Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
File: vqe2d3e5poMpM1dkl7RqmxYwTNk.mft (raw, json)
Hash identifier: AerxKcvZGmUmfizNw1NyocNP+pTeyFqWLUfTeTMHS4A=
Subject key identifier: CD:A0:BA:99:DC:6E:5D:2B:6B:50:7B:76:A7:1F:C1:8B:D2:7A:FC:85
Authority key identifier: BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
Certificate issuer: /CN=bea7b67777b9a6832933576497b46a9b16304cd9
Certificate serial: 019D99D07E7EE4B539AB9AD88B2951FE15B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
Manifest number: 1703
Signing time: Fri 17 Apr 2026 05:01:10 +0000
Manifest this update: Fri 17 Apr 2026 05:01:10 +0000
Manifest next update: Sat 18 Apr 2026 05:01:10 +0000
Files and hashes: 1: srq9Ha0TjuLwEjYRk51fxTPdbjI.roa (hash: a6vYm4uCbtYNDd3vfHwRhBRwXJqAYeklTcm+jwdPPv4=)
2: vqe2d3e5poMpM1dkl7RqmxYwTNk.crl (hash: YAg5BmgSmmoKlryYS73wFSkb0p4D6xrUD/37y5Zkm00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:7e:7e:e4:b5:39:ab:9a:d8:8b:29:51:fe:15:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7b67777b9a6832933576497b46a9b16304cd9
Validity
Not Before: Apr 17 05:01:10 2026 GMT
Not After : Apr 18 05:01:10 2026 GMT
Subject: CN=cda0ba99dc6e5d2b6b507b76a71fc18bd27afc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:8f:e6:a1:74:34:93:9c:f1:16:da:9c:09:
f9:bb:37:86:f7:ab:12:89:64:69:ac:bb:29:66:94:
87:b5:cb:7d:3e:68:f4:7a:2a:0b:80:69:e9:1f:4f:
2a:43:2b:a4:a4:1a:c6:d6:76:84:84:94:a9:05:7a:
ea:98:5d:e9:21:cb:c1:9a:56:7f:f5:fd:5a:c0:c0:
de:3a:3e:76:94:e8:10:45:4c:c6:6b:58:06:ea:4f:
d3:96:f9:f7:10:08:72:4a:bc:f0:cf:33:8d:90:77:
0b:6e:dc:2e:e1:f3:58:e7:e1:d2:6e:45:5f:be:1a:
99:d6:ee:d4:a0:14:3f:3e:c2:60:a6:4b:46:b3:73:
14:f5:4a:7e:2f:19:93:ef:04:13:f1:24:00:be:47:
88:58:d0:6c:da:91:b5:2c:92:25:9c:bd:0e:0d:4f:
3d:42:a4:0f:57:15:af:03:fc:55:3b:99:4c:31:b3:
f0:2f:e5:7a:53:a8:72:40:cf:36:0d:63:f8:21:e1:
b6:1e:49:e6:c3:55:92:d5:36:c0:3b:c0:68:0a:7f:
80:0d:6d:78:d4:08:37:23:c1:33:82:94:7d:32:51:
20:51:ff:4c:fc:22:e1:da:fe:54:18:d7:cf:9d:de:
40:50:16:3d:73:ae:67:ce:52:24:17:82:2f:ec:90:
e1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A0:BA:99:DC:6E:5D:2B:6B:50:7B:76:A7:1F:C1:8B:D2:7A:FC:85
X509v3 Authority Key Identifier:
keyid:BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1c:de:e1:7e:79:43:eb:20:e5:03:54:d8:f1:4e:c1:46:1d:
3a:52:9b:b8:0d:12:21:f6:32:20:f0:10:ba:17:56:b4:59:09:
17:8c:fa:b2:3f:a7:c5:95:7f:89:2a:3f:24:af:3f:d1:18:54:
91:3a:03:c3:4b:4c:17:2b:95:b7:ce:a8:5e:a0:fa:70:cd:13:
30:0a:c2:80:fd:74:84:a4:ff:b0:e7:d8:77:49:d4:04:6a:ea:
60:ed:31:54:97:10:f8:d3:ee:21:a3:76:61:3d:1e:29:66:fa:
92:1f:a5:a3:1c:cd:2e:d9:0f:c2:54:4b:78:58:79:b1:b0:15:
17:69:1d:e7:3e:97:29:87:23:b5:5f:f0:62:99:ae:03:0a:e5:
74:ba:58:f3:7f:a7:65:14:8d:84:a6:21:10:c2:c4:89:ad:d0:
8d:c8:99:99:a5:c2:8e:d2:71:16:0e:79:49:13:89:fe:ef:30:
c5:6e:95:8a:d7:d1:3b:83:51:a9:bc:aa:5c:e9:3f:8e:fb:a6:
81:e3:83:43:70:44:88:9d:5a:48:36:0b:61:be:f6:28:e4:a9:
b5:95:e8:95:c0:47:04:16:9a:0e:b3:c6:04:95:e4:0a:6f:50:
3c:4a:fa:8f:fb:35:78:e7:99:a3:71:6b:68:d9:d7:25:10:a8:
ea:71:af:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0H5+5LU5q5rYiylR/hW0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTdiNjc3NzdiOWE2ODMyOTMzNTc2NDk3YjQ2YTliMTYz
MDRjZDkwHhcNMjYwNDE3MDUwMTEwWhcNMjYwNDE4MDUwMTEwWjAzMTEwLwYDVQQD
EyhjZGEwYmE5OWRjNmU1ZDJiNmI1MDdiNzZhNzFmYzE4YmQyN2FmYzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoGP5qF0NJOc8RbanAn5uzeG96sS
iWRprLspZpSHtct9Pmj0eioLgGnpH08qQyukpBrG1naEhJSpBXrqmF3pIcvBmlZ/
9f1awMDeOj52lOgQRUzGa1gG6k/Tlvn3EAhySrzwzzONkHcLbtwu4fNY5+HSbkVf
vhqZ1u7UoBQ/PsJgpktGs3MU9Up+LxmT7wQT8SQAvkeIWNBs2pG1LJIlnL0ODU89
QqQPVxWvA/xVO5lMMbPwL+V6U6hyQM82DWP4IeG2Hknmw1WS1TbAO8BoCn+ADW14
1Ag3I8EzgpR9MlEgUf9M/CLh2v5UGNfPnd5AUBY9c65nzlIkF4Iv7JDh7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2gupncbl0ra1B7dqcfwYvSevyFMB8GA1UdIwQY
MBaAFL6ntnd3uaaDKTNXZJe0apsWMEzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFlMmQzZTVwb01wTTFka2w3UnFteFl3VE5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80MWMxMTEtNjUwNS00MWE0LTllNjct
M2I5MWZmOWExYWNkLzEvdnFlMmQzZTVwb01wTTFka2w3UnFteFl3VE5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy80MWMxMTEtNjUwNS00MWE0LTllNjctM2I5MWZmOWExYWNk
LzEvdnFlMmQzZTVwb01wTTFka2w3UnFteFl3VE5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBze4X55
Q+sg5QNU2PFOwUYdOlKbuA0SIfYyIPAQuhdWtFkJF4z6sj+nxZV/iSo/JK8/0RhU
kToDw0tMFyuVt86oXqD6cM0TMArCgP10hKT/sOfYd0nUBGrqYO0xVJcQ+NPuIaN2
YT0eKWb6kh+loxzNLtkPwlRLeFh5sbAVF2kd5z6XKYcjtV/wYpmuAwrldLpY83+n
ZRSNhKYhEMLEia3QjciZmaXCjtJxFg55SROJ/u8wxW6VitfRO4NRqbyqXOk/jvum
geODQ3BEiJ1aSDYLYb72KOSptZXolcBHBBaaDrPGBJXkCm9QPEr6j/s1eOeZo3Fr
aNnXJRCo6nGvwA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:36 2026 by rpki-client