Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
File: vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft (raw, json)
Hash identifier: FqeYpbU4y193RqWug2VCkmSolP+5rezR3uksPn0TpG4=
Subject key identifier: A6:D0:B0:DE:78:24:04:FF:F0:E2:07:4C:DE:F2:27:41:6D:C7:4C:FA
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial: 019D2AA93329BC157987753763CAEE77F1CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
Manifest number: 10C8
Signing time: Thu 26 Mar 2026 15:00:24 +0000
Manifest this update: Thu 26 Mar 2026 15:00:24 +0000
Manifest next update: Fri 27 Mar 2026 15:00:24 +0000
Files and hashes: 1: SCfxhTRg7vuqifF8bQRKgajG91E.roa (hash: wp0+S1qlwyLRk1HvINrBgxEXYo/XnKOOpIUSgnFHiUs=)
2: vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl (hash: 9nF1aTij8jWd7M7U65mFkRiVEvPm9K2jLciM193PL0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:33:29:bc:15:79:87:75:37:63:ca:ee:77:f1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Validity
Not Before: Mar 26 15:00:24 2026 GMT
Not After : Mar 27 15:00:24 2026 GMT
Subject: CN=a6d0b0de782404fff0e2074cdef227416dc74cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:6b:49:88:36:53:83:ad:ac:82:ed:8f:99:
07:3e:0f:e9:ad:3e:d7:76:00:df:b2:4b:df:0a:6e:
e5:5d:82:88:1c:9a:bb:2a:57:39:38:3d:35:6b:94:
1e:b5:eb:bd:8c:e1:8a:65:8f:d9:04:78:9e:06:1f:
db:be:40:14:3c:77:b4:b9:2f:52:f5:2a:0e:7e:6f:
5c:88:50:a3:09:c2:69:85:03:a7:5d:43:3a:36:7d:
57:63:a9:71:62:52:eb:9e:2a:e7:81:d9:7c:f1:68:
27:59:76:57:6e:28:d3:98:4a:f0:17:11:25:66:26:
42:a1:dd:da:c8:b9:ce:b7:d9:b7:85:4a:50:fb:9a:
0d:58:b1:96:de:f7:92:91:fc:e9:4d:35:46:f0:55:
69:95:de:bc:8a:4e:07:25:b2:7c:51:32:e9:68:9f:
16:61:a3:a7:11:2d:a7:5f:3d:0d:7a:79:90:aa:ea:
2c:dc:b2:93:da:80:73:f5:e9:52:d2:8c:62:e0:4f:
a2:5e:5d:88:e5:0f:af:78:7c:d9:b2:a8:8a:7c:06:
53:33:a8:c9:8c:b5:ff:e4:21:e4:f1:0e:19:6c:79:
03:ab:07:90:71:57:c8:52:d7:ff:f8:18:71:1f:e1:
9f:9c:c2:84:78:a2:b6:e8:d1:06:9d:f4:28:de:12:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D0:B0:DE:78:24:04:FF:F0:E2:07:4C:DE:F2:27:41:6D:C7:4C:FA
X509v3 Authority Key Identifier:
keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:63:73:74:ec:65:3d:80:45:d1:17:52:b5:9b:a6:3c:87:23:
99:ca:b4:ab:83:09:1b:20:fb:6a:72:04:9c:c1:08:eb:85:d8:
e8:ca:57:89:71:8e:aa:2f:ec:25:92:4c:a0:7e:f5:36:46:87:
2f:a3:2c:28:bf:96:ed:ba:65:10:5f:c6:f9:04:67:88:d4:ef:
54:1a:90:e5:02:05:eb:33:8c:37:9d:62:40:c2:5e:86:b5:8d:
18:ff:84:c0:41:7d:46:1d:1a:be:0d:5c:00:8b:0b:9c:c1:d3:
42:eb:8d:3c:b2:7f:d1:1c:72:d0:e3:f9:bc:54:7c:36:8d:85:
3e:aa:14:72:b5:81:c0:24:61:6d:71:0c:65:e2:f1:ea:60:72:
fe:6a:1c:d8:3d:29:a4:af:db:0b:b6:69:02:70:b5:3e:81:ab:
a5:f0:94:f5:65:e8:d5:df:db:cb:3e:3e:e0:e4:cb:01:27:d1:
86:3c:81:0b:63:02:51:94:0b:92:a2:dc:2b:e9:75:cd:cf:ff:
8e:b4:30:f4:2d:2c:33:2b:95:ce:5a:61:bf:df:f6:d1:6d:82:
19:16:50:77:1e:8a:f6:2f:9d:56:87:c0:d5:be:d7:a6:e1:76:
14:8c:51:c7:8c:44:5f:e4:bf:3c:d6:a3:4a:54:07:d7:3d:2a:
8e:51:e1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:56 2026 by rpki-client