Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
File: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft (raw, json)
Hash identifier: byz0pMiRCDAWS3nOaVB2gvgOPvZfx3bJzWdf6OHwyG0=
Subject key identifier: D0:99:B5:26:CC:B0:14:5C:B7:AE:38:65:81:FC:C1:BA:56:8B:03:DB
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 01A126F9B9929AB39DA23D4F33CB3F6666E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
Manifest number: 07E0
Signing time: Sat 10 Oct 2026 18:01:02 +0000
Manifest this update: Sat 10 Oct 2026 18:01:02 +0000
Manifest next update: Sun 11 Oct 2026 18:01:02 +0000
Files and hashes: 1: 2Lnq1jxuG7fOPywXcCckZ3LXYVE.roa (hash: Z9zocPPJpITlN/Qieci7x6zAoTFoCQUxqVuzJp2IlpM=)
2: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl (hash: aTnvXuhN1V9Rm8KmI4nP0oFloO8XMpwZiu2XPhWtV3M=)
3: Xk5XLLpJTJ0en8K-haNjI8W7sqA.roa (hash: dyeK7boJ0LjO1L8yQnVoytvIo19PRNiRm/STwxfeu9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:f9:b9:92:9a:b3:9d:a2:3d:4f:33:cb:3f:66:66:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Oct 10 18:01:02 2026 GMT
Not After : Oct 11 18:01:02 2026 GMT
Subject: CN=d099b526ccb0145cb7ae386581fcc1ba568b03db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:dd:1b:e3:4d:0f:0b:ed:34:84:e0:c9:2e:
f1:fa:10:64:ff:a3:be:12:15:83:dc:6e:92:25:7d:
11:58:af:8c:9a:b5:88:81:d5:35:47:f3:b3:e3:80:
3f:11:b7:7e:c8:e3:a3:cd:ec:f1:3b:b0:b6:b9:c5:
e4:8a:4b:11:d9:1b:be:05:fc:5d:7d:7d:00:ab:0c:
35:6e:1e:58:86:f8:bb:ac:7e:89:ad:1a:37:0c:b3:
7f:0c:bb:13:39:4f:7e:b5:74:7e:e7:33:0c:25:2e:
26:1e:4d:17:d0:d2:9e:80:02:6e:2b:69:89:f0:64:
a6:a6:d5:0f:87:ab:86:e1:43:f0:b9:f7:49:71:ca:
24:a4:53:0b:6d:78:7f:1f:82:a7:e5:56:10:4b:7c:
46:0a:e2:cb:dd:65:49:8a:c6:98:77:e5:c9:92:d0:
f3:ab:1b:32:18:62:64:8e:2c:f1:dc:2d:6b:f8:c1:
ba:68:45:6a:0d:ae:57:6d:21:a7:40:0b:98:a3:e8:
b7:05:8b:1e:e0:b5:33:d0:8f:88:35:9d:00:1d:6c:
50:57:d4:95:e9:7d:02:80:6b:53:43:41:25:80:c3:
60:63:98:37:d5:85:71:9c:58:1f:ef:50:0f:1f:ee:
e8:52:74:2d:19:d2:6d:41:40:fa:a6:4f:9e:94:e7:
95:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:99:B5:26:CC:B0:14:5C:B7:AE:38:65:81:FC:C1:BA:56:8B:03:DB
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:91:46:46:a4:e0:42:60:e9:49:28:d1:57:c5:9d:18:7b:41:
c7:aa:01:6d:f2:bb:34:72:ac:c8:e0:d5:f6:2f:13:48:60:bd:
d9:d5:6a:bc:f3:2f:ef:db:be:f9:92:c9:6c:65:91:26:71:6c:
b4:77:ec:5a:52:99:05:83:b4:72:af:16:43:51:4c:59:0b:ca:
1d:8a:4c:86:29:eb:42:d2:d9:bd:d5:14:7d:69:db:16:35:a4:
52:ea:bc:df:4a:8e:07:8f:7c:30:e4:fb:92:90:2f:8e:83:d1:
ea:24:b0:8a:eb:2d:23:b4:5a:0f:f4:f5:a8:c5:dd:aa:ac:37:
54:42:a6:1d:75:53:07:f3:21:9b:74:dd:3a:d1:b7:07:1d:96:
cd:99:c2:ee:00:a4:0d:fd:03:75:cc:63:7f:2f:78:52:7a:94:
12:24:d8:91:32:0f:c6:60:7f:13:e3:dc:90:7b:66:91:cf:81:
9c:04:02:af:e0:96:5d:4f:f5:fc:25:d1:4f:84:a0:50:7d:17:
00:86:ba:7f:b8:f8:8d:21:2f:f6:8a:20:50:ad:26:07:e8:b5:
38:87:fe:cc:2a:43:7a:ec:89:78:d0:ed:f5:a4:b5:e3:a6:df:
95:d8:ea:87:f7:40:f2:35:15:0a:3d:84:7a:ae:77:2d:9f:7f:
ca:0d:ad:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:59:20 2026 by rpki-client