Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
File: VqSYe_jGtM3WV7vC0KXhPptibLk.mft (raw, json)
Hash identifier: AOoV9+qW5cHhs7eAVgD9tEwBnSrsHl6BT+xATBcNP7g=
Subject key identifier: DB:32:AA:BC:AB:8A:A8:04:8C:2E:1E:08:8B:12:00:BF:D6:D8:B8:AC
Authority key identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
Certificate issuer: /CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Certificate serial: 019CABD95C4683EDEC4E4C91481C0DC4FB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
Manifest number: 155A
Signing time: Mon 02 Mar 2026 00:01:14 +0000
Manifest this update: Mon 02 Mar 2026 00:01:14 +0000
Manifest next update: Tue 03 Mar 2026 00:01:14 +0000
Files and hashes: 1: VqSYe_jGtM3WV7vC0KXhPptibLk.crl (hash: RxZGXfKS1pHoHSk/T/Q3lJLhs68n2q2A8S2yZjN+pto=)
2: i90B_Aw4voLYSZN4ike1cX-64ao.roa (hash: S2axTVSBnRViE7pSNvyWUI1Y+GA1IV83phsw1P/KVYM=)
3: mHu2PftrGhok9VGv5OwCSXoy7kI.roa (hash: JIflhy4iOTQx/e8s4VaUUMCa1jVPoZ6lbcfSCtMt09k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:5c:46:83:ed:ec:4e:4c:91:48:1c:0d:c4:fb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Validity
Not Before: Mar 2 00:01:14 2026 GMT
Not After : Mar 3 00:01:14 2026 GMT
Subject: CN=db32aabcab8aa8048c2e1e088b1200bfd6d8b8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:88:26:37:82:f7:74:59:37:eb:4c:a5:ec:
23:18:94:2f:da:e4:50:b1:11:c9:2d:5b:63:0f:c1:
8d:ea:10:a4:34:de:d5:83:04:2e:b0:de:67:6e:47:
86:5f:74:36:5d:91:83:39:bc:c8:dd:e7:a5:0a:cf:
f6:59:25:e3:af:c2:99:10:f2:8a:f3:aa:11:89:e8:
e8:80:7d:07:6e:47:2c:dd:3e:98:50:45:cb:b3:a9:
f6:0c:49:fa:9d:1d:1a:a8:49:76:f2:c1:f5:75:de:
d8:ee:05:26:8f:e8:a4:d1:9a:46:a4:e2:2a:bf:1a:
b6:9c:ac:b3:cf:eb:b6:6a:d1:2d:92:7f:78:9b:d3:
a0:71:7e:1f:71:9f:16:af:19:82:11:cd:76:9c:2e:
72:c3:e0:6a:5e:9c:3e:d8:e7:88:ec:24:b4:12:f7:
46:74:b9:7e:c3:dc:1c:fc:b0:cb:7a:d5:46:ee:c3:
02:7b:9b:8b:65:1c:a5:ab:45:e1:bd:47:57:de:6d:
3c:11:21:fc:dd:81:74:ca:10:86:0b:1f:37:90:f5:
31:fe:ef:91:56:54:da:b2:23:b4:c0:74:b4:cd:16:
95:9b:d7:b9:8a:6e:f9:0a:44:74:5a:e1:53:ae:b5:
f9:bb:35:89:13:75:ee:e0:73:ac:72:1a:05:f2:b6:
e0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:32:AA:BC:AB:8A:A8:04:8C:2E:1E:08:8B:12:00:BF:D6:D8:B8:AC
X509v3 Authority Key Identifier:
keyid:56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:17:1a:ab:5e:b4:dd:0e:79:d3:c8:dd:5c:d1:90:51:fe:b6:
63:b9:a3:a6:57:71:15:da:61:2c:4b:88:9a:b0:fd:d1:37:b8:
41:92:2d:18:e5:ec:a8:01:eb:58:40:bb:29:ba:ab:ae:30:93:
74:f9:7e:43:5f:4d:f2:f4:db:34:ac:06:3d:9e:4e:ed:bb:06:
f8:01:eb:20:a0:37:46:a1:9d:5e:6a:b0:7a:89:1e:5d:fc:ae:
4e:22:82:7b:eb:64:d7:eb:47:f2:6e:4f:d0:83:03:cb:d1:c3:
6b:a7:31:e5:87:9a:e4:85:2f:cc:41:2d:74:dc:76:70:0c:5c:
f7:35:06:0b:8d:9e:78:b0:42:e7:dd:96:35:60:98:d6:14:66:
70:82:22:d9:fc:b1:04:26:17:76:0b:66:01:99:81:11:80:52:
54:5f:60:fa:52:a7:83:c8:5f:f9:1d:04:f4:9e:ee:67:4b:10:
53:85:02:8e:aa:99:12:98:11:b0:fe:58:35:48:40:50:f9:02:
fa:ad:c5:ca:44:7e:3e:42:4c:3c:e7:5d:af:8e:32:88:5b:be:
eb:21:27:e4:8d:46:37:e5:c9:bc:71:1f:5d:ca:70:22:f8:ce:
49:bf:45:e7:b0:f2:b6:b4:59:f0:d7:90:59:41:b8:e5:5a:82:
56:3f:9d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:05 2026 by rpki-client