Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
File: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json)
Hash identifier: F1+FEa3p8ujM3t/J8e4lhGcW2bbMMvX4M/tfVDnusqU=
Subject key identifier: 64:A2:9B:7F:B0:0F:E0:6F:6E:92:2E:70:DC:B3:FA:A5:4D:0C:21:01
Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
Certificate issuer: /CN=bea7769343c691f675bb369253cb3f6fc304b01f
Certificate serial: 019CA9EB9461C3E574059D6BB6195C044B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
Manifest number: 0BE8
Signing time: Sun 01 Mar 2026 15:01:54 +0000
Manifest this update: Sun 01 Mar 2026 15:01:54 +0000
Manifest next update: Mon 02 Mar 2026 15:01:54 +0000
Files and hashes: 1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: QkHIwmwijOeEZPHAxmwU2B4/9Wz9ybZr5fbovDr4hUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:94:61:c3:e5:74:05:9d:6b:b6:19:5c:04:4b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f
Validity
Not Before: Mar 1 15:01:54 2026 GMT
Not After : Mar 2 15:01:54 2026 GMT
Subject: CN=64a29b7fb00fe06f6e922e70dcb3faa54d0c2101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:93:7c:ce:f5:5a:b6:9d:36:26:f8:91:cd:
e6:71:15:c1:5b:6f:70:33:ea:ff:aa:d5:c0:c5:23:
a5:94:59:de:fd:af:ad:55:e2:ce:7c:31:3d:d5:4d:
ee:24:5f:f4:69:41:ff:6c:f6:d6:61:eb:ba:a9:aa:
7d:87:b4:a4:15:00:63:d0:02:13:b7:0a:0c:e0:5e:
b1:03:19:85:a8:51:b6:48:6a:95:7d:e0:95:24:9b:
ee:8d:be:0d:ee:74:56:fb:e0:31:80:64:4c:91:52:
2b:bb:52:e4:7e:a0:e1:35:de:26:b6:b1:ed:55:16:
f1:d5:0a:7a:82:b5:6c:55:b1:4f:cc:40:d9:ad:3d:
04:ed:e7:fe:ca:00:56:44:b4:9b:fc:35:a5:d9:9c:
b3:78:4d:8c:e4:66:25:f4:7e:3d:92:f2:ec:c0:ba:
52:84:4f:97:44:ad:0d:51:f6:3c:3a:8b:e5:b3:68:
4d:f1:86:ff:ae:55:6b:ec:3b:6d:f3:7f:8e:e1:2c:
ab:cd:59:f4:1c:6e:6b:d2:a3:f4:4c:b3:66:ae:7c:
17:05:71:91:87:0d:76:8e:70:4e:12:52:8e:26:62:
ce:a5:21:f8:79:27:b8:16:ca:77:95:58:c8:e2:2b:
55:61:49:dc:df:c9:7e:87:c4:cc:7f:b9:18:41:02:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A2:9B:7F:B0:0F:E0:6F:6E:92:2E:70:DC:B3:FA:A5:4D:0C:21:01
X509v3 Authority Key Identifier:
keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5a:2e:5e:83:14:aa:38:02:38:5b:2f:19:3b:41:06:03:9f:
ea:40:ec:6a:4e:bc:28:80:f0:8e:43:54:50:03:7d:f1:5f:69:
00:0b:6c:6a:b7:3a:2c:b9:b9:24:c7:3f:42:a8:da:0f:0d:3f:
86:59:29:bb:e2:8a:22:ef:e6:52:16:06:37:9d:75:3a:d7:83:
e3:22:c0:2d:56:c1:c4:93:d7:46:a3:e3:de:53:ef:e5:98:d2:
c3:de:82:7b:b5:30:ab:ef:20:27:1e:d7:1b:14:4d:e8:21:c6:
83:cc:e4:8b:3e:bc:77:d1:88:17:84:79:0f:02:a5:7d:72:85:
2d:85:72:a5:c1:3f:c0:b6:66:e6:4f:02:b4:a5:ca:ae:2c:89:
35:05:86:ef:01:12:55:f3:54:5b:fa:c7:aa:35:29:4f:82:78:
89:a2:bc:99:90:b4:57:5f:5f:71:21:da:ca:4b:13:a7:b9:5d:
59:71:2c:04:73:2b:08:fb:bd:85:f7:bf:bf:93:1f:94:4f:7e:
21:52:f4:4a:d2:13:19:b3:eb:f8:f0:e4:c3:53:95:60:92:44:
91:fa:09:a7:0b:da:b6:fe:d2:9b:b7:dd:9a:58:34:aa:50:71:
0b:6d:d3:30:0e:a3:5f:a7:bd:ab:d6:72:35:49:8b:f1:31:37:
99:33:3e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:39 2026 by rpki-client