Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
File: VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft (raw, json)
Hash identifier: I4j5AlOXP+jWm3T6EjLijai2HaCIKYDWqCpbBQAfCNk=
Subject key identifier: 6A:4E:D5:4F:42:0B:46:E5:B5:72:D9:0C:1D:66:61:6D:22:BF:0A:63
Authority key identifier: 55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
Certificate issuer: /CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Certificate serial: 019D29CDF51D08CAFDCA579709F6EEEFEDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 11:00:56 +0000
Manifest this update: Thu 26 Mar 2026 11:00:56 +0000
Manifest next update: Fri 27 Mar 2026 11:00:56 +0000
Files and hashes: 1: JZwbViMKsnxZsYX8USYMxbR-wL8.roa (hash: vC5pgOVEE4V7ZzDJwdhrcdyYAHnBWwtpITNJzaoLZ2M=)
2: VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl (hash: wFTgj+VPludA0VFF1bYd14gTxQLIjAIj/YJDgx5gkKU=)
3: wflsbriSGR4xT_g-YEPWsSD1wj4.roa (hash: UqEtL5zzaFTIKkXdbYoSoZY6DLZbmM65716FcJp1NB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:f5:1d:08:ca:fd:ca:57:97:09:f6:ee:ef:ed:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Validity
Not Before: Mar 26 11:00:56 2026 GMT
Not After : Mar 27 11:00:56 2026 GMT
Subject: CN=6a4ed54f420b46e5b572d90c1d66616d22bf0a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:42:5a:7d:35:fb:c3:3a:50:c4:e8:a3:a0:
32:e3:43:bd:57:28:29:ae:51:55:94:66:d2:17:b5:
9c:4e:dc:95:4c:91:62:98:ef:c8:a7:9c:0d:3b:d3:
e6:46:91:c5:c0:3b:a0:72:fb:4e:b1:f6:88:83:ff:
50:12:4a:fd:ba:ec:14:99:b1:11:0c:07:22:ca:d4:
8c:99:b9:02:21:a8:1e:38:d4:3c:0f:4b:a4:16:08:
76:23:aa:56:8e:0c:6e:21:2e:83:ec:ce:21:fc:9c:
0b:a4:f6:33:d3:2c:f3:e5:7d:33:70:2c:75:ed:c5:
66:46:47:88:25:d0:54:ec:73:f2:4c:a9:3b:99:2d:
84:fd:a6:7b:81:ef:c4:d4:26:3f:17:5d:59:21:7a:
47:f2:08:53:2e:90:ad:95:0b:d7:c4:67:90:25:d0:
28:a1:55:0a:ab:c5:d6:7e:d3:db:5d:55:b0:24:2a:
27:71:1d:ad:16:c6:d1:f5:4f:a6:a9:10:da:68:14:
a0:c9:c5:14:a2:d1:d7:ab:2b:19:cf:2b:b2:c1:a9:
67:18:11:a3:15:b3:35:61:61:ee:7c:ef:fd:8a:c9:
01:7d:29:f6:19:67:c6:a7:a2:b6:01:47:e2:9f:60:
53:44:e8:79:18:94:79:be:6c:53:da:bf:5a:63:f2:
dd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4E:D5:4F:42:0B:46:E5:B5:72:D9:0C:1D:66:61:6D:22:BF:0A:63
X509v3 Authority Key Identifier:
keyid:55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fb:f0:ad:13:fd:30:2a:ec:a9:9f:57:75:0d:6b:ff:c4:e9:
b7:99:03:c8:3b:a7:82:34:c7:cb:20:68:ed:c4:ed:aa:3b:78:
01:06:11:00:e0:41:d2:88:ab:0e:d8:b4:84:8a:34:30:b2:6c:
b7:2a:a8:2c:ed:29:50:21:62:2f:de:db:25:2e:b5:ed:f7:32:
1c:c2:28:f8:ac:3b:9b:63:d9:de:47:b8:29:7f:56:38:39:6c:
27:c5:f5:b3:6c:58:4c:fa:42:41:9a:c4:56:7b:68:f7:1a:fa:
97:e2:52:77:ac:05:f0:14:17:25:36:31:8f:aa:79:d5:e5:3f:
a8:3b:62:c5:e7:1d:b0:3f:69:54:b9:46:b3:c6:63:67:92:2f:
7b:e1:61:b1:18:bf:4c:22:28:4d:87:e9:c1:d4:8a:a1:2f:5a:
2d:9d:46:ec:5d:65:54:1a:17:a0:6e:8b:07:36:2d:60:e1:7e:
da:a3:7b:cf:e8:20:bb:82:33:41:c8:51:75:9c:1b:07:9e:11:
36:80:cb:67:dd:0a:b3:61:80:3f:82:4e:8c:62:5c:e0:b3:13:
f2:be:1c:87:4d:f3:b8:3c:9c:1e:78:68:1c:7b:7c:67:64:57:
eb:40:1e:b8:63:5c:e8:01:77:3d:a5:83:72:1d:ab:00:ec:fe:
51:36:99:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:19 2026 by rpki-client