Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: J7XdG1osonYF/vC1ugWQ63zQe8GVT0Jt53O6Zmh0Yws=
Subject key identifier: E9:AA:28:51:19:EF:7C:ED:1C:00:C9:6D:D9:D5:43:8B:22:B4:98:43
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 019CAA21C73E9704511251BCCF87529B3CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 14A2
Signing time: Sun 01 Mar 2026 16:01:06 +0000
Manifest this update: Sun 01 Mar 2026 16:01:06 +0000
Manifest next update: Mon 02 Mar 2026 16:01:06 +0000
Files and hashes: 1: BngoaXPmBES0lcWptUUTkZigcEg.roa (hash: Qe0QVZ+QGm2n+wH6gehbJlOWTxMGZjX9oLD1ObVldNI=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: 7xYeYhf93FYClrnxKvehSjgd3E24+PP21/ccIfHPE1Y=)
3: xcw2R2YD0BpUNlrolf3aKOVApLA.roa (hash: 2wiyEKSnDgQYW+1aN/U9IvVMDBKDQ1GzIsfrU/OlUSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:c7:3e:97:04:51:12:51:bc:cf:87:52:9b:3c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Mar 1 16:01:06 2026 GMT
Not After : Mar 2 16:01:06 2026 GMT
Subject: CN=e9aa285119ef7ced1c00c96dd9d5438b22b49843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:7e:88:c8:db:d7:ef:2a:83:88:3d:49:f4:
02:81:d2:85:ab:22:a5:c3:2b:e8:f9:b4:28:b0:4a:
c2:c4:b7:d5:b6:56:a6:0f:d0:1e:7c:d2:e8:e5:f2:
aa:95:53:e4:d7:7d:79:8c:e7:18:81:94:ed:ac:c9:
4d:eb:ed:da:7a:78:32:c2:8b:ac:a8:4b:35:95:5e:
5f:90:26:19:0a:72:b0:f6:87:ec:ad:b3:04:81:29:
6d:81:04:58:0e:c7:6f:0b:4b:58:6a:ab:0f:8f:c6:
2b:53:96:04:17:d7:30:ba:e0:07:07:be:8d:2a:a4:
53:03:cd:30:6b:6c:c3:ea:58:dd:9a:f1:2f:39:4c:
7c:2d:40:b5:50:ce:22:f2:da:7b:cf:bf:04:40:f1:
fc:af:3a:1d:a4:d4:dc:33:b4:e4:00:07:07:1a:74:
64:6c:49:3c:09:05:85:a1:53:24:4f:fd:eb:9b:fa:
b9:32:2c:10:77:ed:d3:3f:d5:e9:3c:25:3b:86:52:
af:91:90:f5:8c:b0:15:69:68:48:59:73:59:cf:36:
3a:41:c0:4c:4e:f7:9a:99:b1:93:c0:b7:0a:49:78:
02:e2:5a:ac:87:89:b6:36:67:62:90:fd:b6:ff:57:
37:fc:2e:e0:40:f5:e8:9c:01:2d:c9:b4:33:94:82:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AA:28:51:19:EF:7C:ED:1C:00:C9:6D:D9:D5:43:8B:22:B4:98:43
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:05:ce:06:56:15:06:38:cc:53:17:2c:3d:13:da:37:f1:2c:
c2:4c:07:9f:06:47:69:9e:92:0d:0b:39:50:57:bd:07:30:fc:
59:f2:f9:8e:3d:8a:ae:71:54:dd:d9:fa:1e:11:b3:e5:04:5f:
7d:c6:e9:bd:81:a4:8b:62:a2:62:54:8f:32:f0:56:6a:9e:18:
23:fa:6a:c4:e4:bc:dd:91:10:c4:03:29:db:8d:64:7a:a1:03:
ff:c1:7f:2f:e9:2b:c1:96:b1:a7:74:a1:29:4f:6e:0f:fe:5b:
d2:e9:af:27:df:ad:f6:42:c6:a6:e2:a8:8d:4f:b7:11:1f:f4:
ea:0e:50:45:da:32:3d:21:90:13:b2:49:09:7a:bd:4d:89:e1:
9d:e3:af:58:00:6b:b1:0d:4e:d1:b1:ad:3a:62:4f:51:41:0a:
b3:05:20:64:d7:2a:76:98:53:ce:66:5d:18:03:26:f1:34:1c:
a4:5b:eb:4b:42:1c:ef:b6:1b:3b:2a:a0:ce:18:32:25:e2:42:
ec:a1:d0:1f:e1:02:72:f0:54:db:1c:1f:00:a6:43:d2:c3:31:
0c:38:4e:b7:9f:91:dc:3b:e4:32:e5:f5:c4:c7:42:d0:0b:a6:
6b:dc:ef:fb:d2:3a:8c:20:e7:5d:b1:94:12:77:3e:cf:24:40:
f8:ec:e9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:44:59 2026 by rpki-client