Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
File: vqe2d3e5poMpM1dkl7RqmxYwTNk.mft (raw, json)
Hash identifier: UB6YvqQNgNI30j2tUynere7iwd2H+X98XsM4w0dYjGI=
Subject key identifier: F4:B2:A2:56:DF:22:93:51:75:A5:17:99:B8:EC:51:56:44:C3:BA:89
Authority key identifier: BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
Certificate issuer: /CN=bea7b67777b9a6832933576497b46a9b16304cd9
Certificate serial: 019CAA58332F04299C940A99507D0C06A67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
Manifest number: 1687
Signing time: Sun 01 Mar 2026 17:00:32 +0000
Manifest this update: Sun 01 Mar 2026 17:00:32 +0000
Manifest next update: Mon 02 Mar 2026 17:00:32 +0000
Files and hashes: 1: srq9Ha0TjuLwEjYRk51fxTPdbjI.roa (hash: a6vYm4uCbtYNDd3vfHwRhBRwXJqAYeklTcm+jwdPPv4=)
2: vqe2d3e5poMpM1dkl7RqmxYwTNk.crl (hash: lVYPuLz5/k6JXi6z43AfG8Ct+Qq6KWaE+KS5rAgsvsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:33:2f:04:29:9c:94:0a:99:50:7d:0c:06:a6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7b67777b9a6832933576497b46a9b16304cd9
Validity
Not Before: Mar 1 17:00:32 2026 GMT
Not After : Mar 2 17:00:32 2026 GMT
Subject: CN=f4b2a256df22935175a51799b8ec515644c3ba89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:b1:b9:62:9d:96:d6:e3:aa:e2:1b:e5:9e:
b7:bc:0e:f5:f7:a6:b0:27:13:55:a3:60:4e:20:7e:
16:7a:ab:f0:71:04:a4:1d:8d:56:09:31:75:02:f2:
70:12:21:12:6c:24:eb:3d:91:50:ba:80:ba:1a:c1:
d1:1d:41:07:57:a8:4c:43:93:eb:f1:34:9a:51:cd:
50:b8:78:18:88:29:77:1f:31:93:7c:50:df:6c:c5:
c0:7e:4d:d7:4b:9c:37:08:92:2f:6d:2e:c1:72:f3:
1f:f6:16:48:13:d0:fc:22:f3:96:51:b8:49:84:d5:
64:b9:9c:bb:36:c2:7f:75:a6:30:f0:54:e3:11:f4:
79:7d:2e:af:2d:e2:3e:15:b5:34:06:d8:b8:d6:1a:
56:88:a3:96:bb:62:67:93:d8:38:b8:29:85:1d:74:
82:8c:3e:5c:ee:36:bd:ea:6c:7e:ae:10:2e:92:e6:
e0:bf:5e:90:c4:8e:7f:e6:8a:44:2a:73:9f:3f:03:
8e:86:33:f3:e0:08:cf:61:93:64:c6:97:07:e5:2b:
13:aa:cf:1a:94:30:36:1c:45:c9:27:ed:e3:2e:8d:
91:2e:cd:73:f2:db:11:84:e8:a6:4e:4c:17:cf:12:
93:2a:41:04:40:32:ae:73:0c:02:88:8d:5d:6f:47:
a8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B2:A2:56:DF:22:93:51:75:A5:17:99:B8:EC:51:56:44:C3:BA:89
X509v3 Authority Key Identifier:
keyid:BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:89:4c:09:d4:9d:52:b4:98:b9:7c:73:d4:ea:61:35:35:ed:
f1:e0:4e:83:37:77:03:4e:ae:e0:dc:c6:63:17:eb:ad:51:d0:
05:03:c9:ae:00:62:a4:58:87:cf:29:ec:94:df:b7:a2:72:f1:
0f:12:67:6e:4b:09:63:23:65:c2:a1:ba:9c:39:6d:5d:09:07:
1f:12:53:44:8f:51:52:29:36:be:3e:e4:62:69:de:86:b6:5d:
b0:55:3d:93:88:8b:19:a9:f2:22:6b:d6:5f:59:57:ed:7f:f1:
98:1d:ce:57:6f:a9:86:74:c7:0d:5f:67:84:93:c6:64:11:c0:
6d:bd:97:8f:63:ed:d9:db:9a:c7:92:60:f7:9c:73:92:76:9d:
2a:cb:d6:48:f7:e2:e6:a7:bb:3c:e6:08:5c:88:01:76:bd:35:
9d:cb:27:a2:a7:89:c9:38:d1:19:63:73:c0:3e:04:8d:83:41:
3c:04:82:02:26:cf:38:85:aa:9e:43:21:a1:f4:1b:c2:fd:b9:
c6:b1:eb:ba:aa:a6:1a:98:7f:88:6b:c7:21:12:f0:3e:84:63:
f5:77:38:ce:b8:27:ab:f9:5b:8d:8e:9d:69:4e:a8:d0:fb:94:
79:95:b1:4d:54:47:a6:30:ce:62:45:6f:d7:d7:bc:d7:8e:a2:
4d:9d:86:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:35 2026 by rpki-client