Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
File: VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft (raw, json)
Hash identifier: aDlAgyiRcIq2JGk6XbvxBdlay4m79Fwtrtxc8G2x1jo=
Subject key identifier: 14:5F:F0:EE:AA:FD:3B:A9:59:C2:F4:6C:9A:57:EA:7D:D8:3A:26:33
Authority key identifier: 55:04:D4:A9:A7:86:C8:14:9D:AC:52:AC:5D:A3:72:12:03:AC:3A:37
Certificate issuer: /CN=5504d4a9a786c8149dac52ac5da3721203ac3a37
Certificate serial: 019D9C2CFEB627BBE6D391BD036E14EA5589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQTUqaeGyBSdrFKsXaNyEgOsOjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
Manifest number: 43
Signing time: Fri 17 Apr 2026 16:01:27 +0000
Manifest this update: Fri 17 Apr 2026 16:01:27 +0000
Manifest next update: Sat 18 Apr 2026 16:01:27 +0000
Files and hashes: 1: 797n5tNvO4FTahlhh50sMolaFFk.roa (hash: epHzyMWa5qoGZ2kXq/ODWaLhqBNZGkxNuRScN/tpqOk=)
2: VQTUqaeGyBSdrFKsXaNyEgOsOjc.crl (hash: Nej3s3UGfRmisLvnvjcDgcCYZIC0ljZVwcFASEKJgUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQTUqaeGyBSdrFKsXaNyEgOsOjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:fe:b6:27:bb:e6:d3:91:bd:03:6e:14:ea:55:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5504d4a9a786c8149dac52ac5da3721203ac3a37
Validity
Not Before: Apr 17 16:01:27 2026 GMT
Not After : Apr 18 16:01:27 2026 GMT
Subject: CN=145ff0eeaafd3ba959c2f46c9a57ea7dd83a2633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:9f:9a:57:9b:2f:de:2a:32:ab:34:88:40:
20:7d:e5:2b:47:ae:a1:4b:fb:40:78:4b:e3:ff:ff:
72:63:a3:35:07:46:83:be:35:1f:11:4e:29:7e:68:
63:e8:1a:82:5f:a2:a7:6c:45:08:d1:6b:92:9a:06:
52:05:6f:d5:fb:d3:e4:5a:a3:40:fd:39:30:b8:40:
63:31:03:47:6c:50:da:ec:21:1b:c8:1e:45:a9:f5:
82:9d:ea:73:e8:2e:d1:d3:73:73:33:66:70:9e:c3:
e7:9d:4f:30:52:b7:eb:5c:cb:f1:22:5b:e3:42:13:
a5:81:c1:11:97:87:f6:88:78:7b:02:df:2a:8d:b2:
3e:4e:01:0f:50:bf:09:e8:a8:fc:0b:fc:71:f8:dd:
e0:f5:cb:fb:aa:f1:73:de:c6:2c:e5:be:be:f9:16:
3d:92:f0:ae:17:d1:bd:ec:1d:b7:e0:47:46:69:3f:
64:70:34:68:77:06:81:6d:a1:a5:87:db:d0:e0:ed:
77:57:47:f1:61:15:fe:12:8d:e4:07:00:d6:af:2a:
35:c0:e2:fb:c1:34:19:9d:db:2e:7c:9a:d3:c3:a8:
f0:8e:07:ef:95:bd:13:2f:b7:c3:60:62:f4:71:0c:
db:54:f5:f0:4e:bb:a3:e8:9c:4f:5b:85:4b:f8:fd:
17:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5F:F0:EE:AA:FD:3B:A9:59:C2:F4:6C:9A:57:EA:7D:D8:3A:26:33
X509v3 Authority Key Identifier:
keyid:55:04:D4:A9:A7:86:C8:14:9D:AC:52:AC:5D:A3:72:12:03:AC:3A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQTUqaeGyBSdrFKsXaNyEgOsOjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4ec8ac-00db-4793-9174-cd1ca727288b/1/VQTUqaeGyBSdrFKsXaNyEgOsOjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a5:52:b9:1b:f3:63:d4:27:50:ec:24:fe:be:d3:04:db:32:
21:cd:c6:14:b4:35:d7:0a:10:f6:99:64:32:01:40:30:74:10:
87:58:91:ae:94:f0:8f:cb:e8:eb:00:d3:07:b0:10:84:4c:ca:
1a:eb:05:7e:21:82:7e:a9:0e:8b:04:5b:b7:a8:80:91:4f:14:
d8:9c:c1:29:30:44:84:b1:d0:e9:e5:b1:a5:9a:2c:7a:1b:4b:
7f:e8:95:bc:fe:48:86:cf:16:d3:83:54:9e:72:a0:79:1b:1b:
1e:7b:43:3a:06:93:bc:22:3a:94:b5:44:68:6e:85:65:c8:8d:
29:d5:e0:87:82:9e:27:21:1a:8a:d3:03:3d:43:b5:4a:02:09:
08:1b:f4:41:45:ca:e5:af:89:aa:18:f1:21:30:e5:91:10:23:
ff:6b:2d:5f:e8:7d:c6:0e:cd:40:16:f8:89:c8:73:63:59:8f:
45:6b:79:d1:84:3e:ee:e3:23:68:83:ec:cf:97:76:8e:e3:2a:
9b:55:e4:63:6e:a5:63:d8:4b:15:a8:e0:64:83:a6:67:45:55:
dc:6b:6f:3f:f6:19:c6:1e:52:44:f1:89:c9:d9:a5:97:71:55:
86:6e:b0:d6:a4:3d:6d:d3:c3:84:3f:8c:18:6d:29:ce:e4:c7:
d1:40:c1:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLP62J7vm05G9A24U6lWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MDRkNGE5YTc4NmM4MTQ5ZGFjNTJhYzVkYTM3MjEyMDNh
YzNhMzcwHhcNMjYwNDE3MTYwMTI3WhcNMjYwNDE4MTYwMTI3WjAzMTEwLwYDVQQD
EygxNDVmZjBlZWFhZmQzYmE5NTljMmY0NmM5YTU3ZWE3ZGQ4M2EyNjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUSfmlebL94qMqs0iEAgfeUrR66h
S/tAeEvj//9yY6M1B0aDvjUfEU4pfmhj6BqCX6KnbEUI0WuSmgZSBW/V+9PkWqNA
/TkwuEBjMQNHbFDa7CEbyB5FqfWCnepz6C7R03NzM2ZwnsPnnU8wUrfrXMvxIlvj
QhOlgcERl4f2iHh7At8qjbI+TgEPUL8J6Kj8C/xx+N3g9cv7qvFz3sYs5b6++RY9
kvCuF9G97B234EdGaT9kcDRodwaBbaGlh9vQ4O13V0fxYRX+Eo3kBwDWryo1wOL7
wTQZndsufJrTw6jwjgfvlb0TL7fDYGL0cQzbVPXwTruj6JxPW4VL+P0XmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRf8O6q/TupWcL0bJpX6n3YOiYzMB8GA1UdIwQY
MBaAFFUE1KmnhsgUnaxSrF2jchIDrDo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlFUVXFhZUd5QlNkckZLc1hhTnlFZ09zT2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80ZWM4YWMtMDBkYi00NzkzLTkxNzQt
Y2QxY2E3MjcyODhiLzEvVlFUVXFhZUd5QlNkckZLc1hhTnlFZ09zT2pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS80ZWM4YWMtMDBkYi00NzkzLTkxNzQtY2QxY2E3MjcyODhi
LzEvVlFUVXFhZUd5QlNkckZLc1hhTnlFZ09zT2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtqVSuRvz
Y9QnUOwk/r7TBNsyIc3GFLQ11woQ9plkMgFAMHQQh1iRrpTwj8vo6wDTB7AQhEzK
GusFfiGCfqkOiwRbt6iAkU8U2JzBKTBEhLHQ6eWxpZosehtLf+iVvP5Ihs8W04NU
nnKgeRsbHntDOgaTvCI6lLVEaG6FZciNKdXgh4KeJyEaitMDPUO1SgIJCBv0QUXK
5a+JqhjxITDlkRAj/2stX+h9xg7NQBb4ichzY1mPRWt50YQ+7uMjaIPsz5d2juMq
m1XkY26lY9hLFajgZIOmZ0VV3GtvP/YZxh5SRPGJydmll3FVhm6w1qQ9bdPDhD+M
GG0pzuTH0UDBBw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:20 2026 by rpki-client