Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier: aHuK6nTQHD8zV/+FEHOdWuv3mhryxoBsLMrl25N3tO4=
Subject key identifier: 65:28:4A:B0:40:AE:17:FB:67:5D:E2:F2:1C:5D:8D:12:07:CD:EF:E8
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 01A0C8586C17EA45E6769D4BD23BE0C138CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number: 143C
Signing time: Tue 22 Sep 2026 09:00:33 +0000
Manifest this update: Tue 22 Sep 2026 09:00:33 +0000
Manifest next update: Wed 23 Sep 2026 09:00:33 +0000
Files and hashes: 1: R1X-0N_qCuCvnv8CkB9Z_OSw2o4.roa (hash: D3kS568Iv2wmPNkEcgVaGHK64PzLTmFGbe9n3gWj/eM=)
2: YqVzzltVIPdeaSwCpyQY30xpr1w.asa (hash: WikOOkK+XwRTMCM7gYW5rQHy5y4vCTIDLGljHlXKP5E=)
3: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: bgDLwylwWIXnj8NnAjvResoWeWpGA3XBD3i/CcZERsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:6c:17:ea:45:e6:76:9d:4b:d2:3b:e0:c1:38:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: Sep 22 09:00:33 2026 GMT
Not After : Sep 23 09:00:33 2026 GMT
Subject: CN=65284ab040ae17fb675de2f21c5d8d1207cdefe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:99:80:bb:e7:4e:1d:ca:bf:5e:55:3f:10:a3:
17:e0:ed:6a:7e:1e:07:b7:cc:86:e7:f2:44:d8:61:
c8:f7:c7:df:56:be:68:67:33:d4:0b:db:31:a3:3e:
0d:fb:e8:3f:c2:79:31:3b:e0:d3:62:c4:52:aa:f7:
be:0f:40:0a:e9:fe:f9:df:8e:bf:67:a7:89:e5:79:
a7:bb:fd:5c:77:11:ae:5b:bd:7a:0c:d2:81:d0:b3:
e5:10:e8:ec:ab:25:e2:75:91:18:48:72:6b:0b:bf:
e9:75:91:28:bd:d7:9c:41:d8:2d:70:ba:52:8d:60:
2f:62:92:48:15:28:4b:e4:4a:24:30:5b:c5:9a:da:
4c:a4:bf:37:28:3b:06:e7:f6:83:35:13:93:5a:15:
cb:85:ee:a8:cd:63:8e:a3:c7:eb:3f:ea:07:b2:6d:
c6:42:2d:d8:ff:c0:9b:fa:8d:31:7e:6d:7f:01:a7:
ac:34:77:11:37:60:7d:17:33:04:c6:3f:29:24:6c:
cd:d1:e4:2d:33:f2:e2:3c:fe:9b:f4:d2:db:db:39:
05:f1:fc:44:5c:1f:8b:a7:d0:e7:6e:f4:db:9f:99:
aa:cd:d3:77:d6:07:9c:32:0b:9f:50:9e:de:c1:a6:
6a:68:04:a3:ab:19:2f:26:ec:23:ad:3b:c5:5b:39:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:28:4A:B0:40:AE:17:FB:67:5D:E2:F2:1C:5D:8D:12:07:CD:EF:E8
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:46:b4:7c:fe:a2:e7:dc:d5:d4:2a:2d:3a:e9:ba:d5:e7:67:
98:55:3d:94:96:ce:9e:13:1d:72:39:db:8e:cb:e4:eb:ef:d6:
ec:3f:19:41:14:b0:01:8f:af:b4:36:f4:2a:5b:be:b1:53:c5:
30:a5:7d:7c:dd:df:1f:0d:00:36:4d:87:db:68:37:7a:98:8e:
05:0b:61:fd:95:b3:49:a5:e1:45:23:c5:be:d6:55:ce:84:31:
bd:cd:82:42:c2:8a:3f:71:d4:77:ea:ac:6f:46:6b:4b:a3:c4:
34:85:98:81:62:8c:ef:61:ad:cf:4d:28:26:fb:9f:5a:b0:28:
97:3e:c9:5c:e5:bd:77:6b:d7:6c:12:e4:19:0f:0c:89:5d:9c:
e5:66:78:42:d1:e8:09:be:4d:7a:64:2c:0f:ed:26:18:6a:73:
76:1f:b5:eb:f3:25:fb:8b:d6:89:25:36:30:f9:4a:ae:e7:33:
e6:6a:13:8c:cd:c3:37:8c:a7:ef:e7:0c:96:89:ce:bc:41:7e:
07:41:53:f7:40:19:df:8b:d7:88:d9:49:81:1f:85:f9:38:d5:
60:97:9a:54:f6:78:57:4c:13:80:1d:31:1a:f8:5f:5d:c5:ab:
d0:6d:02:6a:9d:ca:e2:2b:f6:f8:db:f2:b1:c8:59:80:36:7e:
3f:89:65:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWGwX6kXmdp1L0jvgwTjNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDNkMjcxMGFhZDdjOThjMTBmNGQ5NDVkYWJkZWVhMjFj
NDlkMzEwHhcNMjYwOTIyMDkwMDMzWhcNMjYwOTIzMDkwMDMzWjAzMTEwLwYDVQQD
Eyg2NTI4NGFiMDQwYWUxN2ZiNjc1ZGUyZjIxYzVkOGQxMjA3Y2RlZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pmAu+dOHcq/XlU/EKMX4O1qfh4H
t8yG5/JE2GHI98ffVr5oZzPUC9sxoz4N++g/wnkxO+DTYsRSqve+D0AK6f75346/
Z6eJ5Xmnu/1cdxGuW716DNKB0LPlEOjsqyXidZEYSHJrC7/pdZEovdecQdgtcLpS
jWAvYpJIFShL5EokMFvFmtpMpL83KDsG5/aDNROTWhXLhe6ozWOOo8frP+oHsm3G
Qi3Y/8Cb+o0xfm1/AaesNHcRN2B9FzMExj8pJGzN0eQtM/LiPP6b9NLb2zkF8fxE
XB+Lp9DnbvTbn5mqzdN31gecMgufUJ7ewaZqaASjqxkvJuwjrTvFWzlifwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUoSrBArhf7Z13i8hxdjRIHze/oMB8GA1UdIwQY
MBaAFL5D0nEKrXyYwQ9NlF2r3uohxJ0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZjQ3OTQtOWU1My00ZjMwLWE5ODct
OGFmN2FlMGE5YWM3LzEvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZjQ3OTQtOWU1My00ZjMwLWE5ODctOGFmN2FlMGE5YWM3
LzEvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABka0fP6i
59zV1CotOum61ednmFU9lJbOnhMdcjnbjsvk6+/W7D8ZQRSwAY+vtDb0Klu+sVPF
MKV9fN3fHw0ANk2H22g3epiOBQth/ZWzSaXhRSPFvtZVzoQxvc2CQsKKP3HUd+qs
b0ZrS6PENIWYgWKM72Gtz00oJvufWrAolz7JXOW9d2vXbBLkGQ8MiV2c5WZ4QtHo
Cb5NemQsD+0mGGpzdh+16/Ml+4vWiSU2MPlKrucz5moTjM3DN4yn7+cMlonOvEF+
B0FT90AZ34vXiNlJgR+F+TjVYJeaVPZ4V0wTgB0xGvhfXcWr0G0Cap3K4iv2+Nvy
schZgDZ+P4ll9w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:12:52 2026 by rpki-client