Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
File: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft (raw, json)
Hash identifier: g/BorXXBBuJuD5sJ6q2SsyjM6S6O4Y1VwT92q/nIN5M=
Subject key identifier: 03:73:10:1E:2E:4C:E7:28:6E:91:71:5E:34:B4:04:62:BC:AA:71:4F
Authority key identifier: BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
Certificate issuer: /CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Certificate serial: 019CAC0FDF2A916580AA147FE7F561DAEDE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
Manifest number: 179D
Signing time: Mon 02 Mar 2026 01:00:47 +0000
Manifest this update: Mon 02 Mar 2026 01:00:47 +0000
Manifest next update: Tue 03 Mar 2026 01:00:47 +0000
Files and hashes: 1: 5supAJphl0r8bbob-Kiwa2s9Q0E.roa (hash: 3BmLyzQOS+6Kk+ZKBpt8B4neQYPPKen9M6XG2H5jhLc=)
2: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl (hash: fe3K2zfO3OBjRfoSWeFSx9P4NmL6VesBQTZwyuLQ1go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:df:2a:91:65:80:aa:14:7f:e7:f5:61:da:ed:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Validity
Not Before: Mar 2 01:00:47 2026 GMT
Not After : Mar 3 01:00:47 2026 GMT
Subject: CN=0373101e2e4ce7286e91715e34b40462bcaa714f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:2a:07:5c:aa:35:2d:17:71:36:b6:7d:f3:
db:52:a1:33:37:7d:f0:d4:7b:2f:d4:47:c9:2f:5c:
2c:4a:0d:dc:c9:41:e0:e9:75:c2:c2:5d:a3:b7:5f:
40:2f:74:ae:a2:ef:fa:be:84:d4:df:65:51:f3:38:
ff:df:dd:20:94:c7:0a:05:c7:d9:da:b8:56:a8:3d:
3e:1e:9a:d5:e3:56:e9:c1:8a:3c:26:1f:ac:bc:ab:
1e:20:21:8c:3f:01:89:54:21:e9:cf:ac:c6:24:a1:
da:65:1c:94:08:a7:00:70:6a:ad:0f:15:44:be:c7:
48:75:83:96:0b:58:c5:80:27:02:02:62:a0:b1:4c:
94:f5:b6:3d:dd:f3:2a:81:35:6c:42:04:03:3a:a8:
0a:07:94:43:bb:a6:61:8c:f1:56:c0:a2:99:ad:b9:
e2:ae:ec:64:3f:c8:6c:04:02:f4:f4:e4:ff:ef:83:
45:b1:3d:38:1b:39:da:32:4f:9c:8f:fe:4f:81:7f:
7c:3c:f1:ec:ba:3d:55:85:e7:94:56:f4:07:dc:42:
46:b5:88:90:01:8f:16:5e:19:87:77:91:2a:6a:e8:
2f:7c:b9:10:bb:46:90:33:05:cd:40:33:3f:a0:d5:
f8:74:4b:96:5d:49:9e:31:4d:7e:13:0b:15:97:66:
51:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:73:10:1E:2E:4C:E7:28:6E:91:71:5E:34:B4:04:62:BC:AA:71:4F
X509v3 Authority Key Identifier:
keyid:BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ce:b6:f1:ad:7f:bc:fb:f4:c1:98:42:9f:b5:9e:cd:5d:66:
54:47:3e:82:50:6f:17:b9:70:13:65:21:dd:f5:b7:2e:68:fa:
2b:14:80:cf:9b:9e:d9:f0:80:b1:f6:b7:76:b1:f8:02:04:bd:
70:80:af:9e:5c:d0:ea:af:59:05:9c:f8:4a:9b:59:41:f3:72:
c8:87:53:63:65:61:84:b6:02:b2:5a:90:da:02:48:52:be:56:
a4:34:26:44:f5:26:68:5b:25:5c:b3:d3:b2:08:e7:be:b8:2f:
99:c7:60:12:0f:50:cd:8d:24:5e:69:ed:7c:c0:05:af:2b:98:
98:e8:83:b8:3a:bd:d8:7f:9a:fd:9a:05:f9:71:06:54:e5:c1:
a4:ea:86:4a:ec:56:57:8c:91:5b:b5:0e:3c:27:90:cc:ad:5a:
27:cb:39:c4:ba:0a:ad:b1:5f:57:73:ab:3e:ec:67:3d:32:e4:
f0:d3:0c:d0:50:75:d1:28:d0:7a:83:95:5e:97:88:88:29:25:
cb:3a:27:9e:b2:f2:36:29:7e:3f:15:3b:ee:56:bf:84:9a:45:
36:33:d9:74:cc:3c:a0:23:5c:92:27:bc:74:93:5d:04:99:a1:
3b:76:93:8e:59:7d:0b:10:e1:65:a3:1b:f3:95:40:66:47:05:
e9:b3:f8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:44 2026 by rpki-client