Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
File: vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json)
Hash identifier: GU9hnG+0ZW3FggttUkGH0Ve+kl9imr0NUHARX5o86Uo=
Subject key identifier: E8:D5:B7:4C:B2:F6:5C:0A:6C:D3:36:5D:C3:54:F4:47:04:3F:A4:04
Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
Certificate issuer: /CN=bd033df03ed51ce7924a480183bcffdb4f042537
Certificate serial: 019CABA211D694D7906E067591F368860DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
Manifest number: 043A
Signing time: Sun 01 Mar 2026 23:00:51 +0000
Manifest this update: Sun 01 Mar 2026 23:00:51 +0000
Manifest next update: Mon 02 Mar 2026 23:00:51 +0000
Files and hashes: 1: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: jW4k54+oEc4l2HanftKVzlDt/Imbqy9S/bgTlbflMc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:11:d6:94:d7:90:6e:06:75:91:f3:68:86:0d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537
Validity
Not Before: Mar 1 23:00:51 2026 GMT
Not After : Mar 2 23:00:51 2026 GMT
Subject: CN=e8d5b74cb2f65c0a6cd3365dc354f447043fa404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:62:0e:3f:a2:2b:95:ad:d4:01:f3:04:0f:
90:6b:79:2e:4a:1e:72:81:e5:a8:1e:3c:33:6c:81:
8b:ac:1c:77:3f:9e:2f:ee:05:5c:f0:9d:db:6c:15:
87:c9:82:d3:1d:e6:3c:92:e3:fa:ce:a8:c0:ae:5c:
63:d2:04:1b:3b:37:b0:7b:31:db:02:5b:40:76:d6:
0c:12:b3:3c:3f:87:ed:da:ef:3a:7b:d6:89:54:a5:
76:a9:d6:b7:72:40:60:c0:6c:c9:c2:62:32:76:83:
88:e5:d6:e5:a9:3a:94:61:44:cb:10:fb:16:81:e2:
ff:56:24:c5:f2:6b:94:fe:06:d4:08:71:6b:63:bf:
ae:89:86:ab:7f:45:31:18:8b:4d:fe:be:38:6b:ce:
a5:c7:3e:ca:dd:d9:bd:2f:4d:c3:68:c7:5e:9c:93:
04:82:aa:38:f6:0a:08:9e:1f:f1:04:19:ca:5b:b3:
33:d9:ce:56:4e:47:6e:11:d1:68:95:fb:80:47:61:
20:ee:e4:40:a5:02:8d:3f:87:47:e3:0e:c4:5c:90:
47:0b:ee:5a:5e:26:1c:b0:b5:4f:89:4b:83:12:7d:
d1:bf:37:ec:9b:b6:d5:f2:cc:9c:5c:5a:59:12:7a:
13:ae:11:c5:eb:29:0d:b3:27:fc:b9:4a:49:5b:32:
23:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D5:B7:4C:B2:F6:5C:0A:6C:D3:36:5D:C3:54:F4:47:04:3F:A4:04
X509v3 Authority Key Identifier:
keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4f:a7:f7:94:dd:bf:2b:5f:01:24:e3:b2:8f:c2:cf:f9:e2:
51:72:ec:f6:60:3e:84:6d:01:f9:21:e9:82:4e:ce:fe:9a:24:
5c:ce:aa:7e:07:99:ab:5b:2d:8c:a7:f2:e0:ba:75:79:fc:76:
10:3d:d0:89:b8:73:c2:05:f2:10:b5:49:c3:ee:74:66:d1:05:
a3:ff:b4:7f:7b:f3:57:93:09:e8:f3:91:a8:07:bc:12:bc:62:
7f:3e:28:20:c0:aa:f7:bd:18:20:70:2c:15:77:a3:11:1c:62:
ae:fa:6f:5a:62:12:a3:eb:73:0f:63:c3:f7:8e:12:9f:6a:de:
93:5d:97:0f:49:e7:34:0d:96:9c:f2:e7:bf:f7:d0:a0:b3:85:
63:a3:e6:12:02:70:53:41:31:a2:55:d6:13:7d:d3:9d:e5:33:
1b:2b:5f:d8:07:3b:3d:36:30:d1:b6:88:3b:08:d0:56:a2:4a:
09:89:d4:8e:4e:70:42:a3:a8:09:45:a2:16:85:64:c2:fc:50:
40:cf:a6:3a:6f:ab:38:d6:8c:7a:9c:ba:82:1b:3e:50:1b:c1:
bb:8b:e5:31:e6:98:82:74:3f:7d:76:48:08:23:fb:29:9b:f6:
b9:84:42:36:3f:8e:6c:53:3e:8f:1d:d6:38:ef:c4:33:fe:02:
73:e6:03:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:52 2026 by rpki-client