Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
File: VrVQVQ1WQYCx333rW1jTprES5-M.mft (raw, json)
Hash identifier: yXEvZX8KhRentmw3eAyDo3buWHSB5EPzam7qmPPSdA8=
Subject key identifier: 03:F8:EE:2C:09:A4:C6:A4:52:4F:3E:F8:72:26:56:4B:43:B8:67:90
Authority key identifier: 56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
Certificate issuer: /CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Certificate serial: 019CADC8019F8D9DA2252D8A38957F070B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
Manifest number: 0DDD
Signing time: Mon 02 Mar 2026 09:01:31 +0000
Manifest this update: Mon 02 Mar 2026 09:01:31 +0000
Manifest next update: Tue 03 Mar 2026 09:01:31 +0000
Files and hashes: 1: 6wW52SOqWXrfAlhosP3ynpLxyA0.roa (hash: FwT8E7oaMMyN8V9+/04Bhii7J8JtbQGmipn/OxYLQDA=)
2: VrVQVQ1WQYCx333rW1jTprES5-M.crl (hash: xUhhBDV7CYFWH+3RzxqFg31sWjP1AD+zfuvz4I9cI+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:01:9f:8d:9d:a2:25:2d:8a:38:95:7f:07:0b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Validity
Not Before: Mar 2 09:01:31 2026 GMT
Not After : Mar 3 09:01:31 2026 GMT
Subject: CN=03f8ee2c09a4c6a4524f3ef87226564b43b86790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b7:dd:67:7a:67:36:f2:0d:59:18:8e:c8:03:
ed:51:dc:fc:4e:a9:1e:91:9a:59:63:44:a3:cf:dd:
e0:b5:08:16:5b:37:b7:77:65:95:24:7b:24:3b:dd:
11:58:c4:e1:63:ef:92:86:a4:e1:ba:9a:ba:5d:a9:
3d:a8:e4:8c:f1:b4:53:18:5b:4a:13:50:38:56:36:
33:db:6a:23:aa:5f:7f:37:d0:e5:d3:13:08:3a:67:
b7:5f:a5:e7:a5:88:b6:50:f3:46:3c:b4:b4:50:84:
2c:b6:92:03:19:5b:82:99:18:9a:49:e7:93:e2:30:
bc:8c:c9:69:ad:fe:64:03:bf:be:f7:34:e3:9f:d0:
c0:68:46:d1:5d:16:27:77:26:cf:06:58:1d:96:54:
a5:83:75:33:0e:e5:dd:86:7c:8a:c3:bb:f7:86:df:
15:7b:3f:51:61:eb:a0:ab:1e:1f:f8:a3:24:6f:86:
64:59:a7:66:5c:2f:fe:dc:bb:0e:f8:d1:50:08:54:
52:c0:dd:80:33:c4:85:88:55:1f:9d:19:8d:91:a9:
30:51:fa:b2:23:fe:af:6d:51:75:1c:9b:94:57:3f:
7b:51:64:63:21:95:f6:52:b6:65:5e:27:06:15:76:
08:d9:3f:fa:cb:fe:c5:10:9a:70:7f:df:4b:6e:59:
49:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F8:EE:2C:09:A4:C6:A4:52:4F:3E:F8:72:26:56:4B:43:B8:67:90
X509v3 Authority Key Identifier:
keyid:56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:48:9c:1a:a6:ae:1f:64:0e:f7:50:bf:d0:a5:d7:e8:bb:d2:
2f:0c:9e:df:26:75:cf:f9:b0:04:24:6f:01:86:88:2d:b8:65:
cf:d1:b8:9a:43:9d:2f:02:70:3c:01:29:8b:53:40:0e:0c:f0:
8f:3b:23:33:db:77:94:0c:64:ba:42:97:c1:37:54:9a:de:bb:
43:58:d6:30:cf:b1:eb:2c:59:77:32:da:19:3f:8d:b6:47:2a:
93:e9:bf:9b:38:4b:c6:a2:20:45:5c:92:46:5c:5a:b6:f4:31:
5a:fd:21:97:8d:4e:0c:f9:10:58:ac:3e:a1:e4:b8:d8:8d:29:
03:25:38:32:36:62:4a:bd:86:00:c9:61:ff:62:a1:11:11:ef:
ef:81:70:9e:37:1f:16:3a:95:ab:c8:e9:95:6e:b8:62:27:67:
82:d4:90:99:db:1c:9c:73:7d:85:11:ac:5b:eb:2a:bd:1d:01:
74:50:e4:3a:ea:35:22:56:5c:7d:e8:f3:e4:84:b0:b9:5e:0e:
03:8c:a0:6d:c6:4f:8e:7d:f5:d3:71:cf:e1:ba:6d:4c:50:c7:
20:fb:44:4f:7c:65:b9:4a:23:dd:c3:b8:ea:3a:fc:83:6b:6b:
f0:75:28:26:4c:15:39:66:e0:58:9c:b2:62:de:f6:79:39:33:
41:8c:a7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:31 2026 by rpki-client