
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
File: vqse58Ta0p0SfVZdG5N5RlwoiTc.mft (raw, json)
Hash identifier: MHAWx1Z0kCuYORehprgig301GSkuPQ3oiOF4/ANI5gk=
Subject key identifier: 47:E4:58:27:D7:C9:F6:BF:32:39:0C:61:07:A7:DF:3C:A5:F5:30:2C
Authority key identifier: BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
Certificate issuer: /CN=beab1ee7c4dad29d127d565d1b9379465c288937
Certificate serial: 019CACB57D686144659B7943BE50DE0416E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 04:01:41 +0000
Manifest this update: Mon 02 Mar 2026 04:01:41 +0000
Manifest next update: Tue 03 Mar 2026 04:01:41 +0000
Files and hashes: 1: 6V9ylZM4ScnVCgD7KK6ET2PRqIU.roa (hash: 28gc2ZI73zeIbD15Qm/WZMAQ+uvvtF2FWZ9P2SGE4vo=)
2: vqse58Ta0p0SfVZdG5N5RlwoiTc.crl (hash: g9vq6yt64cQN1zUJE7qZ+JhBG8J3yQl8KEFYh82l/UE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:7d:68:61:44:65:9b:79:43:be:50:de:04:16:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beab1ee7c4dad29d127d565d1b9379465c288937
Validity
Not Before: Mar 2 04:01:41 2026 GMT
Not After : Mar 3 04:01:41 2026 GMT
Subject: CN=47e45827d7c9f6bf32390c6107a7df3ca5f5302c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:94:4b:bb:1b:dc:1e:88:94:a9:76:05:89:88:
d6:1d:63:3c:64:10:ad:4c:2f:56:39:47:0d:65:f0:
88:f8:6e:1a:15:68:75:98:f6:74:b8:32:fd:3a:aa:
7c:cc:26:1f:0e:89:c8:f3:d9:90:e1:90:7b:1c:95:
eb:eb:b9:50:bd:a0:46:cc:f5:b4:ce:82:fa:d2:30:
cb:d7:75:b3:c1:ee:f6:ff:7a:a9:c3:d4:29:00:37:
7b:39:28:ce:d0:5f:7d:41:3f:c5:1e:ef:1c:5c:f1:
87:4c:4b:9b:af:4a:33:4b:4f:5e:c8:be:c1:80:a3:
8e:ce:3d:d7:34:d9:e9:c4:93:a2:5c:8e:38:8c:b8:
5b:f8:04:3f:0e:c4:e5:68:ec:66:9c:be:74:9a:cf:
95:8d:b9:cf:23:67:ad:ce:d5:9c:06:dc:c6:81:b4:
81:ee:49:1a:76:dd:da:e5:0b:30:d8:c0:db:dc:b1:
be:e2:ea:28:76:1b:b3:86:d2:79:65:4e:ed:8c:ca:
7d:c1:bf:45:ae:e6:03:80:1f:ea:99:4d:58:d0:89:
ac:78:d6:3e:33:9d:ff:ad:27:87:63:f7:e5:9f:73:
85:b0:ce:5f:8a:57:fb:de:b9:ec:d6:e5:6c:7a:03:
50:a4:10:9d:62:09:8e:68:04:35:f4:28:e5:97:5a:
ba:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E4:58:27:D7:C9:F6:BF:32:39:0C:61:07:A7:DF:3C:A5:F5:30:2C
X509v3 Authority Key Identifier:
keyid:BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3d:64:03:82:fc:f6:4b:16:9e:a4:55:ef:6f:7e:1d:db:b8:
08:52:b2:89:e5:f7:49:3d:68:47:c1:14:f9:98:10:2b:9d:fb:
0b:b7:14:1c:0a:37:f3:43:b9:a8:bd:96:ec:37:78:af:54:b9:
7c:12:5e:56:93:63:6a:ba:a8:ca:de:b8:1c:35:71:b2:4d:bc:
18:b0:26:10:dd:66:79:5e:39:bc:86:92:b0:68:ae:18:8d:a5:
9f:dd:5d:5a:5a:b7:c4:21:19:e6:79:c5:26:22:f6:e0:aa:b1:
d6:36:03:a0:53:d0:7a:93:a6:25:44:89:a1:3e:c1:4d:df:52:
bb:e3:c6:9e:f5:83:8e:aa:9b:a4:be:a0:85:21:7b:34:9a:8f:
64:bc:35:75:40:20:9d:d4:e5:fc:f1:8a:d1:88:7c:b8:88:f2:
6e:8c:56:49:12:a2:51:42:10:f5:a2:97:2b:87:00:bf:54:c9:
45:cd:09:82:79:22:91:73:05:ff:2d:c8:ca:3c:59:59:09:61:
af:de:60:dd:86:46:29:bc:c4:a8:9d:08:a3:22:04:9d:5a:2a:
32:9e:c1:5f:53:b3:35:ad:ed:10:f6:20:4a:63:3f:77:0c:6d:
2a:9c:a6:2d:bd:c4:12:36:64:b6:a7:5a:f9:d1:44:1f:74:0e:
cc:06:b3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:06 2026 by rpki-client