Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
File: VqAi3rCSj10aCl-wDpbK1MfZEdg.mft (raw, json)
Hash identifier: 9O0cohtQ2VCUdPYfSqbfozrnGDd8BTwNyTZAq0mLiQg=
Subject key identifier: CC:AE:6A:9B:0E:44:35:3A:24:A1:FC:E8:32:62:A5:AD:96:F5:88:3F
Authority key identifier: 56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8
Certificate issuer: /CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
Certificate serial: 019D28BBEE809B164EA76955B026D24358C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:01:38 +0000
Manifest this update: Thu 26 Mar 2026 06:01:38 +0000
Manifest next update: Fri 27 Mar 2026 06:01:38 +0000
Files and hashes: 1: VqAi3rCSj10aCl-wDpbK1MfZEdg.crl (hash: m5TzZztaG7IWfkpPU3PzWDxkemQ19FD/8O7CyPam2Ic=)
2: suOB_ZQoCS-jB4-4M7W0CkzCA10.roa (hash: fu8wltWFAdaXQHJ+Qv7XTp7V+UFU1J7Zj9suudIqJF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:ee:80:9b:16:4e:a7:69:55:b0:26:d2:43:58:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
Validity
Not Before: Mar 26 06:01:38 2026 GMT
Not After : Mar 27 06:01:38 2026 GMT
Subject: CN=ccae6a9b0e44353a24a1fce83262a5ad96f5883f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:5b:d7:41:60:c4:52:5a:17:fd:36:c6:18:
b5:9d:4f:94:68:b6:fe:3f:ec:ca:07:69:b5:c3:4a:
f2:48:d7:83:79:d0:bb:f1:9d:f9:37:4d:60:ab:12:
43:a9:55:42:77:6a:2f:e6:18:ac:30:ba:20:b2:8c:
e2:f7:dc:c8:a8:a6:6c:e0:0f:e3:00:64:c3:7e:ff:
d1:c8:d1:4d:9e:7a:9c:8c:de:02:63:db:eb:32:5d:
02:c3:2f:71:eb:3c:a8:65:2e:3e:bf:12:4a:4c:1a:
45:d2:65:59:d3:7c:44:45:ba:57:05:63:f3:af:64:
6f:cd:7c:3b:86:02:1f:b9:08:12:17:93:69:7a:c7:
8b:e2:93:f7:d7:43:69:77:28:d3:9d:6f:21:45:1e:
d0:43:e1:a7:d5:67:71:e5:6b:0c:dd:2c:47:fe:8f:
fc:3d:30:1b:5d:62:4c:5f:77:b9:47:d9:39:3b:60:
0a:ab:a5:09:2a:bd:f8:c9:58:3d:fe:37:65:a5:02:
00:a4:f6:1b:7d:79:bc:11:6a:4a:4f:d3:a8:20:5e:
b0:69:90:96:01:57:9b:a1:68:72:fa:ea:4e:99:fe:
37:c4:d7:1c:57:48:29:2e:8d:1b:f1:cc:fe:28:db:
94:6c:ee:6c:55:bd:53:eb:dd:a1:9b:19:00:c4:ae:
95:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AE:6A:9B:0E:44:35:3A:24:A1:FC:E8:32:62:A5:AD:96:F5:88:3F
X509v3 Authority Key Identifier:
keyid:56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c6:99:ff:cf:eb:80:31:81:f1:6b:44:e5:d9:60:0c:72:bd:
5e:91:3a:d9:e0:7c:4d:ca:04:cb:5b:4d:7e:cc:b4:b7:4b:49:
a4:c5:7a:3f:13:0d:ee:ea:04:81:8d:5f:9b:fd:e4:1e:68:93:
2a:68:b7:e3:ae:cd:c5:31:2d:30:6d:ea:e9:8b:a7:5f:65:4c:
81:80:22:11:a7:49:96:00:99:0e:4b:36:15:66:82:fd:79:72:
bb:60:26:88:5f:af:04:84:12:fd:fb:62:4d:22:03:e1:21:11:
ef:3d:eb:26:c5:37:f0:37:59:4a:3f:d4:01:8f:e7:20:fb:81:
c7:5c:53:55:16:63:f8:a7:bb:34:21:24:b8:25:a5:cf:50:8a:
d4:5a:7f:fc:a4:97:b3:6c:a0:35:a9:54:34:e1:c7:bc:a9:99:
4a:69:0e:c5:5e:1a:b5:7a:e0:7e:8d:5c:a1:54:49:95:47:dd:
4d:f7:65:e7:91:2f:d8:b8:e2:99:fc:4b:2e:f0:28:95:f8:4c:
e2:d6:02:fb:ec:72:a2:dc:46:40:f2:aa:39:82:bc:e4:e0:d6:
42:16:79:61:75:9d:08:98:93:7c:ab:34:3d:52:27:01:fa:5d:
6f:79:a6:14:7e:6d:5e:37:15:78:c3:6f:d7:ab:55:34:f6:09:
cd:bb:b2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:48 2026 by rpki-client