Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
File: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft (raw, json)
Hash identifier: q3e7HgfnXOjk7smVvrXmkkyBON3cPoWRm2HB5Mb3fl0=
Subject key identifier: D7:44:FD:F3:EB:C4:78:60:7C:9F:DD:61:F8:00:F7:82:FA:62:AD:D9
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 019CADC7540A0147AA8EC66BE483AEBF509C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
Manifest number: 058D
Signing time: Mon 02 Mar 2026 09:00:47 +0000
Manifest this update: Mon 02 Mar 2026 09:00:47 +0000
Manifest next update: Tue 03 Mar 2026 09:00:47 +0000
Files and hashes: 1: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl (hash: f+PUa2gj4i5HXXubHXQ5qrNx3VSh357NgVPA2K70V0Q=)
2: Wjs_phSFXCf5P7VyIC49aTpiAXE.roa (hash: lvpNQeyfYNhi6y1BNKSvPAqUckUzrotwMitNw+e8iYU=)
3: Xk5XLLpJTJ0en8K-haNjI8W7sqA.roa (hash: dyeK7boJ0LjO1L8yQnVoytvIo19PRNiRm/STwxfeu9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:54:0a:01:47:aa:8e:c6:6b:e4:83:ae:bf:50:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Mar 2 09:00:47 2026 GMT
Not After : Mar 3 09:00:47 2026 GMT
Subject: CN=d744fdf3ebc478607c9fdd61f800f782fa62add9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:6b:14:52:8c:c0:55:70:3e:77:9b:46:3b:
9a:be:ee:ca:fe:75:34:cc:cf:e7:d4:f5:cf:54:72:
d0:b3:19:a5:85:4e:74:90:05:69:1b:79:a0:6b:1d:
21:b8:3d:ae:6a:40:89:4e:52:e7:86:ae:54:d9:64:
e4:fd:24:6e:33:dd:a3:12:69:a1:40:0d:ad:67:df:
bf:b9:04:7f:38:cd:47:92:7b:d7:a0:18:fb:46:55:
b7:a3:12:14:7e:8b:92:1e:67:87:9a:63:6b:16:2d:
b1:bd:d8:bb:48:8b:ac:92:2e:c5:39:93:fd:9f:93:
ba:b1:c1:9b:f6:88:3e:2f:3b:b6:a4:01:84:72:00:
5b:2c:c0:93:cf:9e:87:cd:f4:c7:ad:34:6f:b3:d0:
8a:45:a9:2b:8a:0b:8a:e6:de:0c:fa:bc:d6:39:c3:
9e:74:43:25:9b:e4:a8:77:68:59:22:ac:2f:ed:5f:
4e:c0:f5:47:e4:9d:94:48:ad:15:fc:0d:38:33:a5:
a3:42:8b:9b:d4:7b:d4:ba:0f:b5:17:9d:b5:98:bc:
84:d8:8f:37:2e:ea:b9:68:83:d3:cf:b9:b9:c6:03:
9a:9c:bc:37:8d:65:54:7c:bd:89:f8:ae:01:51:46:
99:58:cb:f0:73:05:4e:cd:cd:80:ad:e2:92:85:68:
c4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:44:FD:F3:EB:C4:78:60:7C:9F:DD:61:F8:00:F7:82:FA:62:AD:D9
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ab:1f:cc:17:e0:9f:17:83:5e:c7:86:a3:3e:2e:b6:4a:c0:
a1:bb:ed:d2:3c:0f:fe:f6:9f:7e:67:03:b1:27:fa:4f:54:c3:
f0:af:80:65:db:50:bc:2a:ea:2b:0e:cf:0b:5c:3c:a4:f7:85:
fa:d1:67:2f:99:cd:52:1f:c7:5c:b6:31:f1:76:32:04:ca:4a:
9d:32:86:67:b9:c3:cc:46:42:7a:69:58:1c:fa:cb:98:7e:db:
57:f0:ec:5b:ec:fa:63:94:76:32:a9:1f:e2:24:31:f1:0f:9e:
f6:51:9d:c1:0e:94:b0:89:95:fa:6b:ac:58:9f:a2:43:86:5a:
0a:ce:ea:52:52:64:de:3f:59:76:8e:36:8d:be:c6:0f:39:85:
0c:0d:4f:8d:b4:64:bf:48:db:4f:85:6f:eb:d5:aa:05:66:2c:
f9:01:55:e6:ce:00:dc:7f:28:c6:15:ad:54:80:0c:1d:aa:1f:
a3:bf:96:6b:84:70:8a:69:2c:c7:38:85:7d:91:9e:7d:af:d0:
f7:95:62:b2:16:1b:5d:f4:17:ff:b4:db:06:fd:68:e2:18:1b:
90:68:90:8a:1c:88:6a:d4:0e:34:ba:0a:0f:1c:cd:5d:41:d1:
7e:0a:b3:83:f3:0f:97:d8:48:af:2a:11:d5:a1:44:38:7c:d8:
0e:c5:fd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:04 2026 by rpki-client