V4qN/JxGF
wrHRgfEgmhEulA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:12 2026 by rpki-client