Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
File: VQt8DIuuYQ9-UZwEhaR3O860jas.mft (raw, json)
Hash identifier: 7Mmq8FkECOfEjAfX9MGD9CV7F/HJjlm2XZ9iWv7tIpc=
Subject key identifier: 8D:A2:62:0A:CF:C9:12:28:11:FB:66:FC:7D:15:14:29:B9:AA:3E:9E
Authority key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Certificate issuer: /CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Certificate serial: 019D292998A209DAAED378A353141A41C33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 08:01:25 +0000
Manifest this update: Thu 26 Mar 2026 08:01:25 +0000
Manifest next update: Fri 27 Mar 2026 08:01:25 +0000
Files and hashes: 1: VQt8DIuuYQ9-UZwEhaR3O860jas.crl (hash: d1eMbe63rnnndSNSNH4r4BWYOlyoEfzJYmQmxCNfziM=)
2: Yk7EtxaPSgexIl9t_80_swVzD3M.roa (hash: yR1cez1xIT9IyHabmgmwE9BLuhvd89zm0L14ABJdEh0=)
3: bxUJOGzDbjV-xgkeVZsGg7PhFAM.roa (hash: q45eE9k3WP1QL6ev2bsePVxIkJymW9aUUerqRFFx9WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:98:a2:09:da:ae:d3:78:a3:53:14:1a:41:c3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Validity
Not Before: Mar 26 08:01:25 2026 GMT
Not After : Mar 27 08:01:25 2026 GMT
Subject: CN=8da2620acfc9122811fb66fc7d151429b9aa3e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:85:dc:cf:97:17:97:bf:ce:2c:71:92:43:
aa:e9:73:2f:06:75:17:88:2a:dd:54:99:6e:b4:13:
72:2e:88:4c:83:02:ab:c1:a1:e2:46:2a:01:fe:56:
1b:27:80:a3:bc:e7:3f:04:78:26:40:86:45:de:96:
c8:59:b3:75:f7:3a:54:ec:ac:e0:dc:0e:bf:aa:36:
11:d3:4c:29:31:13:18:d6:42:b3:77:1f:0c:c6:58:
b5:2a:e1:05:34:22:22:69:b2:97:14:9b:1c:bf:bc:
29:38:df:70:49:32:23:f4:6a:59:6c:61:aa:2b:f1:
b1:12:7e:88:50:e4:4b:08:a2:b6:13:64:a2:93:5a:
27:ff:0f:1b:e9:d3:dc:f6:bd:ea:a3:24:69:af:55:
75:58:6c:57:7f:ca:33:c8:7f:e4:7c:ec:8d:02:1a:
e0:7c:13:86:60:e5:8e:0a:f2:fd:81:1d:8a:40:a5:
a8:5d:da:d9:67:09:40:f6:5a:da:9f:4f:f1:fb:0f:
eb:86:fb:fb:0e:ac:2c:39:03:1b:3c:ed:51:42:cd:
bd:16:9c:ad:cb:1a:7e:95:42:14:de:2d:be:76:3b:
b3:f7:fd:1e:7a:38:ee:ab:29:67:13:08:c6:47:a8:
1d:39:fe:c8:9b:51:44:8a:a9:43:f4:9e:9f:b1:f3:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A2:62:0A:CF:C9:12:28:11:FB:66:FC:7D:15:14:29:B9:AA:3E:9E
X509v3 Authority Key Identifier:
keyid:55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6d:d3:3b:df:a3:6e:30:cc:cc:35:51:89:03:b1:d7:01:86:
8f:75:be:6d:30:87:0b:29:ba:78:f9:bf:b5:35:c6:49:86:92:
53:e7:f8:e7:5c:fb:e0:d3:f0:9d:eb:f8:1f:c4:e2:62:92:93:
0b:b9:fc:2a:a5:9c:52:fb:a7:ae:21:2b:cd:f3:62:50:02:31:
b3:01:75:2d:4a:38:da:3c:28:38:cc:e2:68:00:dc:9b:db:8e:
06:77:77:2e:33:64:14:93:82:43:ba:58:4d:8a:43:44:ce:be:
b9:8d:b2:6e:ad:96:d4:43:02:0b:e8:34:85:e4:d2:d6:07:67:
f9:72:b1:f5:6c:3e:8e:14:5f:b7:58:4b:17:5d:a6:c6:b3:c1:
89:ae:67:bd:50:6e:44:23:40:14:7c:a7:bb:af:18:02:7c:96:
6c:7d:b4:56:13:2b:3f:2d:4e:eb:d5:d2:9c:47:41:50:37:59:
f5:41:76:d5:23:03:b8:6c:c4:f8:d8:ae:76:25:3f:5d:39:3c:
d8:6f:0e:48:2d:57:48:7e:0d:ef:0f:d3:93:d2:ac:ae:7b:d0:
54:c0:60:9c:ec:59:26:df:4c:a6:0f:44:31:83:c8:05:49:e1:
0b:cb:b1:c9:31:fb:d5:17:b2:e0:75:8a:a8:4b:5d:6b:24:b3:
94:56:98:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:14 2026 by rpki-client