Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
File: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json)
Hash identifier: Xpy4BeuMiaRi3059qLKx7AL+4LkCRuXqSO+fGVrSmKU=
Subject key identifier: 9B:86:0D:09:A1:85:8C:BA:F5:99:73:C5:64:5B:7E:C5:C8:AE:CC:FD
Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
Certificate issuer: /CN=bea7769343c691f675bb369253cb3f6fc304b01f
Certificate serial: 019DA309E2562DEF81AA132DD432C03CEAA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
Manifest number: 0C69
Signing time: Sun 19 Apr 2026 00:00:26 +0000
Manifest this update: Sun 19 Apr 2026 00:00:26 +0000
Manifest next update: Mon 20 Apr 2026 00:00:26 +0000
Files and hashes: 1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: 1y6bkPXxRxOFocscHYyC772+7P3q1As/dB371jOKmgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:e2:56:2d:ef:81:aa:13:2d:d4:32:c0:3c:ea:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f
Validity
Not Before: Apr 19 00:00:26 2026 GMT
Not After : Apr 20 00:00:26 2026 GMT
Subject: CN=9b860d09a1858cbaf59973c5645b7ec5c8aeccfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:14:1b:09:39:2c:15:46:45:a7:9f:07:6a:
16:41:5f:51:c6:a3:05:63:55:06:56:30:5a:a5:72:
31:14:4c:c3:62:f5:b2:fe:b0:1c:df:7c:86:91:80:
6f:12:df:31:35:17:c8:cc:0c:a5:50:21:98:90:44:
59:9e:11:41:0b:53:65:61:ac:0b:0e:c0:c8:4b:3c:
72:67:6f:b6:3e:53:5e:42:7e:98:dc:98:51:a4:07:
c7:e0:f4:d8:6e:29:33:72:5a:bd:76:d2:ed:06:34:
7f:db:dd:50:4c:80:64:75:6f:9d:33:3c:5e:59:50:
43:d1:6d:f4:4d:d0:07:2a:b4:b2:88:3c:12:09:9a:
4d:22:4f:4b:40:d5:4f:d1:29:9d:24:d9:95:53:e1:
dd:ea:29:6f:a3:d9:f8:b7:e7:75:9d:d6:a6:4c:92:
e1:d3:6d:0f:e3:47:26:8a:75:22:6a:00:b6:54:e8:
11:18:58:ee:09:d0:55:d5:59:99:75:df:0e:5c:41:
3e:27:8b:55:6d:8d:97:bb:6a:4c:98:32:e8:43:d3:
79:7f:0a:ca:cd:fe:9c:31:6f:71:8c:c4:d4:88:1d:
dd:d7:5c:6e:1d:f1:6b:35:4f:61:8f:25:a8:70:c1:
30:ba:8c:af:f9:85:0b:c5:a7:35:e8:68:a1:01:f5:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:86:0D:09:A1:85:8C:BA:F5:99:73:C5:64:5B:7E:C5:C8:AE:CC:FD
X509v3 Authority Key Identifier:
keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:7d:72:3d:3f:dd:ee:e3:26:e2:ab:a2:99:36:6f:36:36:97:
93:f3:af:93:ab:84:b1:f5:0e:88:17:8f:ea:c2:ee:c8:88:b2:
b0:b1:e6:8d:cc:93:72:91:62:a8:f6:04:12:1e:98:7d:19:1f:
a1:ac:94:20:b6:ae:ef:23:1d:06:d5:b1:ae:4f:10:12:d6:48:
82:1c:b1:51:05:2b:04:b6:8a:cd:90:35:7b:c8:0b:94:78:3b:
1c:49:c7:54:20:42:7f:e0:5a:17:52:97:e3:90:1f:e9:99:8c:
56:35:28:8f:69:98:79:8f:e9:a2:d9:7e:97:48:13:a1:6e:b0:
0e:f3:9e:35:18:d2:0e:0e:1e:c3:71:99:7a:22:48:49:eb:10:
25:82:a7:08:2b:90:16:c8:99:d3:3f:c5:cc:a8:0f:78:0b:d0:
29:04:32:ce:3c:89:f0:37:29:43:1f:35:a0:ee:dc:f9:50:6d:
87:30:a0:df:4b:14:a6:53:cb:8f:95:b6:bc:9b:04:57:67:bf:
b0:34:f9:09:90:d5:2e:09:8b:fa:56:b8:c0:66:cc:70:b9:f3:
3a:13:c6:5f:69:13:d9:06:4d:34:97:0b:4b:4b:49:b8:89:d1:
97:04:c7:39:56:6f:62:41:fa:f1:a7:bc:57:a6:74:d3:59:5c:
67:79:d3:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCeJWLe+BqhMt1DLAPOqmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTc3NjkzNDNjNjkxZjY3NWJiMzY5MjUzY2IzZjZmYzMw
NGIwMWYwHhcNMjYwNDE5MDAwMDI2WhcNMjYwNDIwMDAwMDI2WjAzMTEwLwYDVQQD
Eyg5Yjg2MGQwOWExODU4Y2JhZjU5OTczYzU2NDViN2VjNWM4YWVjY2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjgUGwk5LBVGRaefB2oWQV9RxqMF
Y1UGVjBapXIxFEzDYvWy/rAc33yGkYBvEt8xNRfIzAylUCGYkERZnhFBC1NlYawL
DsDISzxyZ2+2PlNeQn6Y3JhRpAfH4PTYbikzclq9dtLtBjR/291QTIBkdW+dMzxe
WVBD0W30TdAHKrSyiDwSCZpNIk9LQNVP0SmdJNmVU+Hd6ilvo9n4t+d1ndamTJLh
020P40cminUiagC2VOgRGFjuCdBV1VmZdd8OXEE+J4tVbY2Xu2pMmDLoQ9N5fwrK
zf6cMW9xjMTUiB3d11xuHfFrNU9hjyWocMEwuoyv+YULxac16GihAfXN/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuGDQmhhYy69ZlzxWRbfsXIrsz9MB8GA1UdIwQY
MBaAFL6ndpNDxpH2dbs2klPLP2/DBLAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83ZDllYWEtZWM3NS00MjRlLTljNWUt
ZTI0ZDU4OGJiMDNmLzEvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni83ZDllYWEtZWM3NS00MjRlLTljNWUtZTI0ZDU4OGJiMDNm
LzEvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkX1yPT/d
7uMm4quimTZvNjaXk/Ovk6uEsfUOiBeP6sLuyIiysLHmjcyTcpFiqPYEEh6YfRkf
oayUILau7yMdBtWxrk8QEtZIghyxUQUrBLaKzZA1e8gLlHg7HEnHVCBCf+BaF1KX
45Af6ZmMVjUoj2mYeY/potl+l0gToW6wDvOeNRjSDg4ew3GZeiJISesQJYKnCCuQ
FsiZ0z/FzKgPeAvQKQQyzjyJ8DcpQx81oO7c+VBthzCg30sUplPLj5W2vJsEV2e/
sDT5CZDVLgmL+la4wGbMcLnzOhPGX2kT2QZNNJcLS0tJuInRlwTHOVZvYkH68ae8
V6Z001lcZ3nTRg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:13:21 2026 by rpki-client