Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
File: vQQTxuRIJSdlFDEhETiDjhM4VN4.mft (raw, json)
Hash identifier: TugFwY4syZZm/cQ+cXyeZGaQGZOmc1FVxCyXDvEbk6c=
Subject key identifier: 9B:B5:6A:38:5B:D6:06:4D:41:F5:91:0F:7F:49:2F:C0:0A:48:27:F4
Authority key identifier: BD:04:13:C6:E4:48:25:27:65:14:31:21:11:38:83:8E:13:38:54:DE
Certificate issuer: /CN=bd0413c6e4482527651431211138838e133854de
Certificate serial: 019D3406DB28008ADC540986A2B707D06BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
Manifest number: 0D
Signing time: Sat 28 Mar 2026 10:39:17 +0000
Manifest this update: Sat 28 Mar 2026 10:39:17 +0000
Manifest next update: Sun 29 Mar 2026 10:39:17 +0000
Files and hashes: 1: vQQTxuRIJSdlFDEhETiDjhM4VN4.crl (hash: gAKnyGXu5o7aaiaPuvXaytGCB4vU/a6Jyep8p4HKxVk=)
2: zbcDrEFB5wBi_ddz2KxQe0VMusU.roa (hash: /++Th/g/81+d4+jJNs1r5coQiatlN8LfLSJyk0Z2+kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:06:db:28:00:8a:dc:54:09:86:a2:b7:07:d0:6b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd0413c6e4482527651431211138838e133854de
Validity
Not Before: Mar 28 10:39:17 2026 GMT
Not After : Mar 29 10:39:17 2026 GMT
Subject: CN=9bb56a385bd6064d41f5910f7f492fc00a4827f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:34:b2:14:3e:dd:21:6f:7b:3b:0d:9c:b6:
ca:7e:d6:d6:06:15:cb:7f:5a:57:af:e6:56:98:a6:
8b:e5:a3:c4:ba:70:c0:2d:6e:df:c4:82:39:ab:ad:
2f:0f:68:05:3a:b8:aa:c4:24:ea:42:30:73:0e:ad:
c6:eb:9e:18:a9:23:82:6d:7e:f5:2f:11:84:10:d3:
c5:06:6f:08:17:5a:cc:d6:ec:91:7f:da:ff:46:16:
fc:47:d0:d8:14:f1:d2:0c:f7:ab:da:6a:3f:b0:3f:
61:84:ba:d0:d8:4d:b0:45:ae:97:75:54:2b:7a:f2:
17:3c:f0:b0:83:10:c0:35:93:ac:06:60:a9:c5:bf:
7a:cb:53:d4:59:15:dd:eb:63:80:7d:39:d3:47:65:
74:60:c6:2a:aa:a5:6d:97:18:09:c1:e3:6a:aa:e9:
5b:a1:4f:62:65:7e:83:99:5c:43:67:25:9e:9a:43:
45:b4:1d:0b:60:8c:be:ee:9f:e7:62:e3:47:5a:8c:
7f:9e:41:47:b7:ae:0f:db:9e:16:0f:6e:c2:42:d2:
60:7b:17:01:19:8d:81:20:b7:39:4e:0c:08:ce:28:
f1:22:89:5e:85:b9:79:9e:bd:7c:c5:59:c0:17:dd:
47:38:10:3c:98:f2:4f:d6:42:84:91:f5:6a:d9:c5:
05:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B5:6A:38:5B:D6:06:4D:41:F5:91:0F:7F:49:2F:C0:0A:48:27:F4
X509v3 Authority Key Identifier:
keyid:BD:04:13:C6:E4:48:25:27:65:14:31:21:11:38:83:8E:13:38:54:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6e:f4:af:f9:34:6d:e0:10:c3:8b:51:c9:ae:77:42:45:02:
5a:a0:2f:d2:33:be:a8:05:c0:db:e9:5a:de:d4:3f:89:38:9e:
c7:30:5d:d6:8d:9c:9b:b8:e9:45:49:f8:28:07:01:be:0b:60:
43:7f:96:b9:a3:ad:c9:85:4b:b6:50:31:ff:61:9a:08:ff:63:
b8:9f:ed:bc:cb:fb:87:69:fc:c6:16:80:99:6c:37:29:6a:a8:
f3:f1:8d:74:7c:74:9c:f8:9e:ea:a7:bc:a5:fc:84:ae:9e:e4:
7a:22:de:d1:29:d6:d3:b7:93:ae:8d:5c:63:95:5c:39:a8:c7:
fb:30:5e:a5:cc:8c:d0:cf:e9:de:8f:11:d8:d8:4d:d4:4b:f7:
79:1a:e0:aa:38:a1:2a:bf:5d:1e:9a:cb:f7:c2:1c:7a:29:84:
b3:87:13:4c:38:9e:89:de:b1:ab:56:ae:75:6d:60:fe:29:43:
8b:d3:34:60:5c:38:c2:7a:94:6a:4e:57:bd:60:20:50:bf:4c:
a5:8a:31:2c:89:c5:f6:76:64:db:75:41:4f:3e:8e:28:6f:28:
4a:95:05:28:45:8d:cb:b3:51:ad:6b:ec:fe:54:0c:31:1e:70:
3f:c5:3d:84:56:85:ca:c8:3d:8b:21:aa:ba:b4:43:e3:66:64:
a6:8b:1d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:57:16 2026 by rpki-client