Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
File: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json)
Hash identifier: tcwImB2r6jxquP5Wv2jS0LupvqY45t3Gc3J23wiJ9v0=
Subject key identifier: 48:AC:74:9C:E2:50:E4:8F:C6:64:17:DB:39:6F:9B:30:86:C4:43:5A
Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
Certificate issuer: /CN=bea7769343c691f675bb369253cb3f6fc304b01f
Certificate serial: 019D2B4EE2074C9B3CEFD01190D8DAADA331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
Manifest number: 0C2B
Signing time: Thu 26 Mar 2026 18:01:22 +0000
Manifest this update: Thu 26 Mar 2026 18:01:22 +0000
Manifest next update: Fri 27 Mar 2026 18:01:22 +0000
Files and hashes: 1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: U4vEQtN7PMtODcy/BHeP4z2Xml8Cramh1ZdCcllyrQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:e2:07:4c:9b:3c:ef:d0:11:90:d8:da:ad:a3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f
Validity
Not Before: Mar 26 18:01:22 2026 GMT
Not After : Mar 27 18:01:22 2026 GMT
Subject: CN=48ac749ce250e48fc66417db396f9b3086c4435a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:cd:34:60:dd:3e:f1:13:36:63:03:23:5f:
a8:a9:93:15:46:a5:9d:41:72:a6:a1:ff:01:57:81:
d7:b5:35:88:3e:c1:f9:e5:8c:50:16:ac:0b:53:08:
90:ca:6f:4b:f1:9e:ef:2c:ca:bb:62:9d:af:99:50:
ce:89:b3:75:b7:d5:31:8e:8f:ae:ae:ed:d2:e0:b4:
37:47:13:03:4f:bb:79:6e:3e:df:5d:68:66:7c:99:
97:da:1f:ea:f9:1f:99:a0:1f:2e:22:eb:41:94:fc:
da:a0:4d:49:db:c9:8f:7b:b8:c2:64:61:c3:cf:da:
81:67:60:bd:6d:8d:02:d4:bf:9d:6d:91:8b:76:48:
cb:ec:1e:21:44:51:61:b8:8b:8f:1b:a4:de:d0:3a:
16:78:80:8e:27:2d:19:ae:a3:ad:1b:ea:12:3a:56:
eb:b4:7f:51:bc:fa:99:1d:92:ef:7b:e6:b7:d1:56:
43:e7:5c:f7:06:d0:d8:b9:63:c1:88:9d:78:0d:66:
37:30:aa:24:df:fc:75:54:8d:f4:f6:4b:43:d0:b4:
e5:86:57:6f:d1:2c:aa:a4:4a:67:40:ea:8e:0f:af:
e4:2e:c0:e5:89:82:56:2b:6c:73:d0:3c:8c:85:67:
8d:7a:14:89:34:72:12:18:bb:e7:d7:86:7b:fa:9c:
f0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AC:74:9C:E2:50:E4:8F:C6:64:17:DB:39:6F:9B:30:86:C4:43:5A
X509v3 Authority Key Identifier:
keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:10:6b:a0:54:d5:a7:d9:cd:30:c1:95:62:be:ae:53:7e:27:
0f:bb:ae:2d:03:8e:fb:d0:1b:4a:27:4e:14:d0:af:38:0c:43:
9e:a2:c5:47:8f:3e:5c:3f:91:58:78:c1:2c:52:d6:46:e9:31:
8c:6b:03:6b:ac:fa:f7:b2:8c:19:27:fa:35:69:80:32:16:12:
20:f5:94:ea:d4:72:d7:28:5d:1e:83:38:42:00:2e:d0:c8:11:
20:88:51:3c:49:c2:08:d0:04:29:fd:e5:1e:a9:a0:cb:a2:96:
bc:dc:fb:c6:32:18:35:77:82:7a:57:83:db:5c:7b:56:d0:b3:
2c:70:eb:fe:0f:9f:a4:8d:82:c6:f8:e2:c3:9d:45:6e:1a:98:
d3:97:e5:6c:ff:47:d9:b3:45:99:f2:10:b2:90:ef:81:3c:b8:
ce:1d:85:ff:a7:c3:8d:aa:0c:4b:96:f7:d5:84:36:ac:79:f2:
9b:1d:06:f7:59:ff:0c:ac:c9:53:7f:bb:1d:85:49:b1:ab:5c:
90:58:8e:f4:58:18:2b:40:5a:fb:3f:a9:f8:59:74:80:88:24:
b7:b1:12:25:94:29:19:b5:69:15:69:95:62:d7:34:84:dc:a8:
6d:83:fb:bc:84:be:48:07:d6:db:db:c1:4e:72:15:59:ee:92:
50:58:7c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:32:22 2026 by rpki-client