Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: UbbpZYZSjr0/5jGdEitxIJkCEy32aut7yu454jns4Ys=
Subject key identifier: 74:B3:68:3E:66:19:B3:7F:C7:F4:8B:08:92:47:71:03:4C:DF:BE:FE
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 019D99999C7F440C5123601618160E8E5853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 151E
Signing time: Fri 17 Apr 2026 04:01:14 +0000
Manifest this update: Fri 17 Apr 2026 04:01:14 +0000
Manifest next update: Sat 18 Apr 2026 04:01:14 +0000
Files and hashes: 1: BngoaXPmBES0lcWptUUTkZigcEg.roa (hash: Qe0QVZ+QGm2n+wH6gehbJlOWTxMGZjX9oLD1ObVldNI=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: jIo0EW7hYh+bG+i3xL3FW6MZqAbP8mhTnbTdSayFnX4=)
3: xcw2R2YD0BpUNlrolf3aKOVApLA.roa (hash: 2wiyEKSnDgQYW+1aN/U9IvVMDBKDQ1GzIsfrU/OlUSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:9c:7f:44:0c:51:23:60:16:18:16:0e:8e:58:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Apr 17 04:01:14 2026 GMT
Not After : Apr 18 04:01:14 2026 GMT
Subject: CN=74b3683e6619b37fc7f48b08924771034cdfbefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c3:9e:2b:e5:5e:fa:e3:6e:fd:b1:4b:94:c7:
70:ca:64:b1:4e:bc:90:0d:76:24:62:37:65:2f:79:
33:d1:40:a0:fa:32:37:ba:38:9d:4d:11:fa:6a:f7:
3e:c7:c4:bc:e2:a5:86:ab:31:37:5e:10:8e:0e:45:
c9:6b:40:05:28:34:5f:54:41:12:bb:63:08:b8:c3:
5f:a5:b6:d4:fa:b1:30:b2:a5:65:d6:ac:48:c8:a8:
1e:6e:95:a0:33:70:52:43:4e:66:ef:1d:bc:b2:4f:
43:90:c1:ec:58:02:bb:6a:08:9c:44:8d:26:9a:8b:
53:6c:26:30:60:81:1c:63:58:f4:ef:49:9b:7a:5d:
28:26:f0:2b:1e:71:2d:2e:f2:a9:fa:6b:8f:43:00:
4b:e4:17:b0:52:f2:87:76:e9:92:e4:ea:a1:2f:59:
c2:92:87:89:ba:e3:13:76:47:79:23:f3:fc:23:8c:
d4:e7:bb:76:5d:26:9d:b1:c1:a7:8c:d9:48:67:ca:
ec:a9:4b:e2:1a:25:1b:45:89:41:91:b7:63:89:8b:
5b:6e:96:65:89:48:81:86:85:ac:04:ed:06:7d:79:
cb:45:82:0f:7d:2f:f0:34:95:cf:e0:29:98:b4:8e:
44:20:fd:93:4d:01:dd:2c:ee:33:2d:3d:50:d0:85:
c4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B3:68:3E:66:19:B3:7F:C7:F4:8B:08:92:47:71:03:4C:DF:BE:FE
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e1:89:86:18:12:1b:14:ca:17:57:ee:21:6f:9b:d0:a7:f2:
75:99:01:c6:b0:df:a4:01:07:bd:33:a5:27:52:8c:f8:10:34:
61:12:c4:1c:6a:28:cd:23:6a:26:4f:82:64:ba:5b:d3:2f:ca:
c5:0b:5a:a1:fe:c9:ae:c9:67:53:21:4d:4f:90:da:bb:86:c2:
f1:ac:c2:1b:7b:54:5a:af:c3:73:9b:be:7c:e0:2c:90:69:3b:
fa:52:02:26:7b:74:9f:3c:f3:e0:14:8d:bf:39:c8:51:c4:38:
e5:52:d1:46:15:56:c9:f1:dd:39:2b:b8:2e:29:41:53:a8:ef:
5e:c1:cf:37:5f:b1:93:e7:0a:6c:3f:6b:d5:e0:e4:4c:df:07:
0a:7b:50:e4:fe:e8:e2:e3:34:88:f0:ea:eb:0b:bb:90:1f:d9:
59:91:8c:b1:88:6f:f6:9c:b5:60:8f:a3:99:0d:d5:c8:00:85:
8f:0c:b6:53:c0:9e:79:fd:22:03:b5:ba:48:91:c1:39:57:68:
ca:30:4f:bb:1a:6b:ec:ab:36:7a:88:0d:27:ff:41:98:e7:49:
f8:6d:d8:27:a4:3e:04:e3:12:b1:97:57:ed:63:35:29:8b:c7:
a0:e2:9f:6c:99:ec:05:d5:9d:fc:4c:1e:31:bd:70:e3:37:6c:
14:69:6c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:33:20 2026 by rpki-client