Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
File: vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft (raw, json)
Hash identifier: OIURNcKkpmFvEflXesa2fcsXSwFm+GRi+SHAh0XPB44=
Subject key identifier: D2:44:17:BB:CA:F2:CC:68:2E:A5:6B:E4:32:25:F0:D4:A5:17:4C:78
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial: 019D98BD2A34FA5346F4D6B8CAB76974B64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
Manifest number: 1101
Signing time: Fri 17 Apr 2026 00:00:27 +0000
Manifest this update: Fri 17 Apr 2026 00:00:27 +0000
Manifest next update: Sat 18 Apr 2026 00:00:27 +0000
Files and hashes: 1: SCfxhTRg7vuqifF8bQRKgajG91E.roa (hash: wp0+S1qlwyLRk1HvINrBgxEXYo/XnKOOpIUSgnFHiUs=)
2: vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl (hash: 2gfmopnoIIdEpYiHWmgVBtgD0K8WC2W2w4SfP8C2r3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:2a:34:fa:53:46:f4:d6:b8:ca:b7:69:74:b6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Validity
Not Before: Apr 17 00:00:27 2026 GMT
Not After : Apr 18 00:00:27 2026 GMT
Subject: CN=d24417bbcaf2cc682ea56be43225f0d4a5174c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:2c:b5:ff:18:99:02:49:80:83:15:31:c3:
b5:cc:ed:5b:81:b9:c8:e7:ad:8d:d5:28:df:c7:31:
72:04:2a:21:88:a8:7b:de:05:6f:26:11:f0:9b:b1:
71:b9:26:2f:5a:6f:13:3a:75:85:e1:bc:3d:18:d9:
f5:0b:67:76:28:54:f9:3d:79:cb:86:36:01:8d:ff:
07:d5:43:86:a7:f5:98:04:66:ba:c0:1e:45:84:ca:
c9:8f:5c:11:ce:7a:22:c8:57:7a:74:19:e9:b4:07:
f4:70:e5:d7:20:3c:84:08:c0:55:34:b5:87:52:62:
8b:64:f8:75:56:5b:1d:53:12:45:fd:4a:c8:53:16:
5a:80:ec:31:76:19:33:04:98:87:d0:78:80:fc:e4:
36:80:f8:17:86:e4:31:bc:d2:81:9d:ce:10:27:7a:
d4:ed:f8:f4:fd:bf:7a:2d:cb:f8:69:df:ba:1e:d2:
20:6e:82:20:ca:89:7e:20:8d:f4:66:1d:1c:30:1b:
65:f2:58:5a:63:18:3b:5d:c0:13:57:07:1a:e4:53:
93:15:f0:b6:e1:e6:44:90:5c:f4:f3:b1:69:99:01:
62:f6:d1:e7:4f:83:1d:93:02:02:6b:c0:32:ed:48:
cc:1f:ef:ae:4a:a6:61:1d:79:a6:a7:43:ea:db:e0:
9a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:44:17:BB:CA:F2:CC:68:2E:A5:6B:E4:32:25:F0:D4:A5:17:4C:78
X509v3 Authority Key Identifier:
keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:db:55:54:56:0f:94:7f:cf:53:cb:81:39:e1:fb:7c:b0:52:
4f:2b:fe:06:3a:05:a9:f4:97:75:f3:18:b5:29:4c:6e:16:6d:
89:dd:ad:0e:bb:23:a1:cb:2a:cf:c5:c2:bb:6f:05:a9:35:d3:
ad:c3:c1:a0:1e:5b:e3:ed:31:7b:12:76:1b:91:db:4f:ad:d4:
3b:b4:e6:2c:73:0f:40:63:03:0a:bb:20:09:1f:7b:fd:4d:78:
0e:37:b4:1c:52:0c:eb:39:ff:fd:bc:97:da:71:d1:a7:7b:ba:
68:24:d0:ba:85:e9:10:32:91:55:a9:2a:57:8c:7a:2e:07:b7:
55:eb:1a:08:43:6a:fa:c9:b4:85:84:0c:15:ac:3a:fb:27:b8:
b9:29:91:76:05:2f:6f:d5:95:10:3d:a0:9a:66:71:6a:9c:23:
3f:16:a7:38:4f:e5:be:e5:27:24:90:bc:d4:08:1e:86:1f:4d:
ff:ff:0e:ac:7f:13:dc:d3:17:1e:ec:ba:c0:fe:98:be:d6:43:
0d:ba:58:26:b2:49:14:10:91:de:bd:f9:14:bc:c5:8e:c7:02:
d4:02:b6:9c:96:39:50:d2:eb:ef:c4:29:b8:06:67:ef:75:a2:
78:08:fa:f9:c1:9c:df:92:0b:ed:47:15:24:79:a4:21:17:49:
a5:24:f4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:06 2026 by rpki-client