Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier: Z5rNNtxA5D8F/WXquLbx5Zuh2F+dMiQ1VUNpsKbZsPA=
Subject key identifier: AA:F7:E2:82:43:9C:3E:EB:36:54:C4:96:B7:B6:EC:9C:A2:08:9A:F4
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 019FA9E2BE2F5900271AE0FD8283F9B8DEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number: 1879
Signing time: Tue 28 Jul 2026 18:00:36 +0000
Manifest this update: Tue 28 Jul 2026 18:00:36 +0000
Manifest next update: Wed 29 Jul 2026 18:00:36 +0000
Files and hashes: 1: 2e1cz0qQm98XsgOLRW_MtsZatHo.roa (hash: s7uLnF7oXLpb3y50Cb2KADpe3RUMwrdqTlQV52zh+8g=)
2: GyEClr1YQ4_DWaldbIWVGzirKrM.roa (hash: Hf1oKmBrTqtefmUDpN3mwcJ/zJ6TmhTAUewS81ncFOM=)
3: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: cfMIXWVa5lGwWMc8ixx2zRjjIuOAz7/FczU8dCxIn/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:be:2f:59:00:27:1a:e0:fd:82:83:f9:b8:de:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Jul 28 18:00:36 2026 GMT
Not After : Jul 29 18:00:36 2026 GMT
Subject: CN=aaf7e282439c3eeb3654c496b7b6ec9ca2089af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5d:1c:7e:60:d6:66:8c:0c:b1:d0:09:ff:f6:
e7:9a:68:a3:1c:ab:1e:79:35:45:a9:c2:77:bf:21:
f4:21:7b:c2:63:b8:f4:59:5c:0a:5e:75:7b:48:ab:
99:80:dc:38:62:2c:08:e6:df:46:a3:5a:d1:ae:9f:
37:0c:59:e0:69:00:e1:91:f1:5f:7d:ac:2f:c2:bb:
ce:ce:2d:39:c4:81:64:11:45:28:bb:ae:02:c2:6d:
b5:1c:f3:82:42:ac:c7:77:b9:ab:33:01:75:8c:36:
58:e9:f4:d5:88:ab:bb:2d:43:5f:f5:f3:bc:60:45:
37:2f:68:79:70:30:fb:31:0d:a9:a1:cd:07:a2:8c:
6e:16:fa:ba:f7:e5:88:3a:b0:05:a4:6a:8d:82:20:
ca:5a:c5:a8:7c:cc:a7:cb:70:bb:c0:f7:31:95:db:
0e:cb:34:8e:d6:b3:70:9b:86:26:8e:77:85:c9:bc:
a6:67:08:a9:e9:35:bb:6f:98:19:b4:3a:30:b3:df:
13:97:38:e3:37:ca:1f:28:5d:a5:9d:a1:54:2e:42:
b2:25:80:11:6c:6f:56:1a:13:08:54:55:4f:83:4f:
a3:2f:8d:aa:57:eb:04:28:5c:1a:f9:1a:00:f7:b0:
74:d2:87:e5:d6:7f:fe:0a:a5:c2:33:7e:5e:e5:6c:
10:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F7:E2:82:43:9C:3E:EB:36:54:C4:96:B7:B6:EC:9C:A2:08:9A:F4
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e9:71:3d:8c:16:43:30:b1:65:87:0d:b1:5e:e9:a0:3f:da:
e4:ca:17:28:08:0c:af:3e:5d:11:d5:15:10:d6:23:91:5c:d1:
a0:51:b4:2e:66:c1:58:df:b0:dc:d4:43:6e:1d:9a:35:06:7d:
92:d0:27:ac:ec:16:89:1a:a7:2a:e9:07:31:5b:57:74:ac:c9:
5c:03:1f:8f:24:74:58:e1:26:98:05:43:b2:25:b7:12:c3:09:
69:ac:c0:70:25:ef:14:1e:a4:7e:1f:7d:85:e3:b5:d7:06:b8:
dc:6e:a5:63:c4:bd:fd:d5:23:cd:6e:05:9e:6a:86:f6:38:23:
3d:61:c7:db:eb:28:3b:41:7a:c8:6b:52:7b:f5:b4:ed:3c:70:
c9:bd:19:98:8d:a7:ec:29:2f:e0:44:23:d5:61:89:48:a7:b5:
70:62:25:f3:34:63:19:f9:30:8e:2d:50:72:8d:04:3a:71:12:
d5:e0:ea:c7:7a:13:ae:49:f4:75:1a:02:e8:0f:93:f0:ce:b0:
54:5b:e7:ef:f1:0b:06:25:a5:47:df:6a:c5:57:6c:b3:5d:5c:
99:a9:69:0c:0e:33:b4:08:e5:ec:e4:23:fe:b0:aa:8f:b5:5d:
12:61:d3:61:70:d9:c0:f9:86:c3:b1:c1:24:c6:e6:84:67:09:
8d:7e:10:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:47:30 2026 by rpki-client