
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
File: vqTtMeEp6Vu17P2FdXyddNO-42g.mft (raw, json)
Hash identifier: 2kFOzH3qSOCya4qc7piMUNVC3+xnmFQz76t/jtHphP8=
Subject key identifier: 83:37:89:CC:53:67:F7:CC:61:D8:20:CB:D4:D7:0A:FE:C7:AD:60:B3
Authority key identifier: BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68
Certificate issuer: /CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368
Certificate serial: 019CAA216944AD214111089AC69078334A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
Manifest number: 0C40
Signing time: Sun 01 Mar 2026 16:00:42 +0000
Manifest this update: Sun 01 Mar 2026 16:00:42 +0000
Manifest next update: Mon 02 Mar 2026 16:00:42 +0000
Files and hashes: 1: vqTtMeEp6Vu17P2FdXyddNO-42g.crl (hash: ZS08Uw78SEdYByI87su+B+96Mr2q5MEFwHrDaYmGmyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:69:44:ad:21:41:11:08:9a:c6:90:78:33:4a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368
Validity
Not Before: Mar 1 16:00:42 2026 GMT
Not After : Mar 2 16:00:42 2026 GMT
Subject: CN=833789cc5367f7cc61d820cbd4d70afec7ad60b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:29:94:3f:78:96:9f:5b:9f:42:69:bc:34:
42:bd:57:bf:ca:08:d7:fe:e0:40:79:78:82:1b:25:
d7:e7:09:6c:40:7e:b8:ba:23:e0:c1:40:d8:71:b5:
14:fd:0d:b0:e2:83:01:4c:0a:88:8c:5a:e3:2b:62:
d7:84:ca:51:68:37:39:2f:72:90:32:0a:93:35:f2:
0f:c3:3b:52:12:98:2d:0c:3e:3a:ca:ec:ab:40:55:
72:d3:88:6e:4c:0e:ea:39:a1:8a:78:21:f1:63:ae:
98:d3:7b:28:5d:7a:1d:61:40:0d:8d:ed:1b:b9:6b:
1b:5a:45:6f:a5:d5:ed:e8:da:61:95:50:31:f6:dc:
a5:19:9e:ee:1b:a0:82:12:9f:85:50:9e:45:cd:9c:
55:2a:5e:15:3a:82:30:d4:8b:74:1e:90:4e:ad:34:
d6:b6:fb:0a:b7:46:15:14:4c:cf:8e:96:78:45:50:
0e:a0:b6:c6:1d:bd:80:df:ba:90:77:7b:18:d9:d9:
b9:e9:d9:38:d9:1d:74:69:67:89:de:c4:70:d0:31:
a6:c0:d2:a9:ee:f6:80:92:59:66:93:9f:e3:6a:41:
e3:43:46:56:66:7c:eb:7e:99:c6:d5:f9:cb:e2:3e:
75:09:00:fd:e2:00:94:88:01:29:fe:25:c6:a2:52:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:37:89:CC:53:67:F7:CC:61:D8:20:CB:D4:D7:0A:FE:C7:AD:60:B3
X509v3 Authority Key Identifier:
keyid:BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:be:b4:9a:ed:94:ec:35:e9:9c:2d:5d:d5:64:ba:d5:31:db:
84:be:d7:9c:c3:7f:de:33:40:7d:1e:fb:ff:a2:9b:16:7b:9b:
4b:6f:26:ce:ad:73:35:b2:39:cb:8e:64:37:23:33:f0:ce:20:
08:cd:35:0c:1a:76:92:f7:15:15:65:38:4a:97:5d:35:0a:b1:
e1:b1:3b:c8:b8:92:38:05:91:22:02:28:84:bd:ea:3e:6e:60:
f2:21:e2:95:a1:c9:c7:be:c1:5f:76:fc:fe:c9:d6:ea:23:b4:
7d:5c:84:e1:99:22:5d:67:f9:ec:9c:4e:0f:75:45:f6:7b:c7:
bf:e4:58:e6:83:07:1f:a4:94:95:9b:0c:7e:0c:4d:ba:d8:0f:
88:57:85:d8:b8:3d:b0:67:1f:36:c5:57:da:24:7e:bd:cc:b0:
e8:ff:8c:cf:1e:0f:67:90:b0:30:7b:bd:41:71:0f:64:f1:0e:
e1:d3:6b:4c:2a:7d:ec:6b:56:44:c3:c5:6d:3d:83:b3:b4:be:
48:ca:f3:d3:5e:e3:99:9f:10:c6:d1:ff:19:f3:b9:23:7a:c1:
b7:1c:37:29:34:84:ba:78:32:bb:79:d8:fd:fe:a7:da:bb:3a:
f2:2c:ce:48:e7:0a:84:fa:6b:da:6b:fd:3f:9e:6a:04:2b:d3:
a4:a7:40:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:13 2026 by rpki-client