Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
File: VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft (raw, json)
Hash identifier: ljLN9thyJSWwPr3lpSH0+UMGJQHUPIXQ4MSNEmI+nSE=
Subject key identifier: BC:14:B3:AA:CF:EE:8A:CF:65:D3:29:97:61:86:86:95:C6:82:A3:0D
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Certificate issuer: /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial: 019D27DFCA084C983ABE9925380B15AE3B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 02:01:10 +0000
Manifest this update: Thu 26 Mar 2026 02:01:10 +0000
Manifest next update: Fri 27 Mar 2026 02:01:10 +0000
Files and hashes: 1: VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl (hash: XNd4OgZKoYuRRMaS9NdM4ylQVeolBO1QpaxsKq3pNuI=)
2: f_tEfKd5hV2_TnfCTRyJP1Htm4A.roa (hash: NQ/xxQW3U9GvugxkG2jNW4TodVkdfN7Ntdsb5/uc4tM=)
3: yooXWAzXpfc4Is2Szi-_sKNZ1Dw.roa (hash: WORw69SpG7o5LnNs7NnksxUfsDlM6lj3W399eRGTTp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ca:08:4c:98:3a:be:99:25:38:0b:15:ae:3b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
Validity
Not Before: Mar 26 02:01:10 2026 GMT
Not After : Mar 27 02:01:10 2026 GMT
Subject: CN=bc14b3aacfee8acf65d3299761868695c682a30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:10:e2:34:f1:f8:92:64:80:a5:6d:af:ba:33:
71:b0:f3:25:a1:17:be:c1:de:be:72:d2:3c:51:25:
61:55:20:43:37:80:e8:54:d1:3e:31:ba:87:d7:f6:
bf:1d:40:d8:5e:83:22:80:1f:cf:78:d1:a9:2c:f8:
b5:ce:24:ec:2c:60:d4:af:e8:10:ac:82:a2:9e:b0:
17:ba:0a:d1:27:04:82:e1:c6:1e:fd:bf:5d:c9:67:
82:4d:21:c4:67:6c:7c:2f:8a:fa:ca:39:3a:d4:fd:
88:59:ee:67:3c:fc:d8:ca:1a:c7:7d:88:57:2b:f5:
df:d6:99:76:bc:8f:24:fe:98:85:42:66:d8:8c:15:
15:5e:75:b7:ca:f7:9d:4a:2f:4c:8f:ee:21:4d:47:
7e:82:ba:fa:2b:eb:99:88:08:f6:ef:fe:b0:30:bc:
b7:8b:c8:18:5e:2c:07:6a:60:3e:e0:a9:f8:a6:9e:
9b:fa:9f:3b:b6:1b:71:4d:b6:d4:6d:9a:af:fd:b1:
1c:e8:9a:5f:d8:77:4d:75:67:d7:fb:ca:d6:6b:fa:
a9:f1:60:4b:26:4e:b3:24:9d:56:4b:19:5a:28:e5:
0d:e2:d4:25:bd:e5:76:23:20:d5:2d:68:ba:4c:76:
6b:57:f4:a3:94:9d:41:b3:2f:0c:82:88:92:b9:f5:
0f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:14:B3:AA:CF:EE:8A:CF:65:D3:29:97:61:86:86:95:C6:82:A3:0D
X509v3 Authority Key Identifier:
keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:61:3a:1f:94:06:f4:eb:af:04:e9:8e:cb:3a:af:61:d2:13:
f1:4c:ab:3b:96:37:a6:94:f3:1a:27:da:4d:6e:51:a6:f1:ca:
4a:6a:e2:e5:c4:03:87:89:52:58:dc:79:4e:b2:7b:f0:4f:65:
cf:fb:08:bb:82:05:93:0d:d9:40:53:27:b3:0e:70:2a:44:6e:
99:a6:2c:00:ae:82:5a:24:c6:c7:2a:fe:7b:99:6a:58:4f:ec:
da:00:f7:58:a3:40:b5:44:e2:87:70:5a:24:7f:eb:29:0d:e2:
8b:b0:52:d1:45:ab:9b:17:4c:af:32:98:b1:54:b4:e1:29:f9:
bf:aa:c6:80:ee:90:9f:1a:a9:5c:70:58:16:d0:be:cf:c4:69:
15:f7:c1:1a:0a:20:80:23:06:55:12:82:6c:9a:bd:2e:a3:ff:
2c:f7:b0:b9:57:b6:a6:a1:57:35:ce:c4:8f:05:99:b5:58:be:
e4:50:b0:6e:d1:85:fc:25:9e:55:b4:6d:cd:b8:8c:6d:58:36:
b1:d9:c8:14:76:e3:6b:8c:25:df:6e:e9:25:6b:37:04:f6:92:
e3:03:ba:d7:ec:ca:af:0c:2d:50:00:ed:74:55:d6:28:d4:7e:
50:57:cf:21:f0:19:14:38:a6:7b:a7:3f:32:89:87:f1:f8:07:
2c:e5:16:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:34:51 2026 by rpki-client