Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
File: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft (raw, json)
Hash identifier: skJRNAmN+jIKRtroSkNGEQfgU1mvLMNoEtxPuzUw7Ow=
Subject key identifier: 4C:03:48:E2:03:6A:EE:12:6D:15:51:3F:E6:80:65:E5:38:1C:82:25
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial: 019D24DEEDE76627A3F6FE84EAA8D85AAEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
Manifest number: 188D
Signing time: Wed 25 Mar 2026 12:01:22 +0000
Manifest this update: Wed 25 Mar 2026 12:01:22 +0000
Manifest next update: Thu 26 Mar 2026 12:01:22 +0000
Files and hashes: 1: 1lthQpNbdjvBjBvjx6o7dCcl_Lo.roa (hash: 09BW9AeuTKZNn0ro2yAFDYjo+0iZf6CKLrMs3cH5rIY=)
2: 6aiY7xcGMBhwSg811tAap0q5YOE.roa (hash: 5uK3tyYvucJWaPpSSYb7UKyYwuwhu+iE+thzsmoLCeU=)
3: RH0DxJdy9sgkSFYB6k0LE7nWDhc.roa (hash: XjBkKwPLZL3Yi2tKr0y72A6eYen+buTvuweq1X1GG4Y=)
4: UzRHQuzUI0Ss5Pz4cItdnmMHCLw.asa (hash: 3AMssHCd/Ax3dExijoPFYSMky22OYdzCGjVn4xJGhIA=)
5: dQeRFX64w7Gj5tRP8kDuY3-qGYM.roa (hash: NGvNDCH8JOp3+J18djkqIKrsn9XAQSXC2Ct+Fov8XNs=)
6: gahY2AwMV2dT0-Rml8PSy5NNRwU.roa (hash: YqOJQ01+Og7TwNTW8gpVjpEoYoqEByjHecFHs9UvJNo=)
7: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl (hash: jBwnqUzmQSsb6rr5bA9GtsLZomj7ZM+Tnw0o+XahFVI=)
8: xuh6sRkHSsQPLZas7QrHkiH1T2k.roa (hash: /cp/uJIEUnczl8mvWtL8aIuZWLWYTpcWWurRsAFLXiA=)
9: ywNEo0c6G_3EtU_rhMpvOTWsLBk.roa (hash: DK9+AlzaJPs7Bge4vOR9auQX8qnNw3cNCE94Ti0BdaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:ed:e7:66:27:a3:f6:fe:84:ea:a8:d8:5a:ae:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Validity
Not Before: Mar 25 12:01:22 2026 GMT
Not After : Mar 26 12:01:22 2026 GMT
Subject: CN=4c0348e2036aee126d15513fe68065e5381c8225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:64:0b:c1:5e:76:27:dc:a6:fb:6b:df:62:0f:
1a:a7:5f:f1:d4:0c:36:4c:a1:13:66:a4:40:07:69:
d1:c6:1b:bb:55:9f:c5:52:e4:88:42:61:24:1f:98:
6e:ca:2a:21:13:e9:7f:5b:3f:47:59:de:10:1a:be:
f7:85:f6:c0:46:82:88:7c:58:b6:41:0a:9e:f7:d9:
a5:c9:fb:5d:77:cf:54:9f:d3:8a:fc:17:32:96:d4:
52:9a:47:66:bf:9c:71:c4:ce:4e:73:d3:41:6d:e2:
82:7e:91:d6:e0:06:c2:2e:05:f3:58:65:b5:6a:98:
52:d7:1a:80:9f:e4:1a:89:13:0b:0a:28:be:77:90:
1e:3c:28:eb:0a:50:55:45:f8:6c:13:7a:92:5a:38:
8f:c2:49:ac:8f:cd:a6:2f:ef:41:13:e8:f4:3d:4b:
1f:4d:8e:94:4b:3c:46:77:1d:95:20:b1:18:e2:72:
e6:25:7b:bb:a5:24:70:be:a6:51:6f:34:10:b9:85:
db:f1:5e:1b:56:23:31:21:ff:a0:e7:f7:d4:6a:05:
72:f2:68:be:c8:9c:9c:77:6c:53:4b:ec:ac:66:29:
01:cb:76:23:98:6b:4a:51:43:d0:3a:9d:5b:59:e9:
4c:95:4d:e5:fa:bf:78:7b:13:e5:81:a1:f8:45:02:
26:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:03:48:E2:03:6A:EE:12:6D:15:51:3F:E6:80:65:E5:38:1C:82:25
X509v3 Authority Key Identifier:
keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:02:39:ef:cf:36:cd:17:94:85:d4:83:a4:5a:e8:d6:f8:5f:
92:66:98:3c:b4:ae:9a:ed:78:3d:c7:88:dd:ed:9e:8e:56:9e:
cb:2a:dd:bc:61:01:2f:6e:25:6d:94:04:68:34:b7:0b:30:d7:
ac:33:ce:34:09:fc:f8:a1:2b:68:eb:24:dd:9a:4a:a5:e0:e4:
1b:53:e4:92:2a:01:aa:62:1f:e9:fa:f8:4d:5a:26:e3:ba:3a:
67:6f:be:36:1c:03:69:b9:35:5e:98:06:f4:2a:b5:93:39:b5:
34:fa:9b:90:f6:d5:e9:49:85:6e:84:05:74:71:bb:19:ac:d4:
e3:58:d0:10:1b:30:0a:ec:65:b9:a1:04:4b:7b:2a:23:6f:93:
79:d3:76:7c:35:72:c0:54:89:cf:94:88:ab:23:63:34:e5:3f:
66:8d:2e:e9:04:b9:85:ce:2e:8a:f1:d0:73:a7:c8:30:f7:8c:
2d:03:a6:1b:54:51:43:48:37:04:02:d3:2d:68:27:78:af:cf:
3d:3b:23:4b:f0:6f:0e:02:5f:9a:34:d9:6c:c1:f0:63:3f:54:
02:d1:1c:72:9e:52:f8:57:fa:3a:47:11:26:33:00:09:b4:37:
1a:42:72:40:2f:ba:a5:69:d4:f4:61:36:85:7f:57:7f:e0:29:
ce:01:e2:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0k3u3nZiej9v6E6qjYWq7vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTY0OWVmNjAzMGZjODA4NDhmZGZlMjFkNDMyMWFjODAx
MWZkMTAwHhcNMjYwMzI1MTIwMTIyWhcNMjYwMzI2MTIwMTIyWjAzMTEwLwYDVQQD
Eyg0YzAzNDhlMjAzNmFlZTEyNmQxNTUxM2ZlNjgwNjVlNTM4MWM4MjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmQLwV52J9ym+2vfYg8ap1/x1Aw2
TKETZqRAB2nRxhu7VZ/FUuSIQmEkH5huyiohE+l/Wz9HWd4QGr73hfbARoKIfFi2
QQqe99mlyftdd89Un9OK/BcyltRSmkdmv5xxxM5Oc9NBbeKCfpHW4AbCLgXzWGW1
aphS1xqAn+QaiRMLCii+d5AePCjrClBVRfhsE3qSWjiPwkmsj82mL+9BE+j0PUsf
TY6USzxGdx2VILEY4nLmJXu7pSRwvqZRbzQQuYXb8V4bViMxIf+g5/fUagVy8mi+
yJycd2xTS+ysZikBy3YjmGtKUUPQOp1bWelMlU3l+r94exPlgaH4RQImJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwDSOIDau4SbRVRP+aAZeU4HIIlMB8GA1UdIwQY
MBaAFL6mSe9gMPyAhI/f4h1DIayAEf0QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgt
MjFkZjU1YmE5ZWJmLzEvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgtMjFkZjU1YmE5ZWJm
LzEvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgI57882
zReUhdSDpFro1vhfkmaYPLSumu14PceI3e2ejlaeyyrdvGEBL24lbZQEaDS3CzDX
rDPONAn8+KEraOsk3ZpKpeDkG1PkkioBqmIf6fr4TVom47o6Z2++NhwDabk1XpgG
9Cq1kzm1NPqbkPbV6UmFboQFdHG7GazU41jQEBswCuxluaEES3sqI2+TedN2fDVy
wFSJz5SIqyNjNOU/Zo0u6QS5hc4uivHQc6fIMPeMLQOmG1RRQ0g3BALTLWgneK/P
PTsjS/BvDgJfmjTZbMHwYz9UAtEccp5S+Ff6OkcRJjMACbQ3GkJyQC+6pWnU9GE2
hX9Xf+ApzgHiCg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:11:55 2026 by rpki-client