Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
File: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft (raw, json)
Hash identifier: kcHDToskBM8CyJf31G2T+Vv5d2zV2FDwUfXdY+w4eCw=
Subject key identifier: 65:14:FA:4C:79:78:8B:EF:E1:22:4C:F0:7A:05:DB:10:9D:96:1B:72
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial: 01A0C58E883349D20EF8B036A78AD1195358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
Manifest number: 1A6E
Signing time: Mon 21 Sep 2026 20:00:47 +0000
Manifest this update: Mon 21 Sep 2026 20:00:47 +0000
Manifest next update: Tue 22 Sep 2026 20:00:47 +0000
Files and hashes: 1: 1lthQpNbdjvBjBvjx6o7dCcl_Lo.roa (hash: 09BW9AeuTKZNn0ro2yAFDYjo+0iZf6CKLrMs3cH5rIY=)
2: 6aiY7xcGMBhwSg811tAap0q5YOE.roa (hash: 5uK3tyYvucJWaPpSSYb7UKyYwuwhu+iE+thzsmoLCeU=)
3: IYFabOpy34kt07L89z5pfxkyqH4.asa (hash: 2JdSJ7oM52bIUu79CzF95UiMnRGEJELhEYcHEL9TeIc=)
4: RH0DxJdy9sgkSFYB6k0LE7nWDhc.roa (hash: XjBkKwPLZL3Yi2tKr0y72A6eYen+buTvuweq1X1GG4Y=)
5: dQeRFX64w7Gj5tRP8kDuY3-qGYM.roa (hash: NGvNDCH8JOp3+J18djkqIKrsn9XAQSXC2Ct+Fov8XNs=)
6: gahY2AwMV2dT0-Rml8PSy5NNRwU.roa (hash: YqOJQ01+Og7TwNTW8gpVjpEoYoqEByjHecFHs9UvJNo=)
7: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl (hash: L9N8PZ2vY09kxIBb2oCg4S++eoZP9vrT8/tAVSYmvwA=)
8: xuh6sRkHSsQPLZas7QrHkiH1T2k.roa (hash: /cp/uJIEUnczl8mvWtL8aIuZWLWYTpcWWurRsAFLXiA=)
9: ywNEo0c6G_3EtU_rhMpvOTWsLBk.roa (hash: DK9+AlzaJPs7Bge4vOR9auQX8qnNw3cNCE94Ti0BdaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:88:33:49:d2:0e:f8:b0:36:a7:8a:d1:19:53:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Validity
Not Before: Sep 21 20:00:47 2026 GMT
Not After : Sep 22 20:00:47 2026 GMT
Subject: CN=6514fa4c79788befe1224cf07a05db109d961b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:28:dc:a2:8a:29:ba:61:30:52:10:53:55:
e6:ec:f9:8b:f9:51:ff:8d:e3:94:d3:1c:b2:4c:e0:
83:b4:3f:60:fd:04:97:2f:65:99:34:62:3f:6d:55:
ab:94:e9:d7:e9:21:75:23:9e:06:f3:7d:ba:cf:6c:
eb:73:76:64:e1:d1:85:1a:63:58:7f:ec:3f:cb:a2:
85:e8:50:95:b4:44:47:b1:88:3d:d4:87:72:8d:22:
e8:39:10:9d:2e:a2:41:85:04:04:5e:e3:21:7b:b4:
5d:ae:0b:6f:55:cf:ba:6e:dd:a0:7a:0b:9e:56:ed:
3e:bd:3c:b7:37:95:92:aa:5d:96:eb:0a:4a:9f:e7:
4a:2e:f2:6b:b7:d7:31:55:e0:04:c8:0e:dd:4d:8d:
ef:07:34:17:5b:69:ac:c0:69:28:cf:80:d2:97:bc:
05:3c:e4:1d:a6:7f:1c:93:87:b4:2c:0c:d8:63:81:
2b:ad:d0:f0:98:80:22:ac:7b:3c:86:6c:98:a6:ab:
c0:d0:39:71:07:15:7b:98:c8:77:8e:53:d5:36:56:
78:a6:24:16:94:fe:b0:26:84:f6:b2:ed:05:c3:d9:
d3:57:5b:ed:a0:fd:eb:ec:33:e9:83:20:4b:90:a7:
b1:5f:58:66:3c:d5:2b:d3:8f:ca:9f:07:22:aa:d8:
7b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:14:FA:4C:79:78:8B:EF:E1:22:4C:F0:7A:05:DB:10:9D:96:1B:72
X509v3 Authority Key Identifier:
keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a6:ba:f1:74:9b:49:1c:2a:1d:34:30:fb:31:30:32:52:fc:
d2:4b:14:40:2c:0c:34:00:45:a0:6c:12:17:a5:19:54:93:63:
25:b0:3b:5f:fe:c9:86:b9:84:dc:6a:f1:34:17:fa:d3:99:0d:
6b:96:ce:f5:33:3e:61:0f:1f:2b:d8:50:91:ad:f5:ca:17:ee:
17:ab:62:b9:78:85:0e:6e:09:4e:27:1e:08:48:0c:43:1d:96:
a4:05:db:19:b4:09:e1:a5:d6:95:eb:fd:22:ff:38:79:55:49:
6a:d7:eb:2f:4f:2b:2b:6f:e6:96:d8:39:c0:eb:db:17:59:a3:
47:86:0e:bc:cc:4c:ed:3c:12:e4:91:3c:d4:7d:9f:12:47:73:
e7:cb:42:05:cf:18:b5:2f:2a:f8:f7:56:e0:c3:ea:02:8c:69:
fb:e7:63:78:f3:89:83:3a:06:72:2c:06:3d:bb:bc:cd:62:8e:
5a:e3:5a:de:a7:b0:a4:71:ab:96:74:39:25:08:fc:d3:3a:e1:
8e:8b:d8:22:88:c5:61:4b:94:7c:69:f8:98:ae:9b:97:b4:c7:
d5:f0:f4:92:e8:6d:b6:44:cb:0e:be:03:95:bb:51:7f:47:fc:
6e:47:b1:42:e7:24:04:19:18:8d:b0:cb:22:77:64:48:ff:35:
37:90:a7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:31:13 2026 by rpki-client