Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
File: vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft (raw, json)
Hash identifier: G6dziUzgoeFiizZUMPa3d4v18LrsAFGanODBCDMBXGs=
Subject key identifier: 1C:9B:A8:E6:77:6B:B4:D5:C8:4F:51:60:76:83:B3:AD:D1:8F:9A:F6
Authority key identifier: BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
Certificate issuer: /CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Certificate serial: 01A0C28D1CEA69D23513F37A341C9C438C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
Manifest number: DE
Signing time: Mon 21 Sep 2026 06:00:22 +0000
Manifest this update: Mon 21 Sep 2026 06:00:22 +0000
Manifest next update: Tue 22 Sep 2026 06:00:22 +0000
Files and hashes: 1: Dgm0yJxRGKkWzuCmtXAV_Sap5C4.roa (hash: iEzyR4D1PeG/2/gt5MrfspiuGu469FZd2g1heNAGkMA=)
2: GNjrvjIiN-OXUdCPEIpZchNO6Ys.roa (hash: isKT3r2eXooAKP6/3EQPs1CjALz2zfPJBsvBDqAhScY=)
3: vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl (hash: ZO0CyoPpaZVOu78UOXX2vGWOBU0ZO4OXvLbYVd2F7Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:1c:ea:69:d2:35:13:f3:7a:34:1c:9c:43:8c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Validity
Not Before: Sep 21 06:00:22 2026 GMT
Not After : Sep 22 06:00:22 2026 GMT
Subject: CN=1c9ba8e6776bb4d5c84f51607683b3add18f9af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:97:20:c1:ee:c6:7d:9d:96:7b:cd:e5:8c:63:
ab:6a:5b:aa:32:b3:ff:ae:07:55:8d:b4:50:b4:a2:
ba:15:6e:8f:35:cd:bf:a0:ea:f7:4d:b9:48:ea:d7:
c7:b2:bf:fe:5f:82:1f:b4:00:a5:ab:21:ad:d0:c6:
ae:2c:cf:29:76:2e:e4:94:55:7e:6b:25:e7:e0:87:
d8:ec:01:66:07:a2:3d:c7:a8:f0:20:30:50:db:3e:
f1:c2:ec:fb:66:90:50:a2:ff:1f:cd:71:64:a6:87:
33:77:bd:17:d1:d0:7b:32:c0:68:1f:0c:d2:57:50:
b6:02:2f:b0:e9:82:68:f3:a3:86:99:04:5f:b3:00:
8b:7e:03:f0:b5:03:3e:f3:8b:09:bc:33:c0:03:d1:
f5:67:d6:a2:61:51:60:46:4c:1d:44:65:db:3a:7c:
05:40:62:09:00:f0:b7:8e:16:72:4c:86:5b:50:5e:
7d:86:d6:c6:71:93:11:49:30:e6:1b:a9:3d:37:70:
06:31:e7:38:60:b2:b7:bd:68:61:aa:e1:f0:8d:0a:
9d:e8:3a:9f:f7:f1:03:ec:83:74:86:80:2a:2a:be:
f2:2f:ae:87:49:fd:68:71:95:de:31:bd:02:87:05:
61:8c:ba:a0:86:21:ce:14:d2:89:b1:6f:48:7e:18:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9B:A8:E6:77:6B:B4:D5:C8:4F:51:60:76:83:B3:AD:D1:8F:9A:F6
X509v3 Authority Key Identifier:
keyid:BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ff:83:74:24:75:bf:73:56:d8:cd:30:eb:60:c7:c7:2b:ff:
8b:ad:48:79:bb:bb:86:41:aa:89:7f:c9:b1:b4:34:f8:2d:89:
4d:e6:a5:cc:88:d5:b9:72:5e:98:30:09:b7:a1:dc:02:a8:3e:
22:23:0f:6a:55:50:b2:03:8c:9b:72:c1:0a:68:05:0e:8a:f1:
e5:e7:47:4a:30:d3:a3:71:49:f6:e5:b7:aa:82:88:aa:2b:be:
9e:e8:d0:76:02:5f:df:c9:a6:41:44:f2:47:45:88:d7:f4:c6:
e7:9b:8a:4e:69:a6:56:14:62:f7:a9:16:b7:0c:dd:c4:72:0d:
b5:88:76:26:69:d4:4c:a1:b4:90:1d:06:72:82:87:2b:9f:ce:
f4:c1:ed:2c:67:da:9b:ca:06:d2:a1:77:fe:c3:8f:5d:a1:62:
15:28:8e:65:73:f4:0e:57:e9:29:55:cb:6f:64:90:68:67:7d:
ee:17:ce:cd:71:30:97:09:b7:78:0d:e8:a7:7a:10:55:cc:5f:
71:56:7a:f7:a8:86:89:db:e0:10:ac:41:75:a0:1c:4f:18:2a:
6a:62:00:f5:2b:df:ec:2d:e7:80:67:46:52:00:37:b2:e9:30:
59:50:b6:9a:0a:6a:14:f2:d0:b6:b0:b9:35:e0:07:cf:e4:7a:
a6:92:7e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:09:23 2026 by rpki-client