Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
File: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft (raw, json)
Hash identifier: Tm/rmUJu5feNm8o0+7BNLpjWKiRj1cqY2BgFkpgzqqo=
Subject key identifier: BE:72:DA:CA:81:3B:58:99:7D:25:49:58:CB:71:54:4D:4A:10:DA:07
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Certificate issuer: /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial: 019CAC7DC0AE51D33AAD6DBC36153EF67A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
Manifest number: 0D02
Signing time: Mon 02 Mar 2026 03:00:48 +0000
Manifest this update: Mon 02 Mar 2026 03:00:48 +0000
Manifest next update: Tue 03 Mar 2026 03:00:48 +0000
Files and hashes: 1: 7fwFotLEQHdJWGzsI9E3uv_kDSI.roa (hash: 84Fm9PCPXM8NFDP3Raox3dv53czMLCLj+wQeuu2bYvg=)
2: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl (hash: wwhfeuQTMS/fUyFISSkS78no6lFpJ4aeOZdQ13DuxDw=)
3: _fFHluteB5aYpSrt5zAnfawBLdE.roa (hash: EeR8KZELGbbgEkegmnhlrAdS7lppXQ4MZh3aU7YBvVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c0:ae:51:d3:3a:ad:6d:bc:36:15:3e:f6:7a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Validity
Not Before: Mar 2 03:00:48 2026 GMT
Not After : Mar 3 03:00:48 2026 GMT
Subject: CN=be72daca813b58997d254958cb71544d4a10da07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:f2:8c:56:d3:a9:f1:16:8b:d8:b4:38:11:
56:08:2a:27:e2:0e:58:c2:2d:13:f9:79:a1:db:ba:
86:8d:49:dc:7b:a9:a4:47:fd:e8:ce:01:da:63:85:
ae:0d:6f:c0:ab:8d:08:aa:a5:2a:fe:26:a0:00:29:
ad:29:99:78:c9:cf:77:c1:c3:66:fb:9f:1f:49:d9:
7a:35:1b:7f:02:e9:7c:1e:fa:d0:cd:eb:70:75:b3:
3f:ab:57:17:8d:29:97:5e:29:c9:1d:42:57:85:18:
bb:fc:81:6f:73:a1:28:17:78:08:72:9f:d3:90:7b:
41:0a:23:29:05:d2:2b:8c:2c:d5:e2:cf:3b:37:36:
ad:4e:13:60:28:e8:0c:1f:41:73:e5:72:d6:f8:5d:
af:79:5f:ec:1b:65:42:af:66:f5:35:06:97:71:24:
b4:13:c7:72:67:aa:82:f7:82:7b:5f:0e:44:c2:8c:
12:17:11:01:9d:73:fc:3a:a1:ea:60:70:89:89:fd:
eb:e7:9a:31:99:4b:42:08:ed:d6:e3:53:30:24:e1:
bf:d7:a0:29:13:8e:4d:8d:06:3e:fc:cc:ec:53:db:
6b:bb:18:18:4c:dc:36:95:57:45:22:9b:cb:37:20:
96:f0:d3:34:87:67:9e:16:12:97:80:8e:2a:56:6e:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:72:DA:CA:81:3B:58:99:7D:25:49:58:CB:71:54:4D:4A:10:DA:07
X509v3 Authority Key Identifier:
keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e3:f1:cd:a3:90:e1:61:72:d0:e5:5b:97:c4:f1:28:84:b7:
b2:41:06:b9:38:99:77:e5:36:2b:54:4a:75:27:26:54:cc:5b:
56:c7:bf:44:86:d6:16:23:b3:54:29:fc:a8:c2:0c:de:01:b0:
1e:e8:1a:58:d0:7b:ee:56:f7:41:9e:7d:4b:46:d5:65:c7:d0:
ff:68:ac:9d:34:eb:8b:9d:e5:73:58:db:6d:5a:e9:e8:3f:53:
3d:1a:54:ce:4a:02:c5:8f:77:78:8f:d5:80:00:22:2a:29:18:
de:dc:b7:07:a9:51:52:ea:d3:18:3c:fc:1c:01:49:22:8b:79:
ae:b8:6f:62:d2:26:4b:06:d4:a1:64:9c:16:d7:31:ee:9e:33:
02:45:1f:86:d1:34:2e:c3:95:dc:90:17:ed:4e:74:fe:30:f1:
79:f4:89:df:3e:50:24:4d:48:db:be:55:8f:26:5f:39:9c:59:
eb:40:90:be:57:a2:77:d2:22:39:93:cb:df:dd:b4:13:53:d5:
4d:34:fc:c3:db:5f:58:c4:c6:a5:de:66:f3:f6:ea:5f:30:6f:
52:48:5c:e4:fd:e5:a6:c1:03:4c:3d:28:8d:de:ca:d5:5c:22:
06:59:7d:b7:b8:2f:76:8e:fe:93:64:0e:a0:c0:71:29:0b:3c:
1b:84:f2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:22 2026 by rpki-client