Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
File: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft (raw, json)
Hash identifier: nXQPWfjeWJC7Lx+/swqGfzQSU2pPTmZxETQPENPb6OU=
Subject key identifier: C7:85:01:FE:A0:BF:59:BF:6E:A6:91:0E:6D:15:F8:44:3B:CC:DD:07
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Certificate issuer: /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial: 019D2816669484B43EB5B4F34F3EFA140477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
Manifest number: 0D42
Signing time: Thu 26 Mar 2026 03:00:49 +0000
Manifest this update: Thu 26 Mar 2026 03:00:49 +0000
Manifest next update: Fri 27 Mar 2026 03:00:49 +0000
Files and hashes: 1: 7fwFotLEQHdJWGzsI9E3uv_kDSI.roa (hash: 84Fm9PCPXM8NFDP3Raox3dv53czMLCLj+wQeuu2bYvg=)
2: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl (hash: Gc2Hu/LOLivVz3XpkO64o7t5AI87Hc4kdSycziKCvy8=)
3: _fFHluteB5aYpSrt5zAnfawBLdE.roa (hash: EeR8KZELGbbgEkegmnhlrAdS7lppXQ4MZh3aU7YBvVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:66:94:84:b4:3e:b5:b4:f3:4f:3e:fa:14:04:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Validity
Not Before: Mar 26 03:00:49 2026 GMT
Not After : Mar 27 03:00:49 2026 GMT
Subject: CN=c78501fea0bf59bf6ea6910e6d15f8443bccdd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:6b:f5:2f:19:c3:5f:d1:9c:40:8c:47:39:
87:b0:6f:9b:ab:d9:db:36:4a:71:63:95:b9:36:b1:
af:80:1f:ab:7b:b0:b9:b5:a6:18:9e:c9:75:a1:82:
4a:28:4f:ed:82:72:92:62:05:ec:30:7b:2e:75:9e:
a0:dc:88:0c:05:b4:22:4d:0a:29:a5:59:5b:40:6a:
1f:d4:f9:f6:00:6f:6a:ad:8c:9c:9a:14:ad:58:38:
a6:f5:80:1d:ca:49:75:77:92:46:b1:8a:f0:22:03:
f0:b7:af:63:4a:be:7d:3d:77:30:65:49:b3:fc:63:
60:55:cd:6b:a2:51:e6:f2:63:19:05:1f:0d:69:ae:
51:45:c1:43:05:62:ad:d3:be:8e:e0:4f:3f:5e:52:
e1:4a:14:65:9a:22:b2:e4:33:ab:e6:c4:54:cf:0a:
65:3c:d7:61:cf:a4:37:63:84:7c:89:2e:16:b5:43:
40:8c:1f:1b:a5:d1:26:18:2a:e5:75:14:67:f1:cc:
85:e1:36:66:2f:13:9c:e9:aa:a6:aa:65:df:6a:80:
0a:18:54:e9:24:ca:f7:1f:14:de:8a:c5:bf:e9:af:
04:8d:ca:b8:a2:40:fa:ae:a9:c5:50:af:82:b0:33:
73:61:5e:ef:73:b4:3f:a7:06:0b:ba:8a:aa:0e:b4:
29:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:85:01:FE:A0:BF:59:BF:6E:A6:91:0E:6D:15:F8:44:3B:CC:DD:07
X509v3 Authority Key Identifier:
keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0c:36:3c:bc:f0:a6:c2:10:57:37:87:ba:7c:72:91:c8:ed:
c4:c7:f1:4b:6c:af:cf:3c:6c:d2:e6:a8:09:7b:95:57:8e:20:
99:c8:de:b5:77:d2:d1:52:05:89:77:21:47:be:cd:28:eb:a5:
40:38:f9:3a:bd:6e:74:99:a4:54:d2:7b:19:ae:c3:e2:f2:cb:
1c:e6:b3:11:98:c6:58:fd:0e:dd:f3:b4:7c:9d:cf:bb:9a:78:
ec:a0:1a:10:ed:0b:29:cb:5b:2e:d4:71:ed:a9:cb:83:fa:cb:
80:c3:f8:84:e2:0a:7c:c9:8c:1e:be:ca:af:f0:08:01:39:8b:
5c:b1:41:4c:65:4e:41:5d:fa:7d:cd:d3:6b:69:03:b6:f3:b7:
c0:cc:25:23:6f:9c:62:2f:da:22:4d:64:08:41:d5:2a:43:8f:
d8:37:6f:27:a6:76:6e:99:65:14:9b:e8:fe:46:02:0f:08:72:
9a:2c:c0:1c:fd:d7:bf:98:3e:b1:4d:e8:e3:63:b2:8c:ad:44:
4e:53:1c:87:2b:4b:df:6a:23:2c:30:1f:df:e8:28:f3:73:3c:
74:ea:6d:9d:cf:91:7d:f8:89:a9:82:9c:93:73:ae:9d:82:be:
aa:bf:2f:5d:e0:d8:61:fe:c1:59:4f:93:9e:a8:cf:79:57:a8:
ca:49:0f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:35 2026 by rpki-client