Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
File: vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft (raw, json)
Hash identifier: ZxEvDPGkOVzY9ilhCBrAuIlIzJ4mP7Iqa8Ez1oBQhwE=
Subject key identifier: A3:83:23:7B:9B:53:58:D5:4E:37:77:47:E1:D4:B0:08:92:BD:7F:1B
Authority key identifier: BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
Certificate issuer: /CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Certificate serial: 01A0C66AADE3F74677076784453F8FD02F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:01:14 +0000
Manifest this update: Tue 22 Sep 2026 00:01:14 +0000
Manifest next update: Wed 23 Sep 2026 00:01:14 +0000
Files and hashes: 1: Dgm0yJxRGKkWzuCmtXAV_Sap5C4.roa (hash: iEzyR4D1PeG/2/gt5MrfspiuGu469FZd2g1heNAGkMA=)
2: GNjrvjIiN-OXUdCPEIpZchNO6Ys.roa (hash: isKT3r2eXooAKP6/3EQPs1CjALz2zfPJBsvBDqAhScY=)
3: vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl (hash: guEbcvdH+BkLHl3qnyq9jk8hhh3HFyf7cTaaxW3HuUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:ad:e3:f7:46:77:07:67:84:45:3f:8f:d0:2f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Validity
Not Before: Sep 22 00:01:14 2026 GMT
Not After : Sep 23 00:01:14 2026 GMT
Subject: CN=a383237b9b5358d54e377747e1d4b00892bd7f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:40:f2:b9:05:42:f6:a1:4c:ea:a1:22:f6:f5:
8b:b0:7a:a9:7a:14:a0:b3:45:42:61:be:32:89:9e:
ff:46:0e:47:ea:bc:38:d5:3c:b6:e3:29:31:19:11:
35:40:b9:9c:ab:4e:2d:95:57:38:c1:9f:2b:29:52:
8b:89:6b:73:1e:ab:a1:b0:49:fc:ad:ea:b9:2c:fe:
ec:8b:32:c6:d5:cc:9a:6a:1f:b6:16:ee:62:85:e7:
fe:a5:f1:d5:37:b2:67:74:cd:45:51:09:89:8e:03:
40:97:63:2a:d1:70:07:5f:df:9c:46:06:b5:72:2c:
30:f1:ca:0b:6c:31:33:57:1a:23:bb:62:a5:2b:48:
db:3d:c9:e2:3c:4b:35:2e:18:1b:d0:95:2c:ac:a9:
d0:2e:3c:90:8d:fd:c3:33:34:d2:96:1c:2a:f6:87:
c0:3f:55:e5:cd:4e:4c:42:87:28:70:e2:0f:cb:3e:
6b:aa:48:59:a1:75:7d:47:d8:19:22:c2:bf:0c:13:
62:77:48:e4:32:4e:63:b5:1d:20:85:3d:b8:78:4a:
b7:38:38:f4:9e:be:03:b2:87:f4:da:27:99:41:0a:
50:0a:03:3a:cf:93:c5:d8:f8:65:c7:64:4c:05:82:
c9:f2:22:05:61:c9:25:90:87:00:44:1b:e2:ef:61:
c0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:83:23:7B:9B:53:58:D5:4E:37:77:47:E1:D4:B0:08:92:BD:7F:1B
X509v3 Authority Key Identifier:
keyid:BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:58:12:4e:5e:48:2c:a9:04:98:bd:6e:2f:05:ff:3e:dd:43:
5a:01:fc:e8:78:ab:43:c5:ce:e0:2a:e2:66:3e:dd:14:67:3e:
02:18:3e:57:9e:cf:73:7e:67:85:7d:87:a4:d0:b8:71:5f:5f:
51:4d:6a:51:c9:c1:31:cb:3f:47:2c:37:db:1a:99:8c:e0:28:
ce:06:9c:bd:4a:41:ce:0b:26:30:d1:e0:12:20:5f:8f:d6:7d:
72:10:0e:73:ff:1c:a6:5d:e4:01:87:83:95:23:06:80:d1:68:
5a:9c:4b:bd:4d:85:d7:49:0d:ba:40:db:ab:7b:f1:48:6d:d0:
14:ac:b4:69:3f:2e:8e:04:3a:a2:64:ca:14:c4:2c:9f:00:e1:
99:9b:4e:a8:03:6d:36:02:d5:32:8c:5e:0b:5e:51:4e:77:e6:
f0:48:59:26:37:e7:e1:34:34:9c:f9:88:91:44:5c:e1:5b:0a:
f9:89:3b:ea:55:17:ae:fe:d0:2a:6a:a3:e4:80:b0:8b:d8:80:
54:f4:40:ad:25:0a:3d:5f:fd:67:d2:75:eb:92:78:ea:74:db:
09:64:ff:73:03:3c:56:e1:51:68:4e:f9:f8:d2:ff:f6:7b:87:
6f:1c:c7:89:f9:c6:2b:5b:56:dd:49:8c:c7:0e:01:74:1b:52:
9a:da:4d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:57:01 2026 by rpki-client