Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
File: VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft (raw, json)
Hash identifier: cBnNq1prS/dMntMRXgyMC6IJPlLRoyIV2FIP23obKFE=
Subject key identifier: CB:1D:1E:B4:3D:BE:53:6A:36:A1:1F:0B:B5:4E:0F:34:7D:29:6E:5E
Authority key identifier: 55:04:D4:A9:A7:86:C8:14:9D:AC:52:AC:5D:A3:72:12:03:AC:3A:37
Certificate issuer: /CN=5504d4a9a786c8149dac52ac5da3721203ac3a37
Certificate serial: 019F9436AF00CE64644A07ADA42BEE7F1129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQTUqaeGyBSdrFKsXaNyEgOsOjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
Manifest number: 0148
Signing time: Fri 24 Jul 2026 13:00:39 +0000
Manifest this update: Fri 24 Jul 2026 13:00:39 +0000
Manifest next update: Sat 25 Jul 2026 13:00:39 +0000
Files and hashes: 1: 797n5tNvO4FTahlhh50sMolaFFk.roa (hash: epHzyMWa5qoGZ2kXq/ODWaLhqBNZGkxNuRScN/tpqOk=)
2: VQTUqaeGyBSdrFKsXaNyEgOsOjc.crl (hash: PEnxjMPQP66squ0Fj3fW0jhTij2vuaZJ6lHyFdeexbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQTUqaeGyBSdrFKsXaNyEgOsOjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:af:00:ce:64:64:4a:07:ad:a4:2b:ee:7f:11:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5504d4a9a786c8149dac52ac5da3721203ac3a37
Validity
Not Before: Jul 24 13:00:39 2026 GMT
Not After : Jul 25 13:00:39 2026 GMT
Subject: CN=cb1d1eb43dbe536a36a11f0bb54e0f347d296e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5a:da:7a:2f:33:d5:34:cf:f4:2b:17:d9:83:
24:ba:99:e8:c4:0f:7b:b0:74:39:af:50:8a:27:d9:
ac:93:e3:e0:94:27:f2:92:6e:f4:e6:91:42:7f:66:
f2:b1:93:e7:9a:24:f8:b4:2b:3e:f4:77:7e:89:6b:
e8:1e:44:23:d9:d6:b9:ca:74:e0:d7:27:96:ce:45:
a5:1f:9c:e6:8b:e0:14:f7:5a:79:3c:b6:50:3e:4e:
2d:8f:73:4a:50:ea:0b:10:60:e0:5f:25:1f:6a:85:
b1:a8:21:d5:f1:be:ce:49:b9:4e:c6:56:00:13:18:
01:1b:46:5d:07:4d:ce:53:1a:c8:86:57:51:5a:f9:
e6:fd:ae:c7:3d:d9:48:e7:c1:1c:40:6f:2c:f3:fa:
da:a0:58:e7:a5:60:6f:45:ad:40:cb:5c:85:7c:05:
d9:e7:78:5a:cf:3b:b4:80:f3:92:40:24:b3:a2:6b:
0a:ec:29:29:05:ad:58:9a:ce:f7:60:59:c7:16:c6:
32:22:cc:10:f5:47:9d:d9:c6:d1:6b:f5:e9:9a:17:
b9:30:15:c6:0c:8c:fa:49:22:f8:59:08:13:2a:c3:
52:df:f4:63:d8:42:d1:7d:31:a6:fb:0f:ee:5f:fa:
86:7f:fe:08:f8:be:03:fa:3d:98:0e:84:c0:7f:ae:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1D:1E:B4:3D:BE:53:6A:36:A1:1F:0B:B5:4E:0F:34:7D:29:6E:5E
X509v3 Authority Key Identifier:
keyid:55:04:D4:A9:A7:86:C8:14:9D:AC:52:AC:5D:A3:72:12:03:AC:3A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQTUqaeGyBSdrFKsXaNyEgOsOjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:67:69:5c:e6:70:bb:c3:93:19:68:4c:9c:78:b3:f1:8a:42:
b2:fa:29:da:0e:73:ec:7c:35:82:df:65:12:81:23:f9:2a:c6:
4f:0b:8b:a6:08:af:a7:af:c7:20:be:8f:c8:19:7f:61:e9:12:
ba:5c:c7:7f:42:7b:59:d1:59:51:c5:71:f4:18:69:9b:95:c2:
07:44:94:fd:de:d7:64:ea:37:a0:6e:af:ed:bf:46:6f:f1:3e:
2c:72:9f:ec:4e:b4:33:66:e3:87:dc:53:d5:4f:0e:e5:1e:f5:
29:03:1d:6c:2b:35:80:23:56:7f:e1:de:bf:53:87:f6:be:d3:
6e:36:c6:72:d1:6d:36:56:75:e8:1d:78:f9:aa:7b:5a:33:94:
ab:49:ff:1f:06:b2:c1:d8:44:90:32:6e:a5:e2:46:da:bd:a0:
a9:51:fa:2a:8c:09:bc:64:48:88:9e:05:2c:ec:c1:1b:cc:23:
11:a3:ea:31:e6:c4:08:69:92:48:93:cf:25:bc:00:80:32:94:
a3:45:c7:f5:4d:89:b9:54:5e:af:2c:40:37:c4:98:4f:25:8b:
50:c9:3c:11:87:74:21:50:07:c9:52:e5:ee:d6:c2:da:62:07:
7f:3b:fb:01:cb:97:88:5d:32:04:b0:f5:7b:11:85:22:de:81:
6a:fc:ad:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:45 2026 by rpki-client