Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier: HmbWWrDG4R4PglkKULRLIwslbWUlVaz5S8vG73SkprU=
Subject key identifier: AD:1F:EE:70:26:75:2F:2D:E0:61:2A:E3:58:35:33:69:AD:B9:1C:19
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 019D98BD2EBDFAE56D01BF5E4A71C52F0B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number: 1767
Signing time: Fri 17 Apr 2026 00:00:27 +0000
Manifest this update: Fri 17 Apr 2026 00:00:27 +0000
Manifest next update: Sat 18 Apr 2026 00:00:27 +0000
Files and hashes: 1: 2e1cz0qQm98XsgOLRW_MtsZatHo.roa (hash: s7uLnF7oXLpb3y50Cb2KADpe3RUMwrdqTlQV52zh+8g=)
2: GyEClr1YQ4_DWaldbIWVGzirKrM.roa (hash: Hf1oKmBrTqtefmUDpN3mwcJ/zJ6TmhTAUewS81ncFOM=)
3: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: 2lHACiwWlMT1pIdkIpsVx6eOP4YJaWO+zOUfqi4ozXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:2e:bd:fa:e5:6d:01:bf:5e:4a:71:c5:2f:0b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Apr 17 00:00:27 2026 GMT
Not After : Apr 18 00:00:27 2026 GMT
Subject: CN=ad1fee7026752f2de0612ae358353369adb91c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2a:0c:fb:da:42:ab:9a:bd:31:b3:d7:18:d6:
98:85:3d:ec:11:93:6a:f1:06:ee:87:8f:40:07:ab:
f0:13:51:67:4e:9a:96:b9:69:bc:3d:da:f7:b6:bc:
ad:ce:82:5f:29:b8:a6:09:ae:a5:2b:bd:8d:53:3a:
73:ec:aa:bc:80:c1:e6:a3:73:aa:6d:41:74:7f:23:
98:b1:cc:7a:01:b7:a0:e7:e7:25:1b:fb:7e:0f:57:
c0:b8:53:59:dc:10:e8:4f:8a:0d:07:ea:7d:4e:1d:
b7:32:af:d3:fb:78:e9:1a:17:44:85:85:66:81:36:
e2:8e:5f:e1:bc:6b:fb:89:3c:51:d9:c3:f3:a6:56:
89:6c:01:5e:8b:8d:c6:34:5d:46:98:24:a2:b8:c9:
7a:f1:d9:5b:1c:5e:2f:44:1f:3a:92:8a:da:39:31:
13:2a:a7:05:98:76:d7:fc:88:94:fb:6c:a1:fe:90:
52:4a:d7:d7:1e:8b:32:df:3a:fd:c0:b4:da:b0:b8:
21:3f:2c:e1:99:5c:b3:14:00:6d:b0:f5:5c:14:f1:
5b:55:f5:b8:62:45:a7:57:67:0a:7c:81:1d:3e:97:
b3:79:f1:27:12:1e:48:49:59:46:d0:21:b0:97:56:
ef:cc:5c:c2:67:9e:24:d7:62:3a:45:f2:e8:5a:4c:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1F:EE:70:26:75:2F:2D:E0:61:2A:E3:58:35:33:69:AD:B9:1C:19
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:cd:e7:08:be:f4:49:9e:88:9f:7a:f2:42:4c:0c:ee:6f:c4:
c1:e9:88:b9:81:0a:cf:63:9f:b1:1a:40:8e:c1:55:ec:f6:52:
72:29:32:29:f8:e3:96:fe:90:3d:1b:39:8a:a5:ff:d4:f3:bf:
1b:91:a5:20:19:c9:66:87:ee:57:85:41:4a:6d:66:ef:6a:28:
12:04:df:9b:66:39:02:8f:1d:70:a3:e4:0e:5d:63:dd:ae:7c:
48:dd:45:f6:e8:ea:6c:d8:2d:83:eb:aa:4f:a0:03:33:55:87:
21:5d:4f:0a:c9:ea:ab:cc:64:24:35:d7:d3:c3:07:86:a6:83:
79:33:2a:ed:93:c8:20:2b:f9:3c:6e:16:e9:e0:5d:5b:ee:41:
09:3a:32:e3:5f:72:7e:5a:80:2e:2a:10:f0:64:55:82:17:32:
34:ed:7d:3f:78:7b:a1:fb:53:8e:df:1a:f7:76:d3:db:37:32:
6c:56:dc:5c:a2:8a:04:3e:ae:53:a1:59:df:f5:46:6d:c2:b0:
3c:05:4a:b8:06:c1:8e:77:52:72:b7:0a:b7:e7:60:1c:36:dd:
50:71:be:f8:9d:d3:39:c5:ab:43:65:d6:43:50:66:34:15:2d:
e3:70:f0:d0:bd:43:1c:da:39:02:1d:ec:ea:99:2c:b5:7d:3d:
9f:da:68:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:01:35 2026 by rpki-client