Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
File: vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft (raw, json)
Hash identifier: cDsusAIqLxikV/zX4rj6x2aHUIZHE9cg0z4n2bkFvmk=
Subject key identifier: E6:02:09:FD:32:F8:FC:4E:19:FC:75:7B:17:F8:C9:0D:45:1C:B0:20
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial: 019CAB3447EA7D5839BE3923CB8C733F542F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
Manifest number: 1086
Signing time: Sun 01 Mar 2026 21:00:56 +0000
Manifest this update: Sun 01 Mar 2026 21:00:56 +0000
Manifest next update: Mon 02 Mar 2026 21:00:56 +0000
Files and hashes: 1: SCfxhTRg7vuqifF8bQRKgajG91E.roa (hash: wp0+S1qlwyLRk1HvINrBgxEXYo/XnKOOpIUSgnFHiUs=)
2: vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl (hash: ujwTYayid8Fm07QNgJH5DoIv8XHQMWCLUF1BDeGBovU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:47:ea:7d:58:39:be:39:23:cb:8c:73:3f:54:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Validity
Not Before: Mar 1 21:00:56 2026 GMT
Not After : Mar 2 21:00:56 2026 GMT
Subject: CN=e60209fd32f8fc4e19fc757b17f8c90d451cb020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:73:ab:50:d9:f8:2e:54:52:08:fa:49:d0:
70:8b:ba:ac:f7:f2:9b:06:06:df:52:6e:4d:03:40:
61:0d:e8:fc:39:1f:41:a0:d7:57:08:1b:95:67:be:
a5:19:a7:77:2f:b1:8f:a1:2b:a8:16:80:8b:db:53:
9e:a3:b1:86:e8:95:fd:fd:db:fe:32:50:90:19:6c:
3d:b6:57:5d:45:9d:00:d2:53:9a:3c:f8:7a:98:1c:
a8:34:67:05:8d:c0:59:4e:7e:2c:69:be:7a:6c:c2:
d5:1a:2d:10:aa:1e:f2:05:42:ca:48:df:c2:cb:fb:
5d:85:15:c0:0b:0a:13:65:56:41:0c:b5:51:29:ed:
02:9d:2e:7a:b7:8d:31:60:31:44:ed:da:e6:4b:98:
8c:a8:5d:3a:fa:f4:97:12:ac:9e:0a:ff:b4:c9:70:
6c:22:b7:d4:ef:05:c1:12:e0:cb:b3:73:b6:27:c5:
12:80:1a:47:5a:38:96:10:ec:08:a0:d7:1a:b3:89:
14:bd:d9:32:07:ad:a1:5f:d7:29:f1:ac:b5:13:47:
6c:61:62:b0:8d:89:0d:f9:32:41:d5:fb:a2:01:7d:
75:b2:f9:d4:ff:0c:f1:5e:a9:be:42:2b:e8:20:13:
ec:9f:60:4e:69:54:4a:da:c4:81:42:64:1a:b2:a5:
7f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:02:09:FD:32:F8:FC:4E:19:FC:75:7B:17:F8:C9:0D:45:1C:B0:20
X509v3 Authority Key Identifier:
keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8b:6c:72:86:a2:6c:62:19:71:a9:85:01:f3:24:b7:5a:41:
4f:81:b9:52:87:a8:51:4a:19:8a:57:ae:68:dd:82:63:d8:41:
b6:b4:00:68:ef:dd:26:5d:93:20:fd:47:b1:a7:5f:04:41:8d:
9d:21:57:c9:de:3b:ed:73:da:11:2a:88:3f:6a:05:dd:a3:6a:
75:e4:30:bd:6f:75:f6:4c:54:56:bd:5e:61:b6:c3:76:ee:64:
ca:6c:33:a4:52:39:d3:93:a7:d1:1e:cb:7d:53:28:47:9b:fe:
bd:f3:93:3e:ab:18:23:23:0e:d6:9b:3b:ae:3a:b9:ce:8a:9c:
8d:67:a6:8d:b6:64:7b:da:93:ba:98:fb:bb:0d:32:4e:5c:5d:
5e:55:7e:c3:50:f0:8e:69:b1:e5:a9:4e:88:02:17:36:06:2a:
e6:41:81:34:fa:7d:89:af:2e:61:9a:90:1a:7d:58:77:d4:ea:
ae:25:75:5e:02:75:58:ba:f1:85:d3:77:58:cd:c1:84:bd:91:
73:76:61:46:b5:7e:1a:ae:1a:48:30:3a:a7:da:85:3f:04:64:
43:0d:bc:bd:f6:ec:f7:b3:bc:cf:d8:c7:30:9a:8a:c1:56:f3:
7b:fc:23:a3:44:55:91:b6:53:70:bd:a3:62:90:e8:b5:f7:bb:
99:4c:06:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:13 2026 by rpki-client