Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.mft
File: VQde88Il_ro2rGM15il3wabY5zY.mft (raw, json)
Hash identifier: baXQcDqayipzLX6ipn/U2NjjmgfAJG6GApquBHmu8gU=
Subject key identifier: C5:03:03:6B:0F:D7:C5:52:7C:81:B5:B3:08:70:90:E0:70:D6:F2:70
Authority key identifier: 55:07:5E:F3:C2:25:FE:BA:36:AC:63:35:E6:29:77:C1:A6:D8:E7:36
Certificate issuer: /CN=55075ef3c225feba36ac6335e62977c1a6d8e736
Certificate serial: 01A0DBA92229C15D49176F7E41571E7CD2EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQde88Il_ro2rGM15il3wabY5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.mft
Manifest number: 42
Signing time: Sat 26 Sep 2026 03:01:29 +0000
Manifest this update: Sat 26 Sep 2026 03:01:29 +0000
Manifest next update: Sun 27 Sep 2026 03:01:29 +0000
Files and hashes: 1: VQde88Il_ro2rGM15il3wabY5zY.crl (hash: PO7iqMvyCW/SFBtB27GDdaVo4xJ0mkNT90yq8vtZC3Y=)
2: o6X1xXFcVuNeFtHtNbTAwmHed4o.roa (hash: 5N9Ci5RBIs/RxRxfkx3BB13wY8BUdFcia7okNDTuesU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQde88Il_ro2rGM15il3wabY5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:22:29:c1:5d:49:17:6f:7e:41:57:1e:7c:d2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55075ef3c225feba36ac6335e62977c1a6d8e736
Validity
Not Before: Sep 26 03:01:29 2026 GMT
Not After : Sep 27 03:01:29 2026 GMT
Subject: CN=c503036b0fd7c5527c81b5b3087090e070d6f270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b7:80:59:80:86:d9:8d:2d:af:a5:0d:7a:2a:
bc:66:5e:66:37:59:eb:82:2a:d7:c4:3e:3c:68:6d:
d8:fd:7b:7b:74:fe:f8:ec:39:13:7f:f2:54:3d:54:
90:d3:c0:ab:b1:6f:a5:01:42:a6:f0:8c:ae:67:35:
1c:38:a3:35:3e:5f:a4:0d:92:83:80:66:88:1a:db:
89:42:9a:45:03:a4:e9:d1:41:fb:96:a2:48:2f:31:
b3:47:ec:9c:14:70:e7:e6:9b:ca:f8:d1:ef:a6:52:
b4:8a:0b:42:03:4e:a4:60:59:fb:8c:d8:df:c4:4b:
d4:97:1d:ed:40:f8:8a:4e:9d:bd:ae:1b:52:08:3f:
83:d5:a2:a5:e7:98:2b:68:6f:77:4e:27:18:e9:ca:
6d:2f:14:48:bb:ca:af:dc:f7:96:0f:96:3b:a2:24:
27:1b:9c:eb:67:1c:c7:09:42:9a:b1:90:37:8c:6e:
32:dc:3f:92:4c:d6:93:9c:1b:60:db:a7:41:dc:6c:
fc:85:1c:c2:e7:0c:f6:42:6b:13:db:07:95:4f:86:
e3:65:c0:48:c3:04:fb:8e:83:a8:07:1b:6c:e3:6d:
97:69:15:fd:31:d9:1f:bb:51:77:c7:3d:db:f1:8f:
4f:35:e3:86:55:f9:98:c3:88:67:49:ee:ec:5f:fb:
25:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:03:03:6B:0F:D7:C5:52:7C:81:B5:B3:08:70:90:E0:70:D6:F2:70
X509v3 Authority Key Identifier:
keyid:55:07:5E:F3:C2:25:FE:BA:36:AC:63:35:E6:29:77:C1:A6:D8:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQde88Il_ro2rGM15il3wabY5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0b:80:b1:16:10:81:f1:c2:c7:16:e0:01:39:a5:7f:99:ef:
2a:2c:89:09:03:02:00:bb:b5:db:2d:28:98:34:16:d0:9d:b8:
3a:f0:87:83:ab:95:6a:62:8b:ea:3a:66:e5:90:0e:f2:19:11:
45:aa:7e:c3:66:05:ad:ca:56:19:e7:ef:ed:31:ff:f5:b8:c1:
56:f4:2a:2c:6a:f7:db:2c:62:63:05:c5:83:a9:da:5b:16:13:
45:57:8b:99:ed:47:50:3e:c0:11:ec:72:39:8c:d7:98:cb:13:
6d:0d:42:3c:8f:5a:36:4b:15:71:d5:3c:02:99:d5:e4:9f:fe:
54:4e:3f:cf:61:b2:ed:61:30:e6:ba:b9:34:d2:53:74:35:18:
ee:e5:f1:9d:f1:2e:23:6f:ca:31:3a:ef:67:72:4e:3a:23:b8:
6e:03:45:74:36:62:cb:33:bb:22:75:92:90:09:a3:e3:fc:50:
d6:25:9a:bd:bb:49:3a:13:7f:37:90:cd:a5:55:3a:25:a3:5b:
1e:84:b3:8a:48:67:89:b8:15:c2:52:04:b8:8f:85:ac:b5:c7:
62:e1:e1:73:3d:df:db:85:95:4f:86:bd:30:8b:88:2e:63:ce:
d2:f4:13:d7:73:ad:21:75:2a:6b:58:4d:af:a2:55:77:10:b8:
62:64:ec:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:08:52 2026 by rpki-client