Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
File: Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft (raw, json)
Hash identifier: GqS0tHsqCAvAKcm31qFiK0xeyHeIZzbinhSk7Dt8ZOs=
Subject key identifier: D3:DF:4E:A4:4B:AC:1B:86:B1:7A:B4:2E:88:7E:83:0B:DA:75:85:3E
Authority key identifier: 56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0
Certificate issuer: /CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
Certificate serial: 019CAA8FF7658D6F751E2386833E5B525A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 18:01:27 +0000
Manifest this update: Sun 01 Mar 2026 18:01:27 +0000
Manifest next update: Mon 02 Mar 2026 18:01:27 +0000
Files and hashes: 1: I-ukRrCAPBajw4Cw7SX_HqtjY_Y.roa (hash: nRHAOv53R6oXv1iB+S9TIyPCUUphzX+kQpcWt0Y3Kbw=)
2: Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl (hash: +guLin0zjgcWVvn6RUeDJuTaCVi/hw3KoWNvMzXri58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:f7:65:8d:6f:75:1e:23:86:83:3e:5b:52:5a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
Validity
Not Before: Mar 1 18:01:27 2026 GMT
Not After : Mar 2 18:01:27 2026 GMT
Subject: CN=d3df4ea44bac1b86b17ab42e887e830bda75853e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:73:88:94:65:3c:4f:17:4d:50:4a:f8:c2:3e:
54:bf:47:49:e2:9e:3a:04:65:6b:e9:c4:4f:31:7b:
26:21:a9:23:ab:d4:51:01:7e:f1:3d:49:f2:53:9e:
d4:0d:61:07:1b:ee:bc:41:9b:43:e8:52:a0:01:78:
2c:67:ec:b7:c0:2b:ab:4a:e4:14:4a:58:27:52:cb:
06:bd:ce:67:af:51:0e:8f:b3:4a:8c:4a:eb:63:e2:
8b:46:81:d9:46:aa:55:2e:50:cb:63:8a:46:70:4b:
4f:81:ee:d0:2e:45:57:c0:48:f9:02:ce:ae:f7:f1:
f8:f5:f5:97:73:23:29:2e:bd:26:92:57:fe:1a:f6:
a7:db:f0:2e:5a:a5:e9:49:19:78:e2:44:ec:0a:4f:
ff:c0:50:e4:32:c2:80:28:78:e9:34:3c:81:07:e6:
95:fa:e1:1e:ce:fe:37:51:0b:35:55:10:16:6e:53:
07:0b:45:30:44:cb:7c:6d:c4:1a:5d:7d:aa:f5:85:
51:05:b5:ce:ab:3b:bb:ad:c3:05:f3:8d:66:01:00:
10:b9:cd:c4:16:a9:e7:27:9b:07:fd:23:96:90:f1:
e6:d8:1a:f5:4e:e1:6d:35:e9:05:b7:39:6b:d3:15:
6a:98:08:58:4c:9b:84:0b:c5:ec:3b:24:a4:f0:98:
7a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DF:4E:A4:4B:AC:1B:86:B1:7A:B4:2E:88:7E:83:0B:DA:75:85:3E
X509v3 Authority Key Identifier:
keyid:56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4f:7b:a9:64:29:38:7d:be:e5:11:36:03:9a:72:1f:e1:d3:
7e:37:9d:11:02:18:2b:6d:64:f4:9f:db:f9:1e:b1:a3:9d:59:
10:ae:fa:71:2a:49:33:78:c7:80:51:a2:41:36:0d:09:7f:57:
1a:c2:6c:49:67:13:1c:89:70:e5:d9:45:3c:69:d9:25:e5:8d:
0e:75:1c:8a:ee:3c:bb:93:62:d9:8c:69:38:37:e4:99:c2:27:
3c:a6:82:90:18:41:69:0d:c1:e2:59:47:2c:e2:8e:e6:b7:8a:
05:34:a1:5c:32:70:6e:e2:1e:75:80:a4:f3:a8:40:23:df:99:
52:b7:c7:3c:41:a9:38:3f:3f:dc:fe:32:7e:82:a2:b2:e1:2e:
a4:f4:5b:f8:48:f2:6e:86:da:c6:8f:25:34:7a:44:75:ef:b1:
2a:69:ad:3f:b5:7a:eb:f8:ab:45:28:55:36:b1:3b:7e:57:0c:
a0:d5:08:53:03:24:1e:57:61:15:48:1a:c2:d8:93:2b:8f:20:
3a:3d:f0:63:46:1c:24:79:f6:c2:24:64:50:2b:f0:3e:ac:7c:
fa:d1:6d:ba:9b:89:8e:e7:5b:22:72:64:18:36:c0:df:de:a4:
7d:50:11:75:3e:b0:25:05:3b:fb:18:00:62:38:35:9b:59:22:
5c:54:b5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:02 2026 by rpki-client