Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
File: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft (raw, json)
Hash identifier: O4djzYGLfZp+lC1gsJ6LHS9mdMvUzzaoHFI09ARDeMY=
Subject key identifier: A9:36:77:7F:50:16:F2:6F:D8:2F:B9:63:B1:8D:56:53:C8:47:D1:6B
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 019D258364E24F3276DBEBA84B18598F802F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
Manifest number: 05CB
Signing time: Wed 25 Mar 2026 15:01:01 +0000
Manifest this update: Wed 25 Mar 2026 15:01:01 +0000
Manifest next update: Thu 26 Mar 2026 15:01:01 +0000
Files and hashes: 1: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl (hash: SdxBchly5IbzP7tBhnKd8Yyf++Ol6gcEINHzP+XTXpc=)
2: Wjs_phSFXCf5P7VyIC49aTpiAXE.roa (hash: lvpNQeyfYNhi6y1BNKSvPAqUckUzrotwMitNw+e8iYU=)
3: Xk5XLLpJTJ0en8K-haNjI8W7sqA.roa (hash: dyeK7boJ0LjO1L8yQnVoytvIo19PRNiRm/STwxfeu9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:64:e2:4f:32:76:db:eb:a8:4b:18:59:8f:80:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Mar 25 15:01:01 2026 GMT
Not After : Mar 26 15:01:01 2026 GMT
Subject: CN=a936777f5016f26fd82fb963b18d5653c847d16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:67:99:34:f3:b7:55:d7:49:25:18:f3:de:b4:
08:86:27:4e:b9:6c:69:95:03:00:b0:de:3c:2f:52:
1f:54:eb:4a:c1:5d:42:18:01:b4:31:62:73:8d:b5:
1a:5e:c9:9c:be:1b:48:f9:be:4e:87:fa:70:34:fe:
83:71:2a:0a:26:7a:32:95:b2:73:79:d9:40:f4:49:
7b:f9:21:08:41:04:9f:bb:a2:57:b5:03:3f:6f:f3:
2f:3d:54:96:c8:de:15:a8:78:90:e5:66:06:48:bc:
97:86:b1:ea:77:ce:30:a6:b8:52:2f:f7:5e:3b:2f:
6f:fb:a6:b2:a4:15:bb:c5:43:48:d2:fa:09:f1:69:
2f:bc:18:9c:61:70:1f:d8:9c:08:82:9c:09:c9:a9:
0d:a5:89:95:a3:9b:f0:65:d1:b7:28:6a:db:95:a9:
f9:29:12:4a:03:60:31:84:d8:3b:7b:b3:79:36:f9:
7b:ce:53:26:79:5c:62:b3:10:ee:e7:2d:7e:64:cb:
eb:05:18:13:57:0d:d7:89:02:97:f3:2c:5f:b7:2f:
c7:5f:03:a7:76:17:39:48:7e:c2:dd:32:d0:0b:85:
12:9e:8e:63:c0:bf:a3:38:a1:89:19:f0:88:da:44:
3f:58:d1:f6:9f:86:5c:70:43:47:50:eb:6e:c6:a7:
78:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:36:77:7F:50:16:F2:6F:D8:2F:B9:63:B1:8D:56:53:C8:47:D1:6B
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:30:73:cb:ab:3f:af:3e:be:7c:26:00:87:8b:f0:d0:09:38:
c8:d6:74:0e:37:bc:b3:91:b7:1b:be:65:bb:51:c0:e6:54:c8:
b2:d4:6d:78:c6:60:63:76:70:2b:38:7a:46:73:a1:3c:7e:d8:
a0:9a:fb:aa:92:0f:6f:82:46:27:9b:0b:a5:50:87:2b:e5:63:
37:a6:c6:5b:98:02:0a:bc:a7:e1:3d:70:33:88:7f:ca:f2:dd:
b3:c3:17:ec:90:3e:f1:e6:96:e9:ce:64:b2:86:45:3d:a2:47:
5a:7d:12:ce:7e:0c:fc:bb:7b:56:3e:7e:b9:d4:30:5e:a7:bb:
37:71:24:52:9e:b6:29:00:8b:0b:96:fd:8e:6c:f0:d1:61:68:
19:8d:c0:66:12:3a:15:6e:66:52:6e:57:56:04:49:86:7e:03:
84:04:95:15:8c:6e:a7:6f:5d:99:df:56:24:12:0a:60:6f:43:
e0:20:dd:e4:ea:81:9c:c9:81:d9:71:2b:96:35:eb:c6:88:8d:
5d:de:79:ce:4f:25:17:1e:46:7f:84:52:57:02:25:4f:f1:d5:
de:1a:8a:03:26:27:49:50:41:2d:f4:49:f7:45:7e:73:6c:a2:
56:9e:a8:29:c8:58:94:40:0f:2e:f4:a7:70:4e:5f:ca:1c:55:
6e:28:1c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:16 2026 by rpki-client