Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
File: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft (raw, json)
Hash identifier: 4OuYTko2ll90wYBXqxGW6HDhURVkZAYiuA8z4ZqQIMU=
Subject key identifier: 8C:BE:BB:DE:07:D3:AF:40:6B:8F:6E:D3:0B:C4:91:AB:3F:EE:34:12
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 019D9A3E196C363891A10205C06B8EF2F8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
Manifest number: 0608
Signing time: Fri 17 Apr 2026 07:00:54 +0000
Manifest this update: Fri 17 Apr 2026 07:00:54 +0000
Manifest next update: Sat 18 Apr 2026 07:00:54 +0000
Files and hashes: 1: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl (hash: YQqI5zkYcvTQ57UsnpsK56EbR/K84YwmpvHaAECfEFM=)
2: Xk5XLLpJTJ0en8K-haNjI8W7sqA.roa (hash: dyeK7boJ0LjO1L8yQnVoytvIo19PRNiRm/STwxfeu9A=)
3: iIRFh2isINzb-UynrOD-rtgXRQg.roa (hash: IHKfVtc/CE8x8eA0WV7X+4nNnjsdNpcsuMxSl+7FiyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:19:6c:36:38:91:a1:02:05:c0:6b:8e:f2:f8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Apr 17 07:00:54 2026 GMT
Not After : Apr 18 07:00:54 2026 GMT
Subject: CN=8cbebbde07d3af406b8f6ed30bc491ab3fee3412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:ba:2b:62:52:81:c2:d9:63:57:03:44:ec:
33:92:bb:6e:b3:bd:0a:6e:90:17:25:45:96:50:b4:
dd:73:76:bd:e3:e3:a2:a9:2c:73:3e:69:27:c0:9d:
e9:a8:b3:7a:5a:5e:ad:fa:bd:dd:92:21:cc:54:4c:
b0:07:03:58:1d:09:73:1d:8d:6f:a9:ef:ce:0d:01:
88:9c:3d:3a:4d:fa:ae:ec:9e:d7:40:0b:96:4a:d8:
b3:d3:75:e5:ee:1a:fe:49:b4:d3:ad:bb:6a:28:90:
6c:24:c6:77:4a:9a:37:98:5d:59:2e:59:33:2c:97:
43:f2:b6:3b:f3:02:46:fa:27:36:32:53:17:3a:89:
08:c8:09:5f:51:0c:95:71:23:84:5c:11:16:dd:45:
92:21:a2:2c:f0:7d:78:fe:12:2b:7b:20:4d:2f:eb:
f5:75:cb:f1:c7:40:79:af:15:5b:ea:8e:d8:91:6c:
47:b3:60:97:04:b5:dd:70:62:f6:8a:85:a7:32:e4:
a9:9a:7b:cf:bf:a0:65:6c:4b:56:f4:7b:9a:b7:98:
42:31:f0:be:ca:45:f5:10:08:ea:dc:9d:08:1f:1f:
3c:e9:ae:02:58:83:6e:8c:e6:23:85:3a:84:7a:f6:
2a:24:b5:01:04:20:80:9f:c9:8e:5e:9f:aa:b6:f8:
c3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BE:BB:DE:07:D3:AF:40:6B:8F:6E:D3:0B:C4:91:AB:3F:EE:34:12
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:08:6f:cc:86:85:0c:a5:cd:dd:de:a4:5f:02:d1:de:66:68:
fe:4f:a4:71:8b:9d:d4:cf:72:de:ff:2d:44:8f:02:8e:71:3a:
45:09:6f:d7:5b:ae:31:01:f5:bc:8f:fc:41:d5:e8:f1:62:e3:
63:1a:f0:f7:40:b1:20:73:bf:23:99:90:f5:b0:27:b6:f4:9f:
c6:2c:ab:c3:20:82:79:44:84:68:c1:9d:5f:9d:9b:14:99:db:
4a:d5:ab:c2:54:07:81:85:44:19:0a:0f:19:9f:c8:45:42:f2:
12:72:90:17:e2:71:9d:83:28:36:9c:b7:36:68:71:06:23:d6:
6d:9d:8a:6e:d1:7d:da:e5:05:6b:f9:b4:90:91:e7:c9:f3:24:
4e:0a:0d:54:3e:29:e9:e8:d6:3d:5c:8d:5b:67:b9:2f:1c:3f:
7b:76:88:99:07:a6:ab:eb:ce:7a:e3:78:8a:f7:19:47:9b:43:
e0:75:83:f0:23:a2:d0:c0:2d:eb:11:53:7a:ab:90:25:4c:57:
cb:43:64:a8:9b:4d:0e:df:9f:ed:ad:54:10:5e:85:48:b3:0a:
aa:bb:9a:e5:aa:3c:86:b1:de:99:5c:d7:93:a6:d5:e4:4a:f4:
90:d5:64:ba:7c:e0:fb:29:d8:9c:01:f2:78:b3:af:b4:cb:9c:
cb:78:cc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:47 2026 by rpki-client