Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
File: vqbKA6jBNc7q4jLJN8HuC6uH54I.mft (raw, json)
Hash identifier: Dndhelht/i00mQiP3xoDZUizpEECU7j968CTDJVJNNY=
Subject key identifier: DC:6B:0E:C6:0C:33:80:23:92:B2:94:18:37:36:06:E3:3E:9C:62:AB
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Certificate issuer: /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial: 019D27A94691C9C93D546BAF4E63825CC90A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
Manifest number: 10A3
Signing time: Thu 26 Mar 2026 01:01:38 +0000
Manifest this update: Thu 26 Mar 2026 01:01:38 +0000
Manifest next update: Fri 27 Mar 2026 01:01:38 +0000
Files and hashes: 1: DK-XBDjvEUwNxsBmzqo8J9rquEU.roa (hash: r9pghvHN2qAAy+qaZ1juJScZuaWtFiuLGSgGufvS8U0=)
2: RHbtZEqS9voRzD3Cx6qusZzVcjk.roa (hash: Ee6+Bb2Hz6FnUnTIFNwJzEYwDsvhHHrdj4/evTKgHy8=)
3: vqbKA6jBNc7q4jLJN8HuC6uH54I.crl (hash: YwYbr8dZYKMsyQzVqiGnoXsym9m20T4W5Sg+G8cKWpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:46:91:c9:c9:3d:54:6b:af:4e:63:82:5c:c9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Validity
Not Before: Mar 26 01:01:38 2026 GMT
Not After : Mar 27 01:01:38 2026 GMT
Subject: CN=dc6b0ec60c33802392b29418373606e33e9c62ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:bf:f4:56:ca:2d:f8:70:c3:4e:19:eb:cd:f5:
04:b0:83:df:de:1f:0a:3d:49:02:85:93:9f:56:7e:
66:92:3e:b9:b0:1c:3a:dc:55:ac:52:2e:fe:c7:2e:
87:77:6c:ac:26:a1:71:b9:49:a4:42:8c:9d:96:46:
0e:c3:aa:85:4b:1e:92:d3:91:43:c2:8b:e6:73:59:
51:b0:a6:26:04:20:e2:59:6d:07:3a:bf:96:8f:33:
63:29:17:2f:0c:67:0c:69:e2:39:ac:8b:95:cd:f4:
2e:93:39:4d:8f:95:20:cf:33:3c:44:3a:1c:c6:3a:
40:54:a8:1f:94:bb:66:cf:ba:16:8b:7a:bf:62:58:
c3:4c:20:a7:c1:99:b4:c9:65:a7:ec:5f:09:3b:68:
a5:ab:f5:ba:cf:6a:ce:62:be:de:30:37:23:fa:68:
b9:1d:d1:b7:45:61:22:f1:97:68:3a:3c:1f:a4:37:
c5:6a:b9:54:84:b0:d1:af:af:aa:a0:56:87:83:10:
e8:76:c8:ef:e6:92:5f:83:a6:73:72:de:74:27:38:
c0:05:2f:ea:8e:23:54:36:e6:b1:08:29:c2:58:cc:
1e:43:a5:67:5b:1e:12:02:7b:8e:43:5d:7a:dc:23:
16:6c:18:86:ad:ca:f9:d9:d2:26:96:e6:32:30:60:
d9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6B:0E:C6:0C:33:80:23:92:B2:94:18:37:36:06:E3:3E:9C:62:AB
X509v3 Authority Key Identifier:
keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e2:32:ff:2c:5d:e8:46:dd:0c:3a:87:f2:af:22:4c:4a:f9:
2c:64:f7:45:99:a5:8a:4d:32:21:20:db:93:d8:d9:c5:b6:2a:
a9:3d:88:c3:84:6a:81:3e:64:24:7d:89:c2:0d:fc:97:c1:32:
87:4b:77:2c:7f:b5:42:8d:32:96:d5:63:dd:b8:1f:48:e4:1a:
66:40:eb:15:60:02:9f:be:3d:52:a9:66:9e:ff:c4:11:23:e6:
ed:7b:b1:0d:03:6a:c9:2c:3c:50:67:3f:a5:87:82:92:76:d8:
34:c5:7a:b6:d6:a5:ed:da:c2:94:a5:58:93:ef:d7:25:e4:3c:
c8:1c:04:cb:44:18:b1:57:96:2b:21:e4:c4:6a:38:b3:1c:4e:
00:60:c0:ff:98:f6:87:f1:47:53:92:11:e6:1e:2f:50:29:2d:
9e:c3:d1:ee:4b:4d:d8:6d:a4:d4:83:6c:be:7d:bf:29:6c:21:
27:73:83:05:a8:17:eb:e6:65:4a:3c:c2:f8:1c:97:bc:9f:93:
30:3c:e1:2f:ed:ef:48:9a:a9:14:0d:90:77:e0:17:49:aa:0f:
56:8b:89:f8:64:7c:89:6e:60:64:62:31:c1:81:a9:aa:3d:4c:
9d:a4:4b:96:3f:ad:37:72:22:0d:d5:1e:62:51:c0:be:a8:29:
eb:6a:4f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:36:55 2026 by rpki-client