Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: q5QoPnkQxV172OltXVzNS+hUiVk3IiC+mCK7/W+xZZU=
Subject key identifier: 09:EE:6C:1F:9C:87:50:AD:72:19:E0:03:C7:39:2F:11:8A:CF:3D:77
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 01A0BEE7A110355397E94C28268584716F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 16BF
Signing time: Sun 20 Sep 2026 13:00:46 +0000
Manifest this update: Sun 20 Sep 2026 13:00:46 +0000
Manifest next update: Mon 21 Sep 2026 13:00:46 +0000
Files and hashes: 1: BngoaXPmBES0lcWptUUTkZigcEg.roa (hash: Qe0QVZ+QGm2n+wH6gehbJlOWTxMGZjX9oLD1ObVldNI=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: m4r44FKNb+aETJsjV40X67AO8d1ekg89CtQ6EF5Ca5g=)
3: xcw2R2YD0BpUNlrolf3aKOVApLA.roa (hash: 2wiyEKSnDgQYW+1aN/U9IvVMDBKDQ1GzIsfrU/OlUSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:a1:10:35:53:97:e9:4c:28:26:85:84:71:6f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Sep 20 13:00:46 2026 GMT
Not After : Sep 21 13:00:46 2026 GMT
Subject: CN=09ee6c1f9c8750ad7219e003c7392f118acf3d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:eb:51:f9:2f:01:c3:f3:f0:4a:7a:85:db:
95:45:89:98:f5:4b:57:d1:8f:22:0e:92:07:8b:1e:
b9:40:d7:cc:1a:7c:70:1c:98:7e:1f:eb:a1:f0:6b:
13:22:e8:97:0f:06:01:dc:1d:1d:b4:1b:3b:17:64:
3d:e6:e9:e9:06:4a:02:60:13:e5:f6:95:91:ca:57:
ef:06:7f:9b:8f:df:26:c5:0a:98:f0:81:0a:5a:88:
b3:5b:5f:86:b6:b2:ef:72:d2:7f:eb:6d:18:55:cc:
b5:74:bf:5f:ec:22:56:4f:a7:19:cf:77:0f:3a:6b:
72:81:0f:26:55:c2:99:6c:c6:0f:0c:cb:40:f9:fe:
25:bf:94:32:80:64:ec:22:ed:c1:ee:ed:72:08:30:
37:26:f7:90:74:9c:9c:7b:8c:c1:00:57:f2:2a:a0:
e2:1c:af:df:84:03:c1:d5:08:7b:52:0e:a8:e4:f2:
bd:c8:bd:fb:25:10:89:86:37:13:08:6b:db:3a:ff:
27:1c:ce:ff:14:86:07:ac:4d:db:5d:9a:32:a4:72:
06:1b:ca:c8:8b:d2:85:e3:22:2f:71:e9:d0:04:f8:
26:09:64:a9:39:31:60:3e:db:cf:69:0e:49:9a:96:
8e:ee:54:66:e6:85:40:fb:4d:87:b0:0b:5a:70:02:
bf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EE:6C:1F:9C:87:50:AD:72:19:E0:03:C7:39:2F:11:8A:CF:3D:77
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c8:b6:b1:56:72:4c:94:26:4f:9d:11:8c:70:87:8a:8e:5c:
0b:bd:3b:4e:60:ea:69:0c:fc:2c:9e:1d:ae:99:77:5a:35:de:
9a:ff:51:85:97:64:f3:33:ef:60:65:fe:f9:03:23:cc:e1:17:
4a:bc:f7:0a:2d:f6:b1:dc:82:40:11:bf:bb:89:54:6c:e5:c6:
5b:6d:73:9a:b0:6b:c1:f4:8c:5a:97:e8:ee:c8:c0:f1:4b:0c:
fc:8f:59:ba:43:3f:6e:52:05:1d:f3:7e:d1:fb:ed:4c:b3:6e:
12:58:16:ba:1f:9e:2c:48:da:9c:c3:c9:98:e6:e7:ae:ef:d9:
c3:94:1d:33:ee:b7:8c:8a:17:50:62:c3:dc:1a:ef:d1:6a:9b:
f3:47:66:4f:7a:a6:74:74:dd:43:fa:d5:9c:74:6f:b1:aa:3c:
41:2e:7d:3e:22:64:52:53:29:5b:4b:d1:8c:28:80:bf:93:dc:
ff:f0:3a:c2:68:07:e2:5c:49:f3:3e:df:0d:ec:91:7c:32:a4:
bd:51:ac:6b:ec:c3:8d:86:66:af:14:2c:0c:0c:d8:32:69:31:
25:0a:20:4e:c2:de:ca:94:c1:de:dc:f7:fb:17:bb:01:c3:f2:
a4:c4:dd:81:8d:e7:8c:1a:08:79:08:fa:91:e3:a5:ec:1e:fe:
2e:6c:5e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:10:12 2026 by rpki-client