Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.mft
File: VQde88Il_ro2rGM15il3wabY5zY.mft (raw, json)
Hash identifier: GBkK/tkecbdM15vFCVrMhcGCEoRxyfbbHKhwlAbSuD8=
Subject key identifier: 76:70:B5:F2:3C:C4:75:60:E4:93:43:94:DB:29:44:50:DA:F2:52:8D
Authority key identifier: 55:07:5E:F3:C2:25:FE:BA:36:AC:63:35:E6:29:77:C1:A6:D8:E7:36
Certificate issuer: /CN=55075ef3c225feba36ac6335e62977c1a6d8e736
Certificate serial: 01A0C858E4378F98D0AEA138A8C36F381812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQde88Il_ro2rGM15il3wabY5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.mft
Manifest number: 38
Signing time: Tue 22 Sep 2026 09:01:03 +0000
Manifest this update: Tue 22 Sep 2026 09:01:03 +0000
Manifest next update: Wed 23 Sep 2026 09:01:03 +0000
Files and hashes: 1: VQde88Il_ro2rGM15il3wabY5zY.crl (hash: kCIuy5mtUJiD32VsbSKSQRsowSaia4Lm+jnFscslz/M=)
2: o6X1xXFcVuNeFtHtNbTAwmHed4o.roa (hash: 5N9Ci5RBIs/RxRxfkx3BB13wY8BUdFcia7okNDTuesU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQde88Il_ro2rGM15il3wabY5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:e4:37:8f:98:d0:ae:a1:38:a8:c3:6f:38:18:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55075ef3c225feba36ac6335e62977c1a6d8e736
Validity
Not Before: Sep 22 09:01:03 2026 GMT
Not After : Sep 23 09:01:03 2026 GMT
Subject: CN=7670b5f23cc47560e4934394db294450daf2528d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:bf:dd:df:a5:cd:c2:a1:94:d1:d7:03:27:
b2:94:62:ef:38:d7:6f:36:9d:19:5a:d0:b2:9c:a2:
db:cd:37:91:93:b5:6b:c0:b2:94:02:4d:1b:95:9e:
90:55:15:1e:00:80:db:32:dc:2e:50:48:73:cf:15:
42:27:fc:a0:f3:dc:3c:64:6c:9d:0e:14:2e:fb:82:
04:4e:50:a0:33:fb:bd:24:12:dd:e3:2a:4e:b7:7a:
7b:47:5f:6d:13:d8:ce:e8:48:9d:86:8b:bf:88:b5:
c1:6c:60:30:17:65:25:9f:12:24:8a:94:31:43:15:
c9:eb:00:14:95:38:db:f4:bb:85:da:72:9e:d4:27:
33:13:cd:12:7e:40:71:e0:14:ab:2f:49:e6:98:99:
d8:4b:bd:76:7d:08:38:df:f1:b7:46:42:19:30:5e:
9c:d5:76:61:8e:74:d0:c5:12:0c:f3:4e:d0:80:ef:
5a:0d:6c:2d:b8:59:be:df:0b:d1:ee:ae:de:d8:0a:
80:8e:b6:24:46:a7:e1:84:de:9c:e6:6a:d0:f5:72:
c6:9b:d0:9a:e9:09:5d:ab:ab:7a:20:96:4d:b0:61:
ed:92:4a:a3:bf:8c:58:b6:91:fa:4d:91:65:50:c6:
f9:40:2a:de:a3:a3:c6:07:08:49:d9:5b:73:04:b8:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:70:B5:F2:3C:C4:75:60:E4:93:43:94:DB:29:44:50:DA:F2:52:8D
X509v3 Authority Key Identifier:
keyid:55:07:5E:F3:C2:25:FE:BA:36:AC:63:35:E6:29:77:C1:A6:D8:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQde88Il_ro2rGM15il3wabY5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:02:01:75:7e:a8:65:e8:74:3b:ad:b9:3f:15:7c:87:37:20:
9f:20:de:c4:90:23:f6:2f:7d:42:48:4c:7b:46:d6:b9:85:9e:
39:ed:b7:83:c9:5d:01:3b:9e:7c:cb:15:95:7d:19:cf:22:a6:
0f:15:42:13:2e:0f:f4:d6:90:10:53:e2:88:f9:c8:d4:d0:09:
9f:08:6d:b9:2b:0e:5f:01:3d:c2:ad:87:13:37:0d:f9:11:72:
34:36:00:a3:aa:48:d8:05:f9:e1:b8:e5:da:87:8c:b8:5b:6f:
65:3e:4c:b9:e4:89:2c:3f:1a:9d:c5:69:c9:99:bc:3f:bc:08:
13:ec:fe:3a:ce:f6:02:63:9a:d6:0d:f8:fb:7b:8d:59:f5:a3:
70:fc:b7:57:a0:3c:1d:cf:b9:b7:88:38:a2:34:a0:84:f9:9e:
d2:3a:f2:9d:ea:35:36:92:f9:c3:3c:17:40:aa:77:c8:93:b8:
c7:01:10:b0:85:fa:0a:7f:80:1c:3d:f6:37:aa:a6:fc:2b:18:
17:19:c3:02:a4:ab:07:6e:3c:f1:42:6e:87:cc:fb:19:6f:09:
ec:b7:15:ec:30:8c:ed:d6:ee:e6:5b:d8:ce:99:54:bb:96:ef:
42:a5:b0:8b:75:3f:c5:da:b0:46:41:34:50:60:56:ad:c0:fd:
22:7e:30:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWOQ3j5jQrqE4qMNvOBgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MDc1ZWYzYzIyNWZlYmEzNmFjNjMzNWU2Mjk3N2MxYTZk
OGU3MzYwHhcNMjYwOTIyMDkwMTAzWhcNMjYwOTIzMDkwMTAzWjAzMTEwLwYDVQQD
Eyg3NjcwYjVmMjNjYzQ3NTYwZTQ5MzQzOTRkYjI5NDQ1MGRhZjI1MjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcu/3d+lzcKhlNHXAyeylGLvONdv
Np0ZWtCynKLbzTeRk7VrwLKUAk0blZ6QVRUeAIDbMtwuUEhzzxVCJ/yg89w8ZGyd
DhQu+4IETlCgM/u9JBLd4ypOt3p7R19tE9jO6Eidhou/iLXBbGAwF2UlnxIkipQx
QxXJ6wAUlTjb9LuF2nKe1CczE80SfkBx4BSrL0nmmJnYS712fQg43/G3RkIZMF6c
1XZhjnTQxRIM807QgO9aDWwtuFm+3wvR7q7e2AqAjrYkRqfhhN6c5mrQ9XLGm9Ca
6Qldq6t6IJZNsGHtkkqjv4xYtpH6TZFlUMb5QCreo6PGBwhJ2VtzBLi1KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZwtfI8xHVg5JNDlNspRFDa8lKNMB8GA1UdIwQY
MBaAFFUHXvPCJf66NqxjNeYpd8Gm2Oc2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlFkZTg4SWxfcm8yckdNMTVpbDN3YWJZNXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wZGM4OWEtMzMzMy00YzU5LThlNzIt
YmRkYjAzMTAxNmNiLzEvVlFkZTg4SWxfcm8yckdNMTVpbDN3YWJZNXpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8wZGM4OWEtMzMzMy00YzU5LThlNzItYmRkYjAzMTAxNmNi
LzEvVlFkZTg4SWxfcm8yckdNMTVpbDN3YWJZNXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwIBdX6o
Zeh0O625PxV8hzcgnyDexJAj9i99QkhMe0bWuYWeOe23g8ldATuefMsVlX0ZzyKm
DxVCEy4P9NaQEFPiiPnI1NAJnwhtuSsOXwE9wq2HEzcN+RFyNDYAo6pI2AX54bjl
2oeMuFtvZT5MueSJLD8ancVpyZm8P7wIE+z+Os72AmOa1g34+3uNWfWjcPy3V6A8
Hc+5t4g4ojSghPme0jryneo1NpL5wzwXQKp3yJO4xwEQsIX6Cn+AHD32N6qm/CsY
FxnDAqSrB2488UJuh8z7GW8J7LcV7DCM7dbu5lvYzplUu5bvQqWwi3U/xdqwRkE0
UGBWrcD9In4wEw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:27:58 2026 by rpki-client