Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
File: vQQTxuRIJSdlFDEhETiDjhM4VN4.mft (raw, json)
Hash identifier: vq4SlEqTgREgOWYBUnKn3ZdGWNRxvuV/se7+075MgCM=
Subject key identifier: DA:52:8B:68:68:B8:C5:23:35:DE:09:4A:2D:C6:EE:8E:DD:CB:23:6F
Authority key identifier: BD:04:13:C6:E4:48:25:27:65:14:31:21:11:38:83:8E:13:38:54:DE
Certificate issuer: /CN=bd0413c6e4482527651431211138838e133854de
Certificate serial: 01A0BD9DBD7913F0A0B4DFD92B43CBAE00A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
Manifest number: 0200
Signing time: Sun 20 Sep 2026 07:00:26 +0000
Manifest this update: Sun 20 Sep 2026 07:00:26 +0000
Manifest next update: Mon 21 Sep 2026 07:00:26 +0000
Files and hashes: 1: J30uXUMfh3XSWzuHtItjsBGYdX4.roa (hash: aaHMMpoNlOvcxmyKWoi17KEu5KKWFZ9/oYArmo2lGEQ=)
2: msJhkdL8bYuRU99vqhG4kMQKpw0.asa (hash: VOW6ky2rKMJoy1zhKMhXGEnmbBhbE/wiZmk5aED6izs=)
3: vQQTxuRIJSdlFDEhETiDjhM4VN4.crl (hash: 0KFKlyPH/sswDr2Y0+DIz+QYZYPXOg5xf45MIj4Nq6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9d:bd:79:13:f0:a0:b4:df:d9:2b:43:cb:ae:00:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd0413c6e4482527651431211138838e133854de
Validity
Not Before: Sep 20 07:00:26 2026 GMT
Not After : Sep 21 07:00:26 2026 GMT
Subject: CN=da528b6868b8c52335de094a2dc6ee8eddcb236f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:f2:b2:a4:82:cc:35:96:9f:85:1e:4d:b7:
a7:75:61:15:d6:62:8b:f8:ea:eb:59:18:d4:98:cc:
2f:8e:bb:e4:39:45:8b:5c:c1:14:83:b8:51:36:b1:
f4:ba:93:b5:79:f4:c0:cc:9e:32:96:a9:54:61:43:
02:a9:bf:f8:fc:31:31:e4:7b:56:51:b1:92:db:b3:
4e:a5:b8:7d:57:ab:c4:cc:ec:3c:18:51:0a:21:86:
69:7c:b4:4c:87:bf:f0:7f:56:26:9c:10:94:39:3b:
a1:f0:6f:0e:19:3d:01:be:e2:c5:9e:ee:0b:11:7a:
a5:a2:fe:e2:24:d9:cf:ed:0e:55:a2:ab:99:55:79:
f0:b5:1b:76:e6:86:c1:e9:22:e6:9e:9d:85:6d:7a:
0f:75:93:34:93:2c:4e:73:a8:27:e8:eb:14:78:6a:
08:5a:d1:5b:90:77:bb:2c:27:93:32:2f:4e:78:bc:
30:0a:4b:b0:2d:cb:36:cb:12:4b:6c:c1:9b:93:0d:
90:c7:fc:a3:5f:a4:23:22:17:79:8f:cb:90:65:1a:
1e:72:f2:74:e3:44:be:48:a7:78:42:77:6c:68:d9:
53:d4:67:6b:82:3f:29:56:4d:55:b3:01:4a:db:79:
e5:ff:34:23:44:47:cf:30:40:93:bc:b6:94:b7:e5:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:52:8B:68:68:B8:C5:23:35:DE:09:4A:2D:C6:EE:8E:DD:CB:23:6F
X509v3 Authority Key Identifier:
keyid:BD:04:13:C6:E4:48:25:27:65:14:31:21:11:38:83:8E:13:38:54:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fd:cf:87:06:e7:2d:0d:40:a9:bf:2a:86:8d:dd:1c:fa:10:
f2:46:ce:13:be:76:9e:6e:17:21:e9:7c:03:03:f1:4f:dd:9b:
28:f0:81:90:54:ae:67:97:81:36:25:fe:9c:fb:c5:02:b9:97:
73:52:c9:cb:12:72:ca:76:b8:2b:1b:7d:a9:6e:0d:03:ed:5b:
2a:a7:89:34:bd:0a:8d:97:31:04:2e:4c:b2:8c:fb:a9:b8:5a:
d1:d3:c2:c8:76:4e:ca:e4:1e:97:14:2c:83:76:65:49:02:d2:
19:94:46:82:26:79:cb:11:cf:21:66:19:d5:9e:46:dd:a3:60:
54:49:24:3c:ca:e0:e1:36:08:43:91:93:11:c1:57:85:25:0e:
32:07:60:2a:c2:14:66:73:b5:6b:98:76:f6:a2:06:98:8b:3f:
06:59:4a:86:32:5b:c8:79:4a:b8:08:12:ee:93:a5:be:06:11:
f3:77:6e:b4:ce:9e:17:b8:92:b8:ba:01:bd:7b:3d:ec:79:a7:
1f:df:21:b4:3f:eb:5c:67:08:49:c6:c3:ec:d3:a8:a3:cb:77:
d8:ca:d8:de:b1:f5:c1:c1:bc:c3:88:56:13:39:18:51:1f:90:
47:c1:2c:1d:d6:95:b0:0a:4a:ee:60:91:42:79:fa:e2:03:28:
80:e0:1a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:21:19 2026 by rpki-client