Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
File: vqe2d3e5poMpM1dkl7RqmxYwTNk.mft (raw, json)
Hash identifier: aoIA/8oIpW+onW2BqD/f6WACTykmFPz+maB+UVq7urg=
Subject key identifier: 1B:A6:36:71:80:28:F7:E9:BD:0D:A7:F9:58:38:A2:4E:EF:81:61:13
Authority key identifier: BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
Certificate issuer: /CN=bea7b67777b9a6832933576497b46a9b16304cd9
Certificate serial: 019D25F1A63B2A2FCF93DF417B1178624B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
Manifest number: 16C7
Signing time: Wed 25 Mar 2026 17:01:26 +0000
Manifest this update: Wed 25 Mar 2026 17:01:26 +0000
Manifest next update: Thu 26 Mar 2026 17:01:26 +0000
Files and hashes: 1: srq9Ha0TjuLwEjYRk51fxTPdbjI.roa (hash: a6vYm4uCbtYNDd3vfHwRhBRwXJqAYeklTcm+jwdPPv4=)
2: vqe2d3e5poMpM1dkl7RqmxYwTNk.crl (hash: DZA4tbYYRnGvHt8XY6KNV/4rLAOyxG9jh7u5QOwZ4Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:a6:3b:2a:2f:cf:93:df:41:7b:11:78:62:4b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7b67777b9a6832933576497b46a9b16304cd9
Validity
Not Before: Mar 25 17:01:26 2026 GMT
Not After : Mar 26 17:01:26 2026 GMT
Subject: CN=1ba636718028f7e9bd0da7f95838a24eef816113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:70:3b:85:4c:42:00:6e:58:44:4c:8f:87:22:
12:fb:ad:90:c0:15:f7:3e:54:e1:2f:90:5f:e8:00:
af:9d:2f:c9:1b:4a:f9:dd:6f:02:0d:d4:de:23:a3:
73:4a:c3:11:3c:2b:cc:7e:af:2a:39:91:ca:28:e5:
c0:e4:ae:70:72:70:fe:9f:6e:92:5b:1d:d9:09:aa:
90:f8:9e:aa:f2:5e:c7:5e:4c:06:71:31:2d:10:d4:
00:8a:e0:07:9b:b6:0d:43:29:2c:52:f9:b3:94:6e:
57:39:35:23:e0:23:46:0c:08:29:ba:74:5d:a9:73:
43:29:b9:f6:30:2f:38:a6:6c:2c:65:41:ef:97:f2:
80:bb:7f:85:91:e3:08:30:aa:aa:a5:74:61:66:03:
cf:51:22:01:8b:e9:d1:06:0e:94:21:3f:c0:41:1b:
a4:50:97:8d:aa:d5:05:4b:fd:cb:d2:58:e8:04:be:
7d:e4:42:5f:85:7f:88:f8:7b:1a:ee:ec:d2:7b:33:
e7:3a:c7:c0:fb:56:db:7f:a4:b7:e1:c8:89:77:0c:
92:73:dc:48:6c:63:11:3b:16:8d:2d:fb:5f:ef:f6:
07:b2:5a:51:50:e9:46:5d:f1:1e:52:fd:1b:72:da:
cb:4c:64:23:82:cc:1a:5d:6c:61:74:76:d1:ba:ad:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A6:36:71:80:28:F7:E9:BD:0D:A7:F9:58:38:A2:4E:EF:81:61:13
X509v3 Authority Key Identifier:
keyid:BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fc:c0:f4:86:d1:35:08:6e:8a:69:fa:4f:81:87:5f:5b:47:
e2:00:c2:91:83:3a:69:3c:16:a8:bb:08:11:42:a3:13:35:bd:
68:f7:bd:3a:3a:27:92:1e:7f:6f:66:97:9b:46:ae:75:97:93:
b9:e9:37:17:6c:32:80:65:10:d5:59:43:3f:a4:55:06:b5:82:
a4:0b:5c:2c:84:85:64:70:34:13:9c:af:1f:b0:a6:86:ca:64:
d8:f2:06:ce:6f:e6:60:0f:be:7c:d0:eb:7f:ac:af:51:4e:3c:
f9:ef:5e:46:8b:ff:69:1e:79:99:eb:a6:b9:50:1f:3c:e8:82:
b3:fa:a8:1c:4e:e2:32:db:14:a8:4e:6c:f7:bb:ed:e5:f0:3f:
8c:b5:52:19:4f:03:9c:9d:be:14:13:b0:da:1b:31:d9:fa:ad:
e1:31:b4:8c:db:f9:3b:f1:81:90:df:f8:65:fe:93:0a:d6:d6:
13:24:d4:11:8e:3b:76:9e:41:bc:f8:d1:a9:20:8e:5f:6d:65:
b1:38:f9:6f:2e:e9:10:76:42:1d:bf:16:31:bf:c2:03:b0:a4:
ec:62:01:ef:5a:ea:e3:7c:8f:41:4a:7b:25:8a:1d:41:32:3e:
9b:3f:29:9b:75:3f:56:9b:63:01:d6:30:34:3c:84:d2:12:45:
6f:26:f4:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8aY7Ki/Pk99BexF4YktoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTdiNjc3NzdiOWE2ODMyOTMzNTc2NDk3YjQ2YTliMTYz
MDRjZDkwHhcNMjYwMzI1MTcwMTI2WhcNMjYwMzI2MTcwMTI2WjAzMTEwLwYDVQQD
EygxYmE2MzY3MTgwMjhmN2U5YmQwZGE3Zjk1ODM4YTI0ZWVmODE2MTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HA7hUxCAG5YREyPhyIS+62QwBX3
PlThL5Bf6ACvnS/JG0r53W8CDdTeI6NzSsMRPCvMfq8qOZHKKOXA5K5wcnD+n26S
Wx3ZCaqQ+J6q8l7HXkwGcTEtENQAiuAHm7YNQyksUvmzlG5XOTUj4CNGDAgpunRd
qXNDKbn2MC84pmwsZUHvl/KAu3+FkeMIMKqqpXRhZgPPUSIBi+nRBg6UIT/AQRuk
UJeNqtUFS/3L0ljoBL595EJfhX+I+Hsa7uzSezPnOsfA+1bbf6S34ciJdwySc9xI
bGMROxaNLftf7/YHslpRUOlGXfEeUv0bctrLTGQjgswaXWxhdHbRuq31BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBumNnGAKPfpvQ2n+Vg4ok7vgWETMB8GA1UdIwQY
MBaAFL6ntnd3uaaDKTNXZJe0apsWMEzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFlMmQzZTVwb01wTTFka2w3UnFteFl3VE5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80MWMxMTEtNjUwNS00MWE0LTllNjct
M2I5MWZmOWExYWNkLzEvdnFlMmQzZTVwb01wTTFka2w3UnFteFl3VE5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy80MWMxMTEtNjUwNS00MWE0LTllNjctM2I5MWZmOWExYWNk
LzEvdnFlMmQzZTVwb01wTTFka2w3UnFteFl3VE5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/zA9IbR
NQhuimn6T4GHX1tH4gDCkYM6aTwWqLsIEUKjEzW9aPe9Ojonkh5/b2aXm0audZeT
uek3F2wygGUQ1VlDP6RVBrWCpAtcLISFZHA0E5yvH7Cmhspk2PIGzm/mYA++fNDr
f6yvUU48+e9eRov/aR55meumuVAfPOiCs/qoHE7iMtsUqE5s97vt5fA/jLVSGU8D
nJ2+FBOw2hsx2fqt4TG0jNv5O/GBkN/4Zf6TCtbWEyTUEY47dp5BvPjRqSCOX21l
sTj5by7pEHZCHb8WMb/CA7Ck7GIB71rq43yPQUp7JYodQTI+mz8pm3U/VptjAdYw
NDyE0hJFbyb0cQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:56 2026 by rpki-client