
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
File: vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json)
Hash identifier: EWXLO8TqG9StX/OqxKhcxhPA6dR3ipbiqYzpZFBbcMs=
Subject key identifier: 58:6F:95:26:D3:CB:05:D1:8A:C9:E3:A6:A2:A3:19:1F:F8:94:10:E9
Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
Certificate issuer: /CN=bd033df03ed51ce7924a480183bcffdb4f042537
Certificate serial: 01A0D5A6A935353637ABBC9E123311872639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
Manifest number: 0663
Signing time: Thu 24 Sep 2026 23:01:04 +0000
Manifest this update: Thu 24 Sep 2026 23:01:04 +0000
Manifest next update: Fri 25 Sep 2026 23:01:04 +0000
Files and hashes: 1: j6WVMlj7QGC0B6lVcgTm5Vqjms0.asa (hash: HUsdlww5wzPN9pHKVOg9JknKg0Sqp60i383BUXuT2YI=)
2: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: 24ob1pqg6eXpjMVLgNgNl/dqcSsJzRG8MnmbTJftqsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:a9:35:35:36:37:ab:bc:9e:12:33:11:87:26:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537
Validity
Not Before: Sep 24 23:01:04 2026 GMT
Not After : Sep 25 23:01:04 2026 GMT
Subject: CN=586f9526d3cb05d18ac9e3a6a2a3191ff89410e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:4f:5b:d5:dc:75:58:5d:fa:1b:8d:cb:38:
24:0d:b9:0d:fd:0f:b8:a7:40:b2:72:a6:98:37:29:
21:c2:9d:a7:05:32:ba:a7:4c:26:02:c2:01:d4:fd:
9a:dd:37:a6:e1:2d:7c:4a:af:f1:7d:05:18:8d:03:
f1:4c:78:cc:f0:1e:a3:92:b4:0f:39:ae:b4:69:7c:
4e:96:cc:05:f0:ae:42:71:46:b5:4e:85:6e:7d:73:
e0:67:65:fa:56:6f:a1:9f:8b:1f:96:a5:da:46:1d:
20:0b:09:2e:7a:c6:01:37:19:ee:e6:d4:97:6e:4a:
ee:85:ef:df:db:48:5b:be:11:fa:fd:27:72:f1:aa:
b7:e4:3d:83:20:93:b1:1a:3c:25:8b:5a:f1:f4:c0:
a1:06:d6:9c:50:f9:93:30:08:63:10:7c:a9:f7:db:
16:7c:bb:6b:29:7c:51:4b:be:6a:2b:e9:ec:dc:27:
b8:59:b5:7a:82:8f:06:b4:20:db:d8:a5:14:c0:1d:
35:c2:a2:ef:2d:d5:10:e4:c4:eb:f8:4e:9a:21:dd:
31:e5:36:0e:f9:c6:fa:7f:df:f3:5e:b6:2b:e1:01:
65:a9:f2:6f:0e:d5:5e:46:59:87:7b:23:59:d2:38:
82:b5:cc:94:4f:d5:c5:23:ed:b3:6e:51:d3:25:f7:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6F:95:26:D3:CB:05:D1:8A:C9:E3:A6:A2:A3:19:1F:F8:94:10:E9
X509v3 Authority Key Identifier:
keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:db:6a:e6:36:9a:a6:3b:72:32:d7:8d:c4:fa:82:1e:5e:3f:
d8:d2:48:72:7b:af:11:57:88:bb:1d:ca:1d:44:8b:25:44:37:
2b:34:9e:bc:63:f4:56:1e:c5:45:fb:22:a3:bc:74:f6:6e:75:
1f:8e:cf:72:dc:bb:4c:46:d5:49:35:86:23:bd:82:1f:7e:48:
85:12:b3:93:4a:84:93:06:14:a1:26:69:ac:6e:e2:92:97:a9:
8a:35:6d:b1:be:5b:74:c1:9b:c0:05:25:cc:e2:57:f1:dc:3e:
60:1e:4a:8b:9e:5b:b8:0f:50:b1:97:0f:03:0d:f7:b8:7b:40:
d5:2c:4b:6b:a1:eb:ab:49:db:c9:94:d1:d4:36:0e:64:b5:af:
b0:55:83:bc:4d:58:cd:2d:b6:27:f0:f1:4e:45:22:1c:26:38:
60:b9:cd:75:71:06:0c:78:92:0f:03:7b:60:88:52:3b:cc:91:
a6:ec:a8:03:ea:09:7a:52:b3:fc:08:35:bd:67:95:88:54:bb:
74:c6:31:02:fa:84:09:40:d2:77:9e:f0:2c:a0:47:54:cb:fb:
92:8b:f3:21:af:bf:b7:d8:98:f5:9a:98:af:53:8f:d7:69:13:
31:cb:e7:c5:6e:08:b7:df:e0:dd:f7:7d:88:85:c0:61:fa:41:
0b:3c:56:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:02:30 2026 by rpki-client