Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
File: vqPSZTUbZfI58pl94eioBneTOl4.mft (raw, json)
Hash identifier: 8fKc57pT5gRfQD5U2xVfC9Dls3WjdK4ABzrpPTC+kd4=
Subject key identifier: 8A:A3:19:A3:B1:B0:C7:EB:F4:0C:34:D4:5E:E7:A6:8B:AD:65:32:40
Authority key identifier: BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
Certificate issuer: /CN=bea3d265351b65f239f2997de1e8a80677933a5e
Certificate serial: 019CAC7E0B1B5D1483DD034A059CE9F3A0F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
Manifest number: 066C
Signing time: Mon 02 Mar 2026 03:01:07 +0000
Manifest this update: Mon 02 Mar 2026 03:01:07 +0000
Manifest next update: Tue 03 Mar 2026 03:01:07 +0000
Files and hashes: 1: PIxJAOWfVeBmU76JbXSAooErb1U.roa (hash: T08H7sWyCft7hkyKVMhTHqrQKcUGSoqeo9MGAcS4sOs=)
2: vqPSZTUbZfI58pl94eioBneTOl4.crl (hash: B3NMq1YJstdCb6xSTJyXuPxspZgwGyXsftv26wvIuhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:0b:1b:5d:14:83:dd:03:4a:05:9c:e9:f3:a0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea3d265351b65f239f2997de1e8a80677933a5e
Validity
Not Before: Mar 2 03:01:07 2026 GMT
Not After : Mar 3 03:01:07 2026 GMT
Subject: CN=8aa319a3b1b0c7ebf40c34d45ee7a68bad653240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:56:ae:20:64:21:68:04:e4:5c:26:70:25:
0e:6e:57:ad:72:1a:cd:bd:b0:85:ca:e7:2f:e5:8e:
77:e8:7f:50:3b:f6:df:01:5c:99:bb:68:af:90:a2:
1a:a8:d1:98:6b:71:32:10:ca:06:e3:5f:66:92:1f:
ca:3c:4f:a7:fd:49:f1:26:11:27:ef:60:21:ce:95:
b9:d1:14:d8:d2:cf:50:15:fc:6c:a7:18:94:97:d2:
fe:89:5e:3f:1f:05:d1:7e:13:8c:d9:59:5a:b0:a5:
74:ca:11:51:4d:0b:1d:81:ce:4b:47:0e:f7:3c:62:
57:03:73:6e:85:eb:2f:6b:9f:45:4d:2a:a6:e7:41:
53:dc:29:ec:90:82:8d:7e:1d:b9:53:27:22:ab:fd:
ec:b5:19:e8:cf:63:a4:3d:14:33:fc:4c:6a:2c:a1:
b2:4a:b2:cb:82:4a:be:9c:fc:15:e7:15:68:6c:52:
66:2c:a7:ec:0f:e8:a1:a5:45:58:71:57:bb:e3:e7:
2b:d4:a4:b0:4c:9b:8e:59:0b:87:c8:e9:6f:8e:94:
ec:64:77:da:bd:92:ae:0a:3e:ca:2e:b7:17:5c:c9:
89:43:c2:a3:5e:f4:57:be:60:2c:7a:c9:32:64:8c:
1b:c0:00:0d:a7:ee:24:74:f5:eb:da:e9:87:af:3a:
53:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A3:19:A3:B1:B0:C7:EB:F4:0C:34:D4:5E:E7:A6:8B:AD:65:32:40
X509v3 Authority Key Identifier:
keyid:BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1f:98:0b:04:78:c6:6a:c8:0d:6d:85:b5:2f:55:6d:ff:49:
29:ff:c1:1d:1a:52:3b:e2:51:ba:9a:f5:dc:69:cf:57:64:e8:
a2:19:3e:ee:03:af:22:38:78:ca:15:26:c4:67:25:ec:c9:54:
f9:92:17:bc:73:78:10:87:e3:f8:78:e4:31:9e:f3:81:6e:2b:
08:60:75:af:6a:25:68:f1:ec:63:5c:9e:d2:4b:45:56:4e:84:
83:6a:05:b5:02:c6:76:6f:12:ad:3e:32:ca:65:d6:75:ca:a4:
c5:75:bc:57:bf:c7:67:c8:ec:74:d8:94:4d:51:7d:0b:19:8c:
b8:41:da:2a:00:93:de:02:26:dd:54:cc:e1:4d:8a:70:a3:d9:
bd:73:bc:09:ba:cb:b0:3e:eb:e8:1d:7c:17:2d:e8:86:57:68:
dd:1d:0d:50:08:05:e4:cd:8b:23:aa:07:d2:67:be:d0:60:c5:
a8:6c:98:0c:aa:0e:8f:43:a4:af:d3:bb:cb:78:59:30:e4:9c:
5f:a9:aa:ae:c7:7f:65:81:fa:80:d0:e5:75:86:c7:cb:a9:c1:
88:46:ce:6d:b7:85:72:3f:ad:64:3d:d1:44:0a:a9:9b:88:79:
a7:94:50:8a:5c:aa:4f:46:9b:66:11:6c:25:a8:c4:9f:35:f3:
9d:fa:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:44 2026 by rpki-client