Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
File: VQlsYRU9KrVQd_GjDCRZhgAbodk.mft (raw, json)
Hash identifier: 7mW1eHt2MEHQy3jrXPIDnh889bRXa9FPyWQ/tCRFtd4=
Subject key identifier: E8:98:B0:2D:8C:70:D1:29:33:92:46:89:9F:5A:BD:E4:7E:98:14:1D
Authority key identifier: 55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9
Certificate issuer: /CN=55096c61153d2ab55077f1a30c245986001ba1d9
Certificate serial: 019CAC7DD08EFB7DBFCBC3A7CE5910F1904A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
Manifest number: 17A0
Signing time: Mon 02 Mar 2026 03:00:52 +0000
Manifest this update: Mon 02 Mar 2026 03:00:52 +0000
Manifest next update: Tue 03 Mar 2026 03:00:52 +0000
Files and hashes: 1: L2us4XYIluXkOsFm9J7dSNDwZm4.roa (hash: gJqSk17T95h4Sy3x6XTP760PLlpUDAkllkBjLL3UPHI=)
2: VQlsYRU9KrVQd_GjDCRZhgAbodk.crl (hash: 2SqIedjnnjis69gLX5Fh3cuf3zvTJ7SOdSLZR17nX+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:d0:8e:fb:7d:bf:cb:c3:a7:ce:59:10:f1:90:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55096c61153d2ab55077f1a30c245986001ba1d9
Validity
Not Before: Mar 2 03:00:52 2026 GMT
Not After : Mar 3 03:00:52 2026 GMT
Subject: CN=e898b02d8c70d129339246899f5abde47e98141d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:34:2f:b1:44:15:ee:66:4f:ce:97:cb:6a:73:
e8:49:b0:b5:0e:83:e6:e3:52:d4:6c:12:51:03:13:
b0:0f:4e:6c:12:c6:6f:10:b4:19:0c:1d:39:e6:92:
f9:81:13:32:d5:53:ba:ac:cb:5d:d8:5d:09:27:d9:
ca:3e:a7:39:7b:c2:00:4d:ca:4e:e7:10:15:9a:cd:
08:10:ad:2e:c9:76:a0:df:29:2c:bb:55:7b:39:c6:
e1:6a:71:23:9e:0d:44:84:f9:36:c9:cc:c6:ae:de:
77:a7:35:98:76:b8:6d:d9:58:d4:d5:49:e8:d0:e0:
9c:06:a6:03:e1:de:e5:cd:18:8e:30:88:40:c6:68:
48:74:99:a6:05:37:40:f2:81:15:fe:ab:d7:d4:ca:
9d:f1:d9:88:28:1b:d1:a4:af:06:c5:cc:ec:51:c0:
3e:03:ca:c6:47:0c:fb:f5:03:2f:b9:3c:6d:70:0d:
6b:c9:7c:fe:8f:a9:fd:cb:6f:47:11:85:24:03:6c:
97:01:e0:ad:1d:d7:4b:e9:64:db:5c:a4:8d:49:d3:
85:15:3c:1a:a0:c5:50:b9:83:ae:35:e9:3c:75:cc:
59:2e:64:ac:d4:89:99:aa:98:00:2f:95:31:60:a6:
5b:42:1f:06:db:f8:fe:4c:ba:a2:ef:3b:b0:aa:77:
0c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:98:B0:2D:8C:70:D1:29:33:92:46:89:9F:5A:BD:E4:7E:98:14:1D
X509v3 Authority Key Identifier:
keyid:55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0f:71:30:10:b9:93:69:ae:7b:d2:b7:ed:13:3f:2a:0f:4a:
4a:28:32:48:52:f7:3d:54:71:36:70:86:2e:dc:d8:60:1e:32:
ce:33:72:1e:91:48:81:f3:11:aa:d4:65:47:83:87:05:75:75:
14:1e:69:79:ca:53:1a:2d:a3:da:81:d7:b2:f9:fa:79:fc:b8:
30:1f:74:ab:bf:0e:f3:64:e8:55:98:9b:08:5c:ad:49:ec:58:
80:f3:63:2a:4f:8d:5f:29:08:3e:76:0c:b3:0b:16:0e:33:bb:
d5:b8:13:2a:76:31:3a:b7:81:b1:a3:00:61:97:d5:f7:e0:72:
5a:cb:1e:9b:29:2c:ac:f3:42:c9:25:fe:ab:f2:6d:6d:9b:a4:
53:44:27:f3:31:02:e7:a5:d7:98:6e:3a:ed:2b:6e:97:b7:9a:
eb:ca:fd:2b:d4:9d:20:44:db:34:ce:5c:72:5c:30:0b:d4:fa:
39:89:bc:55:b1:1e:fc:0e:6e:e2:b5:48:6e:79:61:bf:55:ee:
c5:7a:d4:59:7e:d2:52:24:83:db:3c:ef:e1:ce:e1:4b:9c:59:
f3:5a:6d:47:2d:bc:18:1a:9d:71:ed:89:c4:df:66:b6:99:15:
e4:17:d2:96:90:7f:0f:5e:16:d5:95:bc:c0:4f:1f:8b:f8:30:
97:54:3b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:30 2026 by rpki-client