Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
File: vQScpC4dgs4ntUu_0Bd4HVRaebc.mft (raw, json)
Hash identifier: XJuKMWMJQTCAXhCzW66+WcKZSfYs61BKMuRqNiKOymI=
Subject key identifier: FF:79:A0:4F:B9:14:56:8F:BF:CE:71:C4:2C:B0:05:25:D4:3D:55:F3
Authority key identifier: BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7
Certificate issuer: /CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
Certificate serial: 019D2704A561A631FBFFE0A329C545C1AF96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
Manifest number: 0A6E
Signing time: Wed 25 Mar 2026 22:01:49 +0000
Manifest this update: Wed 25 Mar 2026 22:01:49 +0000
Manifest next update: Thu 26 Mar 2026 22:01:49 +0000
Files and hashes: 1: diX6GVWjjxp4Oq6XrZsBh5j9i0M.roa (hash: xBkybsQcEpoTXkJLBjkUd7QB1bLl7/Ehg38seV+oQ+w=)
2: vQScpC4dgs4ntUu_0Bd4HVRaebc.crl (hash: pHmNjl/cY6Z0+CE7egq4lJCPNwfxg7LAmWzHq4D+FwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a5:61:a6:31:fb:ff:e0:a3:29:c5:45:c1:af:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
Validity
Not Before: Mar 25 22:01:49 2026 GMT
Not After : Mar 26 22:01:49 2026 GMT
Subject: CN=ff79a04fb914568fbfce71c42cb00525d43d55f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b9:93:cb:06:a4:d8:af:0b:5f:2b:0b:57:46:
1b:a4:1b:33:f7:96:5d:e6:a2:d7:18:5c:ef:91:31:
7c:78:a5:7c:a0:c7:80:08:0b:1e:5e:2d:f6:1c:98:
8e:a3:e9:0a:dc:74:c6:6e:cf:86:8d:48:b1:fd:28:
ee:e6:c4:99:49:4e:82:fe:41:07:b2:92:c9:19:63:
7a:ea:ad:58:48:94:ff:35:c2:c1:7f:b9:2e:b5:f0:
e3:44:11:a4:9c:65:4d:60:49:59:f6:b5:67:97:8f:
14:45:5b:11:d3:b8:ca:ba:c4:f8:50:e4:e1:2b:a9:
26:ae:dc:0d:be:cf:ff:e5:b5:8f:ec:d2:da:d3:e4:
df:9c:35:55:4f:87:9a:2a:85:fc:97:22:63:39:bd:
79:3a:16:c1:28:39:ba:a8:8d:76:95:5e:9a:91:f1:
9d:ce:b5:8c:67:f9:83:d3:a7:c6:d2:4f:a8:99:c1:
32:03:32:ed:b8:2e:6e:19:67:7a:0f:a5:b2:3a:c2:
ac:50:9a:22:23:91:cc:ab:ae:cb:d6:67:54:cf:f9:
a4:02:6a:d8:1c:8f:41:10:97:80:95:a6:56:74:58:
5e:f7:48:12:2e:f6:94:ae:d5:14:5a:91:ce:ea:24:
e9:80:9c:ac:6b:17:99:3a:4f:00:7a:75:9f:b2:bf:
47:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:79:A0:4F:B9:14:56:8F:BF:CE:71:C4:2C:B0:05:25:D4:3D:55:F3
X509v3 Authority Key Identifier:
keyid:BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ee:b9:cf:56:1c:ca:28:2c:e1:5d:c3:a3:1c:8b:50:b1:d1:
a4:c5:98:f8:76:b1:9a:9c:3b:5b:93:60:62:c1:d2:70:a4:27:
f7:49:12:1c:e7:5f:39:02:5f:cd:f6:68:0b:fb:d7:71:91:40:
a9:64:5d:9a:42:cd:ff:c2:bc:05:c0:4f:a7:d3:b9:66:fb:21:
5d:7e:cc:51:1d:22:33:d9:80:7d:16:63:5e:ab:25:a4:7f:f5:
ba:dd:a5:a3:1e:1c:09:e9:5f:f3:41:33:95:55:33:20:3c:0e:
f4:cd:b8:42:a8:04:7f:e3:fd:37:09:91:96:94:f3:9b:29:59:
b9:a9:d1:95:3a:98:71:9a:03:a5:e9:54:7f:0e:b0:fd:70:0f:
dd:81:42:7d:0a:56:1b:02:b3:ac:b1:c8:6d:0f:f5:d5:88:7a:
e6:07:bf:35:43:6a:79:90:f5:a7:a8:4d:39:9a:0b:8d:30:0d:
9d:49:24:e6:1d:11:c2:3a:df:20:ae:8c:04:34:f2:87:95:c6:
35:25:d9:ae:ca:91:d3:e9:75:84:70:3f:3a:40:b7:c5:50:f3:
8c:f2:88:17:12:5d:bc:89:46:1f:ca:31:f1:42:1b:38:0f:15:
f4:b7:20:ad:f6:36:09:15:a0:d2:68:a6:25:65:22:e3:53:1c:
85:c9:ea:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:07 2026 by rpki-client