Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: OPJp0VYyau7i7NdUJNtxdBqTCYp0J7QYaB6iks4ISiM=
Subject key identifier: BC:95:18:26:19:6A:45:1B:D6:8E:19:24:E7:3C:96:67:8B:40:29:A0
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 019DA34186B17D0E32AB162771536F272A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 1523
Signing time: Sun 19 Apr 2026 01:01:13 +0000
Manifest this update: Sun 19 Apr 2026 01:01:13 +0000
Manifest next update: Mon 20 Apr 2026 01:01:13 +0000
Files and hashes: 1: BngoaXPmBES0lcWptUUTkZigcEg.roa (hash: Qe0QVZ+QGm2n+wH6gehbJlOWTxMGZjX9oLD1ObVldNI=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: 3HKZj6BkGCLjGGOL++5PkUNSPAUM/Zt/QWoOzJxQ1ps=)
3: xcw2R2YD0BpUNlrolf3aKOVApLA.roa (hash: 2wiyEKSnDgQYW+1aN/U9IvVMDBKDQ1GzIsfrU/OlUSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:86:b1:7d:0e:32:ab:16:27:71:53:6f:27:2a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Apr 19 01:01:13 2026 GMT
Not After : Apr 20 01:01:13 2026 GMT
Subject: CN=bc951826196a451bd68e1924e73c96678b4029a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:af:34:02:9c:38:cb:22:44:ab:57:2d:c6:
a3:82:34:a7:4b:a2:6b:52:fe:b6:ec:d6:1f:a8:7e:
1f:70:4c:f4:26:4b:dd:d0:3e:66:c1:af:2f:28:8a:
4d:0e:04:e7:21:d0:9d:25:c1:7c:41:23:22:61:83:
da:44:ae:83:d6:07:52:72:47:6f:00:8c:1b:d5:4d:
79:75:0e:b7:41:1f:fa:29:16:94:52:df:a7:67:00:
75:a9:2c:da:2a:dd:f4:80:b1:f0:15:90:28:87:98:
66:90:5b:54:89:52:b8:a4:ac:4b:69:53:be:01:f8:
ca:9f:bb:3e:84:74:6c:6c:9c:b5:f5:d8:1d:1a:5d:
6d:67:87:df:0f:71:05:5c:0a:1f:65:8d:00:f7:d8:
8b:00:5c:d6:45:cd:87:94:50:02:e7:fd:e4:ed:86:
43:b9:bb:e9:e1:e8:46:78:cc:c6:3a:66:c0:42:28:
18:72:02:71:cc:e8:65:a3:f4:18:34:02:a0:18:89:
6c:f8:70:86:81:8b:ba:fc:e9:c9:94:6e:86:ae:9c:
c5:ad:12:b4:8c:f6:e1:fa:17:de:50:08:97:88:e4:
17:72:f9:e2:66:ef:a1:b1:1f:a1:1a:70:e9:9d:bc:
44:65:48:b3:e4:02:6c:ef:ae:b1:76:14:6e:df:56:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:95:18:26:19:6A:45:1B:D6:8E:19:24:E7:3C:96:67:8B:40:29:A0
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:af:f6:47:cb:7d:5d:5a:a4:b6:21:3a:9c:d3:75:81:5a:ce:
0f:dd:93:8b:f3:e3:e8:46:13:c7:37:93:c4:e8:43:55:e4:5d:
33:c8:fd:d2:a0:cd:5c:ed:5f:9f:e9:c7:65:29:13:2c:d2:3e:
16:87:a6:f9:c2:b0:ca:97:c3:de:01:b9:e6:44:36:bc:37:f4:
3e:53:94:32:83:8d:ef:17:75:26:1d:e5:de:45:d7:7f:ec:1b:
17:78:86:b9:17:90:da:69:9c:72:5c:e9:59:f6:fd:1f:71:a5:
21:d2:01:ac:45:28:f7:61:53:c8:71:ce:bd:f5:5a:53:1b:7b:
46:b0:c4:29:28:5a:bc:51:89:04:ae:71:b4:a9:eb:07:59:b6:
a8:27:f5:09:f0:4e:41:4c:0a:f7:20:64:72:9f:11:7b:bb:2e:
1f:bb:88:49:f3:ac:d4:13:40:7b:58:36:3a:c9:94:65:69:4f:
ed:c9:d8:98:02:eb:fd:0b:03:d4:82:e3:2b:23:6d:bf:aa:07:
45:3a:1a:bc:16:9f:52:e4:b3:58:f0:4f:b9:62:5e:3d:6b:c7:
a1:d8:ee:cf:fe:14:7a:ee:51:34:13:fc:6b:40:00:3f:c3:80:
b9:08:09:9e:63:ac:d1:67:0c:b7:26:0b:3f:29:59:d7:22:29:
d6:3e:6b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:55:12 2026 by rpki-client