Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
File: vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json)
Hash identifier: JYiNliSnaP8oqywQyqVzySj/dGajzxQVgExa1P4MWPQ=
Subject key identifier: 23:12:2F:B5:80:58:D9:3B:42:C6:D4:F5:E4:20:C4:AF:E3:FC:18:6B
Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
Certificate issuer: /CN=bd033df03ed51ce7924a480183bcffdb4f042537
Certificate serial: 019D254C61AD2144CDA5DC1456A556786C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
Manifest number: 047A
Signing time: Wed 25 Mar 2026 14:00:55 +0000
Manifest this update: Wed 25 Mar 2026 14:00:55 +0000
Manifest next update: Thu 26 Mar 2026 14:00:55 +0000
Files and hashes: 1: j6WVMlj7QGC0B6lVcgTm5Vqjms0.asa (hash: HUsdlww5wzPN9pHKVOg9JknKg0Sqp60i383BUXuT2YI=)
2: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: OBH0NprcbASo+2kxhRz1QSKCBUiSw9BjZJtetopELJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:61:ad:21:44:cd:a5:dc:14:56:a5:56:78:6c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537
Validity
Not Before: Mar 25 14:00:55 2026 GMT
Not After : Mar 26 14:00:55 2026 GMT
Subject: CN=23122fb58058d93b42c6d4f5e420c4afe3fc186b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:ac:26:98:8c:a4:21:31:84:34:e5:9e:c0:
c9:fb:c4:06:96:39:d3:46:d7:0c:db:7c:9e:9e:4e:
c6:31:b9:d3:19:60:79:ac:69:51:9d:46:fc:f1:82:
b8:a5:91:7a:82:96:aa:4c:9f:87:d1:f5:a5:54:9e:
5d:cb:4d:17:1f:82:64:3e:52:b3:9a:aa:19:bb:ee:
11:a4:39:43:4f:cd:2f:d0:2e:8e:ed:63:80:1e:77:
f7:14:5d:1a:9d:5f:53:13:cc:43:66:9b:a2:a5:27:
10:56:96:0f:02:2a:36:0f:3e:0f:e3:93:c8:80:07:
92:98:fb:aa:c7:9f:9e:d7:1c:fd:87:ec:59:eb:11:
28:df:75:e7:a5:8b:61:9c:4d:72:5f:d0:2a:5d:c9:
58:72:3a:bc:d8:40:4a:0e:10:c7:e1:75:1b:a9:1b:
ae:79:d3:3d:49:b0:17:9d:b5:40:27:54:08:a5:d0:
15:87:11:6c:89:67:d3:2c:1f:55:db:a6:0b:99:e7:
39:d1:ec:1c:19:48:88:bf:6f:e9:c9:ba:12:4e:71:
27:fb:8e:76:f8:49:3b:b0:d5:66:cd:ac:a8:9d:a2:
2e:a1:ec:8c:12:52:87:de:b4:45:65:1f:e0:04:34:
51:31:46:aa:0f:6e:c9:69:e8:22:61:a2:44:c0:61:
66:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:12:2F:B5:80:58:D9:3B:42:C6:D4:F5:E4:20:C4:AF:E3:FC:18:6B
X509v3 Authority Key Identifier:
keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9d:dc:2f:f6:e3:6b:6f:a8:b3:59:45:00:bc:b0:dd:2b:04:
75:e9:b4:6b:fd:b3:df:d1:b3:05:0b:85:cb:ae:a4:6f:79:91:
38:65:4d:6c:81:f9:72:d4:86:c5:d9:b2:b1:4c:4c:96:e2:d3:
fa:5b:d3:45:b6:23:66:76:e2:b5:2c:73:82:cf:36:9d:7f:76:
10:1f:08:5a:5c:12:70:0e:68:76:fe:2f:85:7c:aa:c7:cc:95:
96:72:77:75:81:6d:9d:96:91:95:a5:c8:14:04:09:a1:5f:d4:
3d:ec:a2:2c:61:d4:b6:ab:bd:a1:7f:64:51:91:09:37:76:f4:
73:37:38:11:95:11:cc:b4:fe:62:48:a7:56:19:dd:bf:44:67:
06:d2:e4:db:f0:44:30:c9:c7:9c:39:23:6c:13:96:78:9c:a1:
5e:00:6e:29:55:1a:93:cc:a9:4a:92:61:a8:8c:4c:6b:2e:61:
ca:4a:e9:6b:d6:9b:9a:57:75:27:72:14:c7:76:7b:a8:9d:cc:
2d:12:38:ab:6e:70:a9:00:18:9b:44:f0:b0:72:14:67:2a:0f:
c1:c3:2e:70:c2:b3:62:b2:e1:77:4b:e4:68:58:49:99:e1:64:
ef:45:b9:de:5a:0c:de:1e:60:a5:d3:f4:fc:f6:a5:e6:14:b0:
07:45:32:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTGGtIUTNpdwUVqVWeGxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMDMzZGYwM2VkNTFjZTc5MjRhNDgwMTgzYmNmZmRiNGYw
NDI1MzcwHhcNMjYwMzI1MTQwMDU1WhcNMjYwMzI2MTQwMDU1WjAzMTEwLwYDVQQD
EygyMzEyMmZiNTgwNThkOTNiNDJjNmQ0ZjVlNDIwYzRhZmUzZmMxODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspqsJpiMpCExhDTlnsDJ+8QGljnT
RtcM23yenk7GMbnTGWB5rGlRnUb88YK4pZF6gpaqTJ+H0fWlVJ5dy00XH4JkPlKz
mqoZu+4RpDlDT80v0C6O7WOAHnf3FF0anV9TE8xDZpuipScQVpYPAio2Dz4P45PI
gAeSmPuqx5+e1xz9h+xZ6xEo33XnpYthnE1yX9AqXclYcjq82EBKDhDH4XUbqRuu
edM9SbAXnbVAJ1QIpdAVhxFsiWfTLB9V26YLmec50ewcGUiIv2/pyboSTnEn+452
+Ek7sNVmzayonaIuoeyMElKH3rRFZR/gBDRRMUaqD27JaegiYaJEwGFm8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMSL7WAWNk7QsbU9eQgxK/j/BhrMB8GA1UdIwQY
MBaAFL0DPfA+1RznkkpIAYO8/9tPBCU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlFNOThEN1ZIT2VTU2tnQmc3el8yMDhFSlRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jYzY2ZDQtN2Q5OC00M2I1LWIyMDkt
Yjg0ODdmZTk2MTQ5LzEvdlFNOThEN1ZIT2VTU2tnQmc3el8yMDhFSlRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jYzY2ZDQtN2Q5OC00M2I1LWIyMDktYjg0ODdmZTk2MTQ5
LzEvdlFNOThEN1ZIT2VTU2tnQmc3el8yMDhFSlRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAop3cL/bj
a2+os1lFALyw3SsEdem0a/2z39GzBQuFy66kb3mROGVNbIH5ctSGxdmysUxMluLT
+lvTRbYjZnbitSxzgs82nX92EB8IWlwScA5odv4vhXyqx8yVlnJ3dYFtnZaRlaXI
FAQJoV/UPeyiLGHUtqu9oX9kUZEJN3b0czc4EZURzLT+YkinVhndv0RnBtLk2/BE
MMnHnDkjbBOWeJyhXgBuKVUak8ypSpJhqIxMay5hykrpa9abmld1J3IUx3Z7qJ3M
LRI4q25wqQAYm0TwsHIUZyoPwcMucMKzYrLhd0vkaFhJmeFk70W53loM3h5gpdP0
/Pal5hSwB0UyBg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:24:46 2026 by rpki-client