Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: 0nVDv8TDtvNEryyu876En9S/PzZh79r8JIvN6EMjhM4=
Subject key identifier: 4D:9A:C2:14:20:B0:0C:1E:91:F7:10:6B:53:3A:28:98:2E:3C:7E:C6
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 019ED27384A0CA54297163D9E55DA8EB4D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 15C0
Signing time: Tue 16 Jun 2026 22:00:46 +0000
Manifest this update: Tue 16 Jun 2026 22:00:46 +0000
Manifest next update: Wed 17 Jun 2026 22:00:46 +0000
Files and hashes: 1: BngoaXPmBES0lcWptUUTkZigcEg.roa (hash: Qe0QVZ+QGm2n+wH6gehbJlOWTxMGZjX9oLD1ObVldNI=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: Tdkyas0sOU+FelgiiIUXPDHyiuYUrBCLSLdtR7miHu0=)
3: xcw2R2YD0BpUNlrolf3aKOVApLA.roa (hash: 2wiyEKSnDgQYW+1aN/U9IvVMDBKDQ1GzIsfrU/OlUSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d2:73:84:a0:ca:54:29:71:63:d9:e5:5d:a8:eb:4d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Jun 16 22:00:46 2026 GMT
Not After : Jun 17 22:00:46 2026 GMT
Subject: CN=4d9ac21420b00c1e91f7106b533a28982e3c7ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:80:8a:81:6d:fa:cb:4a:f9:98:9a:cc:34:
ff:41:25:26:c4:d5:f4:b5:1f:eb:c0:8a:1a:6f:c8:
3a:97:11:b1:ce:04:d1:09:29:ed:e4:dc:81:3c:ef:
65:77:48:64:10:41:16:92:0f:4c:5e:56:e8:c0:b5:
54:6e:b1:a2:2e:70:89:24:8f:63:fb:b3:b0:13:42:
08:15:47:06:ab:ea:f9:a6:c0:b6:c0:ec:b8:1d:3c:
97:c2:1f:e2:23:ae:43:53:a6:54:cb:23:1f:d6:e0:
d1:22:a1:a9:30:77:28:e8:43:31:5c:84:26:df:f8:
46:a8:70:68:b7:a3:49:28:9a:71:8f:4b:0a:95:96:
f6:3f:3c:b4:1a:05:c1:e0:68:ce:ec:2e:d2:78:63:
6d:1c:d5:34:77:5b:20:30:e3:1d:5d:f6:3a:1e:b3:
ce:6c:7c:4c:e1:7f:8d:05:bf:d0:5b:c4:b2:ff:df:
f4:83:62:c8:9d:0f:51:0f:2e:b9:ef:7f:21:d5:ee:
d7:dc:92:bf:8b:b2:3a:b6:98:82:81:db:6b:b8:c9:
fa:c9:5d:77:b4:7a:d9:eb:5c:3c:af:4c:d3:42:75:
dc:92:28:8b:6d:9a:b4:26:c8:b0:d0:44:51:1c:5e:
38:96:bb:76:a4:0b:ae:6d:81:e8:96:7e:f1:0b:9b:
76:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9A:C2:14:20:B0:0C:1E:91:F7:10:6B:53:3A:28:98:2E:3C:7E:C6
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d5:bf:07:cc:a1:03:0b:56:ce:f7:7b:72:85:21:bd:bf:6b:
f5:26:28:28:88:29:43:40:f0:81:37:52:b1:2a:3a:2e:35:02:
b9:bb:d1:23:64:bc:9e:a1:48:9f:f7:7d:0f:0a:58:56:a5:73:
5e:72:eb:44:63:e1:bc:e0:2e:11:45:d7:4b:6c:ba:5a:07:9f:
83:9e:e7:e5:31:ad:46:85:c6:07:59:ce:69:4f:6d:00:26:15:
07:31:ac:e3:31:de:e8:c8:73:46:38:cb:68:18:23:a0:94:f3:
c5:8a:49:93:34:87:c3:86:0e:11:85:ca:0a:8f:eb:84:e9:46:
2b:69:5a:87:e9:30:28:ad:2c:78:aa:06:2c:28:a1:ff:94:12:
8b:a0:c4:28:1b:f7:c6:d5:71:66:af:40:d9:6a:95:5a:93:af:
42:b7:1b:5d:9f:00:50:04:01:4d:35:54:7c:92:7a:4c:d0:1c:
62:a1:a2:c8:53:3e:7f:3a:eb:9c:13:bb:5b:fc:3a:51:bf:07:
c9:fe:ae:ac:d5:d3:1c:3f:96:9d:dc:65:79:12:7d:af:9d:22:
5a:09:eb:04:b0:b6:bd:f7:ea:7d:48:f5:bc:36:47:fa:6c:59:
76:05:ba:0d:a8:fa:ea:c2:c0:7d:c5:05:d4:fb:5f:54:a7:56:
dd:9d:c3:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Sc4SgylQpcWPZ5V2o600YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NDAxM2UzNDY0YzE2Y2Q4NTg5YjA1MjAyZmIwZjBjNTkx
MGRjYTMwHhcNMjYwNjE2MjIwMDQ2WhcNMjYwNjE3MjIwMDQ2WjAzMTEwLwYDVQQD
Eyg0ZDlhYzIxNDIwYjAwYzFlOTFmNzEwNmI1MzNhMjg5ODJlM2M3ZWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfWAioFt+stK+ZiazDT/QSUmxNX0
tR/rwIoab8g6lxGxzgTRCSnt5NyBPO9ld0hkEEEWkg9MXlbowLVUbrGiLnCJJI9j
+7OwE0IIFUcGq+r5psC2wOy4HTyXwh/iI65DU6ZUyyMf1uDRIqGpMHco6EMxXIQm
3/hGqHBot6NJKJpxj0sKlZb2Pzy0GgXB4GjO7C7SeGNtHNU0d1sgMOMdXfY6HrPO
bHxM4X+NBb/QW8Sy/9/0g2LInQ9RDy65738h1e7X3JK/i7I6tpiCgdtruMn6yV13
tHrZ61w8r0zTQnXckiiLbZq0Jsiw0ERRHF44lrt2pAuubYHoln7xC5t2vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2awhQgsAwekfcQa1M6KJguPH7GMB8GA1UdIwQY
MBaAFFZAE+NGTBbNhYmwUgL7DwxZENyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85OGVlNzYtMGUwMi00ZmY1LTkxZWQt
ODY2N2ExMDEwMTQzLzEvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy85OGVlNzYtMGUwMi00ZmY1LTkxZWQtODY2N2ExMDEwMTQz
LzEvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdW/B8yh
AwtWzvd7coUhvb9r9SYoKIgpQ0DwgTdSsSo6LjUCubvRI2S8nqFIn/d9DwpYVqVz
XnLrRGPhvOAuEUXXS2y6Wgefg57n5TGtRoXGB1nOaU9tACYVBzGs4zHe6MhzRjjL
aBgjoJTzxYpJkzSHw4YOEYXKCo/rhOlGK2lah+kwKK0seKoGLCih/5QSi6DEKBv3
xtVxZq9A2WqVWpOvQrcbXZ8AUAQBTTVUfJJ6TNAcYqGiyFM+fzrrnBO7W/w6Ub8H
yf6urNXTHD+WndxleRJ9r50iWgnrBLC2vffqfUj1vDZH+mxZdgW6Daj66sLAfcUF
1PtfVKdW3Z3DPw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:58:02 2026 by rpki-client