Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
File: vhqIfnZTot5E8TFj4YcDcyaimgM.mft (raw, json)
Hash identifier: QI5wfRRcr+wIPfLM5Qkz0vMuyqMtVISwtw28btXB3RE=
Subject key identifier: 82:A8:C9:8E:06:4E:82:93:EC:B8:05:8B:66:4C:88:5E:D3:A6:57:5B
Authority key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
Certificate issuer: /CN=be1a887e7653a2de44f13163e187037326a29a03
Certificate serial: 019D284E1E5CC76F553A4566C323C1F287E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 04:01:41 +0000
Manifest this update: Thu 26 Mar 2026 04:01:41 +0000
Manifest next update: Fri 27 Mar 2026 04:01:41 +0000
Files and hashes: 1: 26V_3Mvd5HzKd--IVekz7E66T7M.roa (hash: vR3cG90fuQ7doDsdAb/Dcwa0EbD0JM2o7zzPUpuTRJk=)
2: 6hrWVEe7zJkcCCVfgajlhSv4cmY.roa (hash: K44F0Q+oZ6GMy0chonyVI2Ng0iyBpdcLQQo+pkOJBvA=)
3: vhqIfnZTot5E8TFj4YcDcyaimgM.crl (hash: ZSAvsJKD/2ASVFjwjpQUqOjfCuo+oyMxXGzQuzZT9/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:1e:5c:c7:6f:55:3a:45:66:c3:23:c1:f2:87:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1a887e7653a2de44f13163e187037326a29a03
Validity
Not Before: Mar 26 04:01:41 2026 GMT
Not After : Mar 27 04:01:41 2026 GMT
Subject: CN=82a8c98e064e8293ecb8058b664c885ed3a6575b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:97:a9:fd:f3:30:d3:83:b5:70:6b:4f:dc:
2c:e4:eb:e7:6a:fa:5e:c0:c5:c6:52:8a:5e:5f:be:
40:8e:dc:85:16:7e:9c:b8:8a:11:69:e7:27:f0:62:
6e:0e:52:b5:96:28:4d:7c:8b:90:85:cf:1e:26:f1:
47:a6:fe:b6:5c:04:fa:02:96:c4:0f:78:9b:a3:db:
0f:58:9e:9c:ad:3d:4e:1c:fb:b2:91:99:f1:58:ec:
88:bd:a0:17:fc:bf:13:39:bd:de:9c:54:fe:c3:41:
c2:22:c6:df:24:bd:6a:14:b9:c4:9d:bf:ac:5e:90:
90:81:30:35:a8:e2:e7:ee:4d:1e:5d:c8:b0:2f:ff:
7d:5a:07:b8:95:8b:dd:16:d4:d7:2e:f6:e2:f8:d0:
1c:fa:e7:07:32:c3:c0:e4:48:11:e0:28:54:31:c8:
f4:08:bc:e1:67:26:0d:47:1f:25:4d:7e:34:f1:48:
5c:6d:3e:ab:02:a0:6f:df:8a:d5:ae:ec:94:b5:84:
8b:45:dc:58:fa:73:f8:11:51:2b:29:82:d0:bc:2a:
b4:3b:45:64:55:b3:2b:61:2b:2f:7c:e7:67:09:48:
74:93:c4:63:6b:28:40:a4:11:e5:fa:ea:49:8f:3a:
69:7b:e5:cd:e0:b7:a0:53:1c:cb:da:7a:62:25:7b:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A8:C9:8E:06:4E:82:93:EC:B8:05:8B:66:4C:88:5E:D3:A6:57:5B
X509v3 Authority Key Identifier:
keyid:BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ee:02:52:c3:ca:43:e0:05:88:17:af:91:76:66:51:9d:e7:
18:ee:36:0e:21:38:f6:48:09:d8:1f:0f:1c:4b:52:bb:2f:1b:
f1:08:06:9b:d5:cd:33:bd:81:51:74:53:42:35:76:08:af:82:
54:59:ed:19:6b:9f:51:9f:bf:a4:82:d1:47:fd:84:5e:86:f9:
9b:5c:c8:b0:73:c3:fa:61:6a:1d:5b:23:5d:24:dc:2a:bd:06:
63:d6:4e:41:14:b6:6b:bd:33:ec:cc:50:8b:ec:3d:3f:f1:4b:
7d:09:b1:d5:74:6f:97:91:e5:89:79:73:48:de:a3:79:f1:ed:
69:36:2e:91:eb:2a:32:c2:25:58:d9:f0:a0:74:4d:3b:b8:9c:
2a:28:64:84:8f:fb:b6:26:88:55:f4:e6:8c:90:18:7d:a4:7e:
b5:4c:ab:57:c3:54:be:c3:24:97:fe:9d:30:7d:d9:73:26:23:
3c:c2:d3:06:a3:1a:5f:90:d5:05:98:a8:55:ae:0f:e7:30:ca:
95:3a:fc:56:b5:8c:f0:23:44:2b:77:79:85:8e:c5:ed:01:12:
18:ab:3f:2c:24:48:70:37:82:52:50:b0:7b:9a:a9:37:35:35:
3e:93:8e:0e:e9:9a:a9:a1:21:2c:9c:41:23:c4:5c:84:82:41:
5d:dd:a6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:03:54 2026 by rpki-client