Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier: fcpu5sscFD8T3/B/bB+kqpi0azxsZcB1NpRG4ROQBac=
Subject key identifier: 6F:D5:30:5F:C6:39:C3:96:F2:A3:CE:FC:41:CA:7B:0D:B3:75:77:FC
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 019D9A3ECAE9CEAF9768229ABCD1BAC8F3B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number: 1296
Signing time: Fri 17 Apr 2026 07:01:39 +0000
Manifest this update: Fri 17 Apr 2026 07:01:39 +0000
Manifest next update: Sat 18 Apr 2026 07:01:39 +0000
Files and hashes: 1: R1X-0N_qCuCvnv8CkB9Z_OSw2o4.roa (hash: D3kS568Iv2wmPNkEcgVaGHK64PzLTmFGbe9n3gWj/eM=)
2: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: wcFWDj4WRhY91LsIhrnOSsMu3keyjYJitbVynNBsNcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:ca:e9:ce:af:97:68:22:9a:bc:d1:ba:c8:f3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: Apr 17 07:01:39 2026 GMT
Not After : Apr 18 07:01:39 2026 GMT
Subject: CN=6fd5305fc639c396f2a3cefc41ca7b0db37577fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:88:b2:9a:7a:ae:2b:9b:72:3f:5c:6e:d2:
7c:a7:30:1f:12:8e:16:7d:ae:01:94:3c:bf:47:b8:
de:21:e8:94:a4:51:94:71:43:ba:15:b6:81:5f:d1:
2f:56:5f:d4:30:d1:38:26:28:af:8d:3f:f3:41:3e:
43:d4:8c:78:3e:c8:eb:24:da:98:e3:15:c9:e9:23:
d2:77:26:f6:45:25:b4:52:da:0e:1f:5f:e6:00:e6:
7b:bd:11:6f:27:7a:a4:58:0a:40:97:3b:1e:6c:7d:
f7:b6:03:c9:f7:53:3f:87:c4:69:d8:16:50:2e:90:
2d:60:e4:08:05:03:9e:ee:f9:90:a0:81:12:97:8a:
84:0e:bc:2c:1f:2c:b4:70:28:7f:4d:de:b6:64:02:
18:e3:22:0c:b5:91:6b:5d:dc:ff:57:56:04:51:e9:
1b:e2:e9:ea:45:a7:e9:91:52:7f:21:1a:0e:4e:3e:
3d:2c:69:e4:99:38:72:5f:de:a8:01:1a:a1:0e:43:
a8:68:1b:98:ce:b7:3e:86:3d:08:ca:df:94:c5:d1:
08:c2:e5:a3:03:b6:e1:5b:0a:cb:8b:41:12:d3:a6:
ca:3a:7a:c7:1b:42:15:6d:ea:fc:90:cb:26:43:60:
8f:e7:34:b9:22:cc:13:25:63:8c:77:8b:8c:5d:9c:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D5:30:5F:C6:39:C3:96:F2:A3:CE:FC:41:CA:7B:0D:B3:75:77:FC
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:95:ae:1e:d8:2e:04:f4:c7:93:92:ad:2a:ab:cd:02:d8:5f:
69:8e:21:a1:6f:d6:e6:71:b9:f3:39:76:54:4e:66:02:2d:6c:
8a:64:82:15:38:cb:09:fb:db:16:c7:9b:21:ee:6b:e3:6e:91:
1e:6b:7d:c3:80:20:a2:d5:1c:f2:f5:2b:86:cb:2e:ec:46:3f:
a8:e0:e9:50:09:6b:bb:77:ef:6d:f2:98:8f:a9:dc:2e:86:6a:
fd:25:4f:cf:dc:62:ac:3b:ac:d5:ea:22:cc:be:c3:43:f1:9b:
02:e3:e1:67:2e:00:72:99:e0:80:1f:6f:01:38:cf:05:59:38:
33:d9:19:0d:86:a3:e0:e4:69:61:54:4e:47:78:1d:1b:35:57:
1e:c1:78:b5:76:97:5a:fe:b9:6c:06:4b:d3:90:4a:f6:d3:1c:
bf:87:7c:be:8b:8f:3e:71:32:6a:63:4a:4f:89:ba:7b:97:b8:
70:6b:d0:34:79:71:5a:44:a6:94:92:56:06:a5:ce:6a:4e:fc:
5f:bd:74:a6:fd:22:83:06:44:f9:d2:08:0b:5a:08:0d:d8:0d:
aa:f0:1f:2c:9f:da:a9:9e:58:64:57:f0:d2:11:66:e3:5a:59:
bd:8f:31:31:3f:00:6e:26:33:cd:8d:77:1d:b4:dc:d2:4c:3f:
fb:51:d0:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPsrpzq+XaCKavNG6yPO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDNkMjcxMGFhZDdjOThjMTBmNGQ5NDVkYWJkZWVhMjFj
NDlkMzEwHhcNMjYwNDE3MDcwMTM5WhcNMjYwNDE4MDcwMTM5WjAzMTEwLwYDVQQD
Eyg2ZmQ1MzA1ZmM2MzljMzk2ZjJhM2NlZmM0MWNhN2IwZGIzNzU3N2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmqIspp6riubcj9cbtJ8pzAfEo4W
fa4BlDy/R7jeIeiUpFGUcUO6FbaBX9EvVl/UMNE4JiivjT/zQT5D1Ix4PsjrJNqY
4xXJ6SPSdyb2RSW0UtoOH1/mAOZ7vRFvJ3qkWApAlzsebH33tgPJ91M/h8Rp2BZQ
LpAtYOQIBQOe7vmQoIESl4qEDrwsHyy0cCh/Td62ZAIY4yIMtZFrXdz/V1YEUekb
4unqRafpkVJ/IRoOTj49LGnkmThyX96oARqhDkOoaBuYzrc+hj0Iyt+UxdEIwuWj
A7bhWwrLi0ES06bKOnrHG0IVber8kMsmQ2CP5zS5IswTJWOMd4uMXZwz/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/VMF/GOcOW8qPO/EHKew2zdXf8MB8GA1UdIwQY
MBaAFL5D0nEKrXyYwQ9NlF2r3uohxJ0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZjQ3OTQtOWU1My00ZjMwLWE5ODct
OGFmN2FlMGE5YWM3LzEvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZjQ3OTQtOWU1My00ZjMwLWE5ODctOGFmN2FlMGE5YWM3
LzEvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZWuHtgu
BPTHk5KtKqvNAthfaY4hoW/W5nG58zl2VE5mAi1simSCFTjLCfvbFsebIe5r426R
Hmt9w4AgotUc8vUrhssu7EY/qODpUAlru3fvbfKYj6ncLoZq/SVPz9xirDus1eoi
zL7DQ/GbAuPhZy4AcpnggB9vATjPBVk4M9kZDYaj4ORpYVROR3gdGzVXHsF4tXaX
Wv65bAZL05BK9tMcv4d8vouPPnEyamNKT4m6e5e4cGvQNHlxWkSmlJJWBqXOak78
X710pv0igwZE+dIIC1oIDdgNqvAfLJ/aqZ5YZFfw0hFm41pZvY8xMT8AbiYzzY13
HbTc0kw/+1HQLg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:24 2026 by rpki-client