Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
File: VkRaDdykbWQ2d1kSUWqyHUizxhA.mft (raw, json)
Hash identifier: YqFmKE83D5TzJFvxbjq2hQviZlDdhRGq1RXHAudXG+g=
Subject key identifier: 39:FE:17:4D:72:CE:D0:15:09:FF:C5:35:95:95:01:D9:F2:95:5E:93
Authority key identifier: 56:44:5A:0D:DC:A4:6D:64:36:77:59:12:51:6A:B2:1D:48:B3:C6:10
Certificate issuer: /CN=56445a0ddca46d6436775912516ab21d48b3c610
Certificate serial: 01A1347F315A2FBE1446C925559F69812ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkRaDdykbWQ2d1kSUWqyHUizxhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
Manifest number: 0119
Signing time: Tue 13 Oct 2026 09:01:53 +0000
Manifest this update: Tue 13 Oct 2026 09:01:53 +0000
Manifest next update: Wed 14 Oct 2026 09:01:53 +0000
Files and hashes: 1: LICSZW6buSJYk1oARnAFrdmWuFU.roa (hash: TwqDawyRXh5YGrolYDCvMO93/W3FlxRPud+jOp0w8eM=)
2: Rxxwpcxvls8zs8535IZHXRKb8m0.roa (hash: yZE26IiqgT+xbjqM1qO6+eG13lkByw3rPwmmdAx3lE0=)
3: VkRaDdykbWQ2d1kSUWqyHUizxhA.crl (hash: vFKsjKmajtJuWy8VdvYcE/cDYM/s2FGcCkUnGFfJ6oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkRaDdykbWQ2d1kSUWqyHUizxhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 09:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7f:31:5a:2f:be:14:46:c9:25:55:9f:69:81:2e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56445a0ddca46d6436775912516ab21d48b3c610
Validity
Not Before: Oct 13 09:01:53 2026 GMT
Not After : Oct 14 09:01:53 2026 GMT
Subject: CN=39fe174d72ced01509ffc535959501d9f2955e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f2:fc:06:c0:b6:e3:8f:53:5d:de:13:c6:3d:
fe:d0:93:21:89:3b:98:62:78:99:98:c6:13:71:3e:
37:25:cc:89:bf:51:4e:a5:30:e4:76:4c:1d:0c:94:
ba:33:95:55:58:61:0d:22:11:a1:ba:27:14:31:4b:
e5:1f:9a:52:38:5a:66:93:0f:ae:5c:d7:81:5a:8b:
41:6e:54:8a:08:07:35:c7:19:da:88:4d:9b:0c:02:
04:e2:e5:6d:a8:72:c8:b0:fe:8b:4a:3d:10:b6:cd:
c1:2e:d8:65:d6:e4:f4:7e:c8:87:67:14:0a:b9:d8:
b3:ef:88:73:75:01:e4:89:57:aa:f3:49:c5:26:93:
2c:23:ce:cd:2c:03:22:8a:1c:1f:aa:18:9a:b3:d8:
db:6e:3f:37:4d:79:da:8f:ae:a2:6e:3f:01:2b:e7:
27:0f:0b:64:5c:fe:cc:b1:97:42:61:f2:d9:24:17:
ec:1d:5f:5a:ba:d2:b8:d2:7d:db:47:44:ae:11:1b:
5b:d7:ff:e0:c5:23:ec:d7:ba:3c:a1:c7:7f:29:2b:
bf:e4:87:83:21:b0:7b:1e:22:69:17:b3:a8:3d:60:
06:80:c1:c4:5a:59:10:ab:4a:4b:45:e5:4a:e5:98:
31:99:cf:3b:81:fe:64:d1:d7:ea:04:7d:7c:2a:b0:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FE:17:4D:72:CE:D0:15:09:FF:C5:35:95:95:01:D9:F2:95:5E:93
X509v3 Authority Key Identifier:
keyid:56:44:5A:0D:DC:A4:6D:64:36:77:59:12:51:6A:B2:1D:48:B3:C6:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkRaDdykbWQ2d1kSUWqyHUizxhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:36:86:f5:bb:d3:21:87:22:2f:82:7f:d6:cc:59:15:3e:aa:
a1:a0:24:31:b4:63:f0:3c:38:3d:30:c8:01:4f:3d:96:68:ca:
53:4c:6b:f9:b1:6c:30:23:9a:15:5b:7d:7f:5f:fe:12:c9:f3:
98:00:c0:05:c2:53:9e:56:44:22:40:bf:4a:98:2c:47:e1:08:
9b:95:77:6d:d7:a2:50:94:a4:4f:52:58:f2:82:71:a2:5a:1a:
83:80:9f:77:fa:6a:00:41:49:ca:ac:e5:af:57:62:67:24:76:
1f:32:95:75:43:ca:54:f3:7f:16:0e:52:da:9b:b4:17:63:41:
e7:98:69:d5:34:d7:3e:31:16:3b:02:26:39:a4:18:cb:ed:49:
0d:46:f1:aa:ce:c3:4b:34:46:75:cb:af:64:23:44:63:6c:46:
75:a2:23:a1:35:b7:4e:84:e3:cb:7f:86:d2:9e:65:e0:72:80:
c3:e3:f6:cf:df:e7:dd:6d:38:a3:59:8a:30:e2:8f:42:c8:85:
30:9c:90:fa:01:f8:2e:0f:0d:a4:08:12:b0:ff:44:e8:f6:58:
69:02:c7:01:c6:a8:96:de:b5:b9:94:3f:ab:99:ab:3b:b3:de:
3b:46:f8:bd:1f:d1:f0:3f:32:50:8b:4b:96:95:11:0b:34:de:
de:db:c7:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE0fzFaL74URsklVZ9pgS7RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NDQ1YTBkZGNhNDZkNjQzNjc3NTkxMjUxNmFiMjFkNDhi
M2M2MTAwHhcNMjYxMDEzMDkwMTUzWhcNMjYxMDE0MDkwMTUzWjAzMTEwLwYDVQQD
EygzOWZlMTc0ZDcyY2VkMDE1MDlmZmM1MzU5NTk1MDFkOWYyOTU1ZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfL8BsC2449TXd4Txj3+0JMhiTuY
YniZmMYTcT43JcyJv1FOpTDkdkwdDJS6M5VVWGENIhGhuicUMUvlH5pSOFpmkw+u
XNeBWotBblSKCAc1xxnaiE2bDAIE4uVtqHLIsP6LSj0Qts3BLthl1uT0fsiHZxQK
udiz74hzdQHkiVeq80nFJpMsI87NLAMiihwfqhias9jbbj83TXnaj66ibj8BK+cn
DwtkXP7MsZdCYfLZJBfsHV9autK40n3bR0SuERtb1//gxSPs17o8ocd/KSu/5IeD
IbB7HiJpF7OoPWAGgMHEWlkQq0pLReVK5Zgxmc87gf5k0dfqBH18KrCkhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDn+F01yztAVCf/FNZWVAdnylV6TMB8GA1UdIwQY
MBaAFFZEWg3cpG1kNndZElFqsh1Is8YQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmtSYURkeWtiV1EyZDFrU1VXcXlIVWl6eGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jMWNjOTUtNzUyOS00MjcwLWE2ZWMt
NWM3MTk1NmE1Mzc3LzEvVmtSYURkeWtiV1EyZDFrU1VXcXlIVWl6eGhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9jMWNjOTUtNzUyOS00MjcwLWE2ZWMtNWM3MTk1NmE1Mzc3
LzEvVmtSYURkeWtiV1EyZDFrU1VXcXlIVWl6eGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTaG9bvT
IYciL4J/1sxZFT6qoaAkMbRj8Dw4PTDIAU89lmjKU0xr+bFsMCOaFVt9f1/+Esnz
mADABcJTnlZEIkC/SpgsR+EIm5V3bdeiUJSkT1JY8oJxoloag4Cfd/pqAEFJyqzl
r1diZyR2HzKVdUPKVPN/Fg5S2pu0F2NB55hp1TTXPjEWOwImOaQYy+1JDUbxqs7D
SzRGdcuvZCNEY2xGdaIjoTW3ToTjy3+G0p5l4HKAw+P2z9/n3W04o1mKMOKPQsiF
MJyQ+gH4Lg8NpAgSsP9E6PZYaQLHAcaolt61uZQ/q5mrO7PeO0b4vR/R8D8yUItL
lpURCzTe3tvHMA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:22:58 2026 by rpki-client