Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
File: VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft (raw, json)
Hash identifier: Xd/nqImQu8sGUGJWhx4K7QufpXoF4tOYCXBGA7zAUGQ=
Subject key identifier: D8:C3:83:FE:BA:FD:89:39:CE:16:56:9D:61:90:BC:F3:56:D8:5E:FA
Authority key identifier: 55:04:D4:A9:A7:86:C8:14:9D:AC:52:AC:5D:A3:72:12:03:AC:3A:37
Certificate issuer: /CN=5504d4a9a786c8149dac52ac5da3721203ac3a37
Certificate serial: 01A12BB232C8CB6663A497B5315CF941132C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQTUqaeGyBSdrFKsXaNyEgOsOjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
Manifest number: 021B
Signing time: Sun 11 Oct 2026 16:01:00 +0000
Manifest this update: Sun 11 Oct 2026 16:01:00 +0000
Manifest next update: Mon 12 Oct 2026 16:01:00 +0000
Files and hashes: 1: 797n5tNvO4FTahlhh50sMolaFFk.roa (hash: epHzyMWa5qoGZ2kXq/ODWaLhqBNZGkxNuRScN/tpqOk=)
2: VQTUqaeGyBSdrFKsXaNyEgOsOjc.crl (hash: WvEC/mLQRBgT/MolxvCm+AWTHQGe7i195TnfIOujvnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQTUqaeGyBSdrFKsXaNyEgOsOjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:32:c8:cb:66:63:a4:97:b5:31:5c:f9:41:13:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5504d4a9a786c8149dac52ac5da3721203ac3a37
Validity
Not Before: Oct 11 16:01:00 2026 GMT
Not After : Oct 12 16:01:00 2026 GMT
Subject: CN=d8c383febafd8939ce16569d6190bcf356d85efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:60:e6:83:46:b8:ac:58:4e:34:34:70:50:
51:4d:4d:43:12:fe:9d:89:39:5d:5e:76:b6:54:25:
2e:e0:17:63:6c:f6:87:0d:90:01:45:91:a6:39:56:
84:87:22:b8:51:d3:1c:30:8e:0b:25:f8:2f:ef:fb:
56:f5:9d:49:a0:20:25:9a:1c:b4:84:f9:c3:27:e9:
aa:f5:33:66:53:01:56:a4:a1:67:6b:93:38:dc:8e:
be:30:b3:66:99:17:72:c5:ae:1b:0d:d6:89:78:1c:
e0:e3:57:a3:e0:b6:53:d0:00:29:cf:92:50:5c:5c:
3d:50:de:a8:17:bf:38:5a:45:19:f1:0a:64:e0:0d:
86:51:ec:12:f7:82:f9:0d:f3:eb:2a:55:96:e2:03:
3d:25:95:bd:10:11:83:1f:1d:25:39:64:25:ac:82:
55:0c:c5:bf:e6:4b:6a:07:e2:85:cd:0e:73:84:82:
74:f9:0e:0a:d0:5a:d5:3e:f6:02:c3:66:18:4d:2e:
93:74:48:cc:07:22:53:22:ce:b9:03:ce:87:12:cf:
f1:41:db:b8:c8:93:0c:23:b7:0b:f1:39:bf:af:3b:
8a:de:45:00:90:46:55:04:d9:5e:bd:49:1e:78:cf:
15:75:c6:d9:97:d5:b6:d7:d6:de:25:9e:49:ac:ce:
14:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C3:83:FE:BA:FD:89:39:CE:16:56:9D:61:90:BC:F3:56:D8:5E:FA
X509v3 Authority Key Identifier:
keyid:55:04:D4:A9:A7:86:C8:14:9D:AC:52:AC:5D:A3:72:12:03:AC:3A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQTUqaeGyBSdrFKsXaNyEgOsOjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:27:3a:0f:cd:95:b8:2f:82:38:0c:c7:8b:4a:ea:87:6e:86:
25:47:1c:37:39:f8:3d:a5:73:17:3d:08:d4:6d:5a:55:ae:14:
bd:4a:bc:dd:76:46:22:d4:03:79:49:df:9d:df:68:a8:b7:99:
0b:38:ec:fa:ca:01:68:cd:92:e3:3e:8a:0c:97:17:f6:45:94:
56:7b:d5:a6:de:0b:29:6c:8b:65:3e:20:fb:ab:ae:9a:96:45:
4a:9c:5e:59:e9:f2:86:d7:48:92:f3:9b:04:7c:a2:92:ed:3b:
e1:73:a1:bb:a9:91:f1:c3:9e:c7:a7:db:d2:df:4a:3e:6f:9d:
04:63:84:10:f2:1e:0b:cc:d6:8a:fb:ee:a9:d6:5d:14:74:f0:
4c:e4:db:24:83:a0:22:02:64:5b:59:ac:85:c2:b2:fb:4b:a9:
05:4e:1d:fa:7f:fe:66:66:cb:d1:32:00:1b:a1:6f:0c:8b:dc:
c7:a8:b2:75:89:f0:c6:8d:79:91:f9:5c:71:87:46:bd:c4:6c:
ca:fb:86:ea:d7:8a:df:2e:02:a4:fb:19:e5:0d:c5:a7:53:25:
c5:50:a0:d3:ac:4f:d9:4e:6b:ee:d8:42:44:5f:3d:c3:92:d4:
0e:38:f0:e4:f0:aa:f1:df:2e:49:25:a6:3c:1d:6e:34:79:be:
db:77:5d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:31:13 2026 by rpki-client