Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
File: VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft (raw, json)
Hash identifier: gA8lkvAWjDYEaYqHmHQ6oGztM8o1zarUH8r4d+eLo0g=
Subject key identifier: CB:71:3F:60:4E:07:3F:C6:F5:50:09:C5:A5:94:58:39:4F:73:B8:84
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Certificate issuer: /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial: 01A0CCA3BA9C967FA4C66E621CD5DC295AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 05:01:17 +0000
Manifest this update: Wed 23 Sep 2026 05:01:17 +0000
Manifest next update: Thu 24 Sep 2026 05:01:17 +0000
Files and hashes: 1: VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl (hash: MG/BipMZOe3oT1gOEhvu+Yr6N/c6dryj6/ChjNds0Ws=)
2: f_tEfKd5hV2_TnfCTRyJP1Htm4A.roa (hash: NQ/xxQW3U9GvugxkG2jNW4TodVkdfN7Ntdsb5/uc4tM=)
3: yooXWAzXpfc4Is2Szi-_sKNZ1Dw.roa (hash: WORw69SpG7o5LnNs7NnksxUfsDlM6lj3W399eRGTTp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:ba:9c:96:7f:a4:c6:6e:62:1c:d5:dc:29:5a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
Validity
Not Before: Sep 23 05:01:17 2026 GMT
Not After : Sep 24 05:01:17 2026 GMT
Subject: CN=cb713f604e073fc6f55009c5a59458394f73b884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f7:b7:8d:8f:56:38:d4:85:91:db:db:c0:19:
57:b1:b3:c6:1d:5e:6f:79:89:f3:c7:9d:75:55:fe:
18:cd:04:69:92:73:ea:0d:6c:d2:dd:6d:a3:30:8d:
39:52:3b:0b:7b:a3:f7:9d:14:da:43:e4:cc:42:3f:
db:fe:14:e4:05:7f:6a:31:42:54:39:1c:94:14:58:
9e:93:a3:40:ee:5f:7b:2b:9a:9a:48:60:f8:94:63:
30:b9:91:e7:bb:ea:fc:bb:1d:b0:13:4f:3c:6d:4f:
b6:29:a6:47:01:b5:2a:a9:96:43:0b:e1:38:cf:39:
7e:89:cb:b6:d0:5c:8e:8b:eb:f7:0d:de:81:af:28:
0d:50:bf:1e:68:3e:f1:9c:cd:fe:56:9c:6e:20:10:
f6:b7:83:06:f8:0f:8a:5d:b9:df:74:62:93:4d:3f:
fb:5b:0d:36:51:a7:3b:6d:24:d9:de:41:28:73:60:
1f:a3:6c:f5:65:7a:3b:56:51:e5:b4:d7:5e:80:c3:
cb:31:b0:92:6a:97:ec:49:11:22:80:b2:1d:fb:bb:
f9:59:dc:e7:a2:b8:be:c3:85:e5:62:6c:00:d3:40:
2c:e0:a6:47:c6:ed:da:dd:40:c2:8e:a3:35:02:20:
13:38:67:48:cc:7d:b5:fa:ae:a5:3b:98:ab:d8:e0:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:71:3F:60:4E:07:3F:C6:F5:50:09:C5:A5:94:58:39:4F:73:B8:84
X509v3 Authority Key Identifier:
keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a8:c9:96:f4:94:bb:3b:d3:6a:98:87:d7:27:0b:95:06:39:
ac:b1:1c:62:76:75:a3:55:85:99:8c:0f:4c:29:97:31:b8:34:
af:26:87:f7:60:2f:57:b7:26:8e:fe:c8:8d:58:dc:1e:12:98:
b0:e1:6f:b2:ec:e2:2a:a5:02:8e:63:2c:87:0c:13:86:3b:d9:
f5:7c:a2:51:56:50:60:eb:38:b7:51:b5:2a:f0:5f:25:08:0c:
33:bc:87:34:4b:dd:fa:a8:84:f0:37:53:76:87:e7:cb:14:72:
8e:fa:c5:2f:a5:9b:49:2a:60:85:86:f9:95:d9:1b:1d:8f:37:
bb:3d:16:17:db:3c:d4:ef:43:b2:61:dc:63:48:23:da:cb:ae:
47:a1:53:9f:d5:ec:41:4f:21:be:85:0c:70:31:58:8e:18:82:
83:6c:8f:67:75:73:27:ca:55:fd:2a:86:0d:6d:d9:81:d5:85:
36:53:bd:32:00:eb:de:a2:e3:d6:ee:af:db:19:18:b1:dd:c2:
7a:13:d8:b9:2f:97:04:cc:81:38:0c:14:65:d2:25:0c:c6:15:
d9:36:b1:e1:ea:f9:a5:6c:61:fc:a6:d2:ff:81:66:ed:c3:c3:
99:45:e8:84:7a:75:44:d3:fe:46:e1:b4:e3:d2:9d:c8:2a:4f:
d3:1d:07:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:10:23 2026 by rpki-client