Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
File: vqbKA6jBNc7q4jLJN8HuC6uH54I.mft (raw, json)
Hash identifier: Pr8hkBJlvk51Bk7JJCcmhKisZb2sY5YhmsM1V7uMSa4=
Subject key identifier: 04:7B:55:2E:8D:20:82:B0:8A:B0:86:76:52:46:9D:90:6F:69:5D:9D
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Certificate issuer: /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial: 01A12B0D2C73FEDAA6BB5A40C5556C314570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
Manifest number: 12B7
Signing time: Sun 11 Oct 2026 13:00:45 +0000
Manifest this update: Sun 11 Oct 2026 13:00:45 +0000
Manifest next update: Mon 12 Oct 2026 13:00:45 +0000
Files and hashes: 1: DK-XBDjvEUwNxsBmzqo8J9rquEU.roa (hash: r9pghvHN2qAAy+qaZ1juJScZuaWtFiuLGSgGufvS8U0=)
2: RHbtZEqS9voRzD3Cx6qusZzVcjk.roa (hash: Ee6+Bb2Hz6FnUnTIFNwJzEYwDsvhHHrdj4/evTKgHy8=)
3: vqbKA6jBNc7q4jLJN8HuC6uH54I.crl (hash: CIQgTbTZuC/CkWxKb4bTPE1EyYV4t1fTEGNQQm+0+Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:2c:73:fe:da:a6:bb:5a:40:c5:55:6c:31:45:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Validity
Not Before: Oct 11 13:00:45 2026 GMT
Not After : Oct 12 13:00:45 2026 GMT
Subject: CN=047b552e8d2082b08ab0867652469d906f695d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:cd:bd:c5:76:10:a7:52:ee:e1:f7:e8:99:
74:c9:f6:e8:67:b8:59:28:dc:07:16:3d:69:51:42:
9a:69:de:fb:6e:81:93:97:0b:a5:63:a2:91:98:d7:
74:49:d1:a4:80:48:72:20:89:af:58:ce:ce:d8:e4:
55:29:1f:27:85:ad:55:48:89:3d:a5:ff:9d:f9:db:
9a:60:80:05:57:87:77:6d:81:2d:41:29:4f:c4:72:
91:d8:63:74:40:c6:2e:ef:a9:1b:ad:0d:4e:d8:fc:
9b:3c:c9:45:16:60:5a:95:27:32:65:c7:24:aa:9a:
2e:08:0c:05:9e:1b:3c:60:0b:2f:75:5e:83:67:d2:
81:35:e2:45:91:20:54:f9:c6:31:b0:17:84:c1:90:
f1:72:e5:71:b3:91:fe:4a:f2:c3:5d:e7:62:1a:cd:
cf:e0:54:2e:f9:ce:84:a7:d8:7a:fc:1e:e9:f1:b4:
3a:5a:a4:c0:82:f7:fe:6d:0c:bb:b7:bf:21:dd:9f:
fa:a6:2d:40:4b:bd:da:66:1d:10:0a:b1:52:da:59:
0d:b3:1c:53:7a:4e:a3:38:a7:e7:72:48:fd:17:12:
85:67:d9:86:f5:8a:59:94:d9:0e:a3:dc:7e:87:68:
2d:81:97:26:af:49:2d:5d:17:b1:dd:53:0e:07:94:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7B:55:2E:8D:20:82:B0:8A:B0:86:76:52:46:9D:90:6F:69:5D:9D
X509v3 Authority Key Identifier:
keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8e:cc:71:00:54:52:cb:99:49:75:1a:d3:a2:cd:ea:c6:18:
9f:6c:5b:b2:7d:44:dd:9d:b2:66:fa:c5:e8:04:93:93:5e:8d:
8c:50:02:13:ca:72:4f:fd:e2:38:a2:a7:36:6b:b6:3e:98:d0:
f4:0f:76:2d:fa:5f:6a:66:0a:8b:74:f4:90:9c:3f:86:77:36:
2c:fd:33:3e:13:f6:a7:26:49:c9:dd:e1:c6:9f:22:9b:15:f8:
68:c5:31:4a:2e:63:2c:39:cd:5a:44:39:e0:33:ea:35:b5:a4:
19:c7:f6:24:0b:e5:b1:30:9a:ae:c1:0c:83:94:4d:ac:c9:ea:
57:5c:af:a3:e0:bc:2a:de:98:a9:40:85:61:82:ea:49:f5:28:
d7:d1:60:cc:66:3e:d5:01:c7:a3:fc:94:57:63:48:c7:40:3d:
75:b9:13:15:ae:e0:27:8b:e5:77:34:3f:7f:9c:58:4c:7b:37:
f8:69:5a:e2:51:f3:c5:1f:9f:d5:8e:14:6e:89:a5:1d:23:f5:
82:72:a8:36:08:26:79:05:bf:c7:ab:1e:6c:c4:3e:06:5b:06:
db:70:14:15:cf:c8:38:1e:44:41:68:f7:bc:ac:c5:15:b5:50:
bb:29:49:07:a4:ad:ea:2e:2e:b6:b1:1e:4b:fb:f9:83:d0:41:
75:1a:ea:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:52:43 2026 by rpki-client