Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
File: VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft (raw, json)
Hash identifier: 6CHDQyKMXVAGMVWiGVGMsOYNU9Teb3ahcJwkSTZM8RU=
Subject key identifier: 66:C8:61:2A:76:B3:DF:7E:15:F4:DA:A3:9C:9A:D6:F3:5A:B5:E4:C6
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Certificate issuer: /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial: 019E1D22410C32B8A6F3E1B5123F7EBC67B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 17:00:44 +0000
Manifest this update: Tue 12 May 2026 17:00:44 +0000
Manifest next update: Wed 13 May 2026 17:00:44 +0000
Files and hashes: 1: VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl (hash: 8rjOEgc/69kpfUqfzWmtCtrIhNpVcPLC7PVH/6KrTYI=)
2: f_tEfKd5hV2_TnfCTRyJP1Htm4A.roa (hash: NQ/xxQW3U9GvugxkG2jNW4TodVkdfN7Ntdsb5/uc4tM=)
3: yooXWAzXpfc4Is2Szi-_sKNZ1Dw.roa (hash: WORw69SpG7o5LnNs7NnksxUfsDlM6lj3W399eRGTTp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:41:0c:32:b8:a6:f3:e1:b5:12:3f:7e:bc:67:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
Validity
Not Before: May 12 17:00:44 2026 GMT
Not After : May 13 17:00:44 2026 GMT
Subject: CN=66c8612a76b3df7e15f4daa39c9ad6f35ab5e4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:2f:7c:a3:5a:63:ad:1d:18:93:85:4e:04:
95:8a:a9:42:eb:71:4f:6b:d8:35:83:b4:c5:bc:6a:
d6:79:8b:76:8d:98:81:0a:32:a9:f2:11:ea:89:35:
4c:4e:64:98:96:40:d3:7f:7f:0b:24:63:22:d5:0f:
e4:2d:38:eb:2f:e6:48:f4:40:47:c6:82:52:01:38:
f7:a0:30:15:bf:4c:77:fe:8d:43:b5:c1:50:6a:77:
43:c1:42:52:ef:4a:52:2d:ec:ed:86:db:54:88:c8:
46:12:31:e0:97:63:31:73:6f:63:33:c2:0f:ca:de:
a2:cb:4d:c0:9f:9e:06:09:6c:e9:2e:95:dd:c2:82:
75:6c:b1:46:0b:e3:72:ff:62:d2:22:23:f4:3e:9f:
42:72:57:d4:a2:6d:7a:d7:bd:0d:b0:07:33:7e:c1:
ee:68:dc:dc:74:87:b2:8b:85:bf:a5:63:29:fb:74:
a0:43:a3:b6:5a:d5:f2:8f:ee:9f:39:7a:fb:5d:3e:
1d:cb:a1:72:ab:ef:cb:5e:36:72:57:d1:84:dd:67:
03:d8:ef:9f:2a:88:3d:4e:34:04:58:31:10:85:b0:
75:48:2e:19:5f:06:ac:c6:fd:fe:87:48:34:3b:27:
12:fc:13:a9:04:df:f9:f7:25:5e:e7:e4:36:8f:2d:
92:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C8:61:2A:76:B3:DF:7E:15:F4:DA:A3:9C:9A:D6:F3:5A:B5:E4:C6
X509v3 Authority Key Identifier:
keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:79:80:60:e4:50:23:df:1d:53:c4:bc:06:de:7d:ea:ac:b6:
24:91:d1:da:e0:21:da:64:d8:07:cb:f5:a5:93:ac:a6:52:90:
7b:97:a5:82:44:24:f9:f2:76:ac:88:94:f4:21:18:64:bf:c5:
5f:7c:55:e4:89:79:c4:f7:da:ff:10:e6:79:d9:d8:60:11:05:
9d:d8:e4:89:b0:cd:3b:20:23:d0:b3:5c:79:a3:d4:ba:d2:00:
8a:d3:fb:9a:00:25:d7:a8:46:3c:5f:d6:8e:13:69:e7:73:c3:
db:f4:e7:ef:c1:d2:5c:30:50:ad:41:15:d2:79:60:b8:e5:53:
e5:42:f0:b6:08:a0:fa:23:32:55:31:4e:49:fb:13:e7:62:a3:
f0:96:f8:b0:73:b2:6d:57:94:d8:55:77:1d:4d:a9:94:5a:db:
4e:b5:8c:be:7c:ff:64:41:77:4d:08:15:1d:6b:07:75:05:bc:
b9:a5:98:e4:8e:cb:53:98:69:aa:f8:f0:f3:c0:20:46:f9:63:
94:ca:68:b5:dd:ad:13:7e:9d:da:6e:8c:7a:65:13:4e:d7:59:
67:cb:8d:9f:90:d1:29:41:1c:7e:fe:cf:bb:3f:8c:8b:4c:cb:
92:0e:b2:ab:d2:ca:fa:9b:ac:5d:c5:8a:78:c6:28:32:df:f3:
b5:90:ff:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:18:51 2026 by rpki-client