Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier: LDhsF0/58usx3aanp4XokC8einPp+DKfoRGJFU3YXOc=
Subject key identifier: C5:0A:AD:B4:CB:8A:83:30:D0:25:7C:DF:B9:64:A6:58:8D:F1:03:2F
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 01A0CF6CE02E5515F21BF3ADC2B1B715A504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number: 1911
Signing time: Wed 23 Sep 2026 18:00:14 +0000
Manifest this update: Wed 23 Sep 2026 18:00:14 +0000
Manifest next update: Thu 24 Sep 2026 18:00:14 +0000
Files and hashes: 1: 2e1cz0qQm98XsgOLRW_MtsZatHo.roa (hash: s7uLnF7oXLpb3y50Cb2KADpe3RUMwrdqTlQV52zh+8g=)
2: GyEClr1YQ4_DWaldbIWVGzirKrM.roa (hash: Hf1oKmBrTqtefmUDpN3mwcJ/zJ6TmhTAUewS81ncFOM=)
3: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: h5RhynwJVeiNyPXseNXOhcqrOwTpuVgQ/7xgBdahaP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6c:e0:2e:55:15:f2:1b:f3:ad:c2:b1:b7:15:a5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Sep 23 18:00:14 2026 GMT
Not After : Sep 24 18:00:14 2026 GMT
Subject: CN=c50aadb4cb8a8330d0257cdfb964a6588df1032f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:fc:e6:7c:31:85:76:2d:fc:5f:bb:ce:9a:
7a:65:3d:23:44:54:f0:1e:f9:24:c3:7b:46:15:52:
50:fd:44:2d:68:93:bc:9c:ba:7d:78:41:15:d6:f3:
d1:1f:7c:c6:56:87:6c:5d:99:47:67:48:86:2e:d2:
ba:61:0d:20:78:df:9b:01:0c:c0:67:c5:83:dc:f2:
8e:b8:c5:80:cc:a7:0f:17:c2:09:15:3b:37:96:aa:
f0:a4:c8:ae:2f:25:66:6b:33:67:7e:e3:80:c9:1d:
95:ac:7f:8e:42:5a:6d:93:c6:8c:85:33:f2:2d:9c:
64:95:04:3c:27:38:47:bd:58:96:c6:92:7b:c8:c3:
87:56:99:0a:bc:00:a4:74:15:93:09:2c:69:18:50:
b6:b9:c5:ec:e9:8a:ec:f4:ba:00:86:b2:4c:90:00:
61:e4:70:13:d6:67:56:86:53:e8:92:0e:3c:23:86:
da:59:cd:2d:f6:f3:cc:84:67:b3:14:07:39:02:d5:
94:84:dc:7e:30:8f:cd:47:fb:cb:fd:07:0a:9e:6a:
6e:0b:48:29:9b:18:e2:f7:4e:f5:e2:73:1d:10:88:
a3:55:b3:64:06:80:0a:57:dc:e1:c6:d6:ac:90:a5:
29:99:9c:d2:5d:f2:65:26:b9:41:95:1b:39:88:be:
09:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0A:AD:B4:CB:8A:83:30:D0:25:7C:DF:B9:64:A6:58:8D:F1:03:2F
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4d:de:fc:5c:f6:7e:e9:e9:e4:de:f7:ca:26:ca:52:bf:32:
55:3f:0f:1d:f2:fc:60:94:fa:8f:0f:63:86:4b:a3:bc:06:d4:
24:05:23:33:7a:6a:f5:a9:61:3f:e0:60:5d:64:7f:f7:8c:81:
d5:12:d7:2f:f9:20:98:60:47:41:21:9b:ba:7a:a7:c4:af:f7:
a2:89:44:c4:95:f8:c5:af:e9:c3:97:ea:96:f7:2a:4d:e6:d9:
fc:e0:60:15:36:5a:58:72:0e:64:fe:07:67:39:c4:f1:86:67:
ac:73:82:82:93:7b:58:1f:f2:9b:b0:a3:e0:96:e3:8c:17:4e:
33:b0:1c:f5:b9:59:2a:90:37:27:fa:d1:a3:9c:04:46:2e:56:
1e:f6:56:f9:b4:9c:d6:d4:68:1a:c7:1d:11:39:f3:a4:69:d0:
eb:9f:6b:a9:60:6d:4c:59:b3:84:6b:2e:0c:d0:ab:5c:13:c3:
8d:18:1d:25:c7:e9:65:fe:24:34:07:33:65:a5:81:a0:0d:80:
ea:ec:f5:80:82:ff:07:55:7c:91:2e:62:d4:8c:66:e5:10:04:
0a:ec:df:21:fc:3a:45:01:8f:ed:8e:db:64:c4:b8:26:b2:b4:
b3:03:62:82:5b:b6:f3:5d:02:e4:02:ad:31:f1:87:53:69:05:
42:d0:30:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPbOAuVRXyG/OtwrG3FaUEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTMxYWIwMzNjZmQyZGVlNjg1MmZhOWQ4YmY1YTRhMGUz
NTI0MTQwHhcNMjYwOTIzMTgwMDE0WhcNMjYwOTI0MTgwMDE0WjAzMTEwLwYDVQQD
EyhjNTBhYWRiNGNiOGE4MzMwZDAyNTdjZGZiOTY0YTY1ODhkZjEwMzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01z85nwxhXYt/F+7zpp6ZT0jRFTw
Hvkkw3tGFVJQ/UQtaJO8nLp9eEEV1vPRH3zGVodsXZlHZ0iGLtK6YQ0geN+bAQzA
Z8WD3PKOuMWAzKcPF8IJFTs3lqrwpMiuLyVmazNnfuOAyR2VrH+OQlptk8aMhTPy
LZxklQQ8JzhHvViWxpJ7yMOHVpkKvACkdBWTCSxpGFC2ucXs6Yrs9LoAhrJMkABh
5HAT1mdWhlPokg48I4baWc0t9vPMhGezFAc5AtWUhNx+MI/NR/vL/QcKnmpuC0gp
mxji90714nMdEIijVbNkBoAKV9zhxtaskKUpmZzSXfJlJrlBlRs5iL4JuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUKrbTLioMw0CV837lkpliN8QMvMB8GA1UdIwQY
MBaAFFSjGrAzz9Le5oUvqdi/WkoONSQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGIt
NjE5YzI2MTk0MTY4LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGItNjE5YzI2MTk0MTY4
LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW03e/Fz2
funp5N73yibKUr8yVT8PHfL8YJT6jw9jhkujvAbUJAUjM3pq9alhP+BgXWR/94yB
1RLXL/kgmGBHQSGbunqnxK/3oolExJX4xa/pw5fqlvcqTebZ/OBgFTZaWHIOZP4H
ZznE8YZnrHOCgpN7WB/ym7Cj4JbjjBdOM7Ac9blZKpA3J/rRo5wERi5WHvZW+bSc
1tRoGscdETnzpGnQ659rqWBtTFmzhGsuDNCrXBPDjRgdJcfpZf4kNAczZaWBoA2A
6uz1gIL/B1V8kS5i1Ixm5RAECuzfIfw6RQGP7Y7bZMS4JrK0swNiglu2810C5AKt
MfGHU2kFQtAwLw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:10:46 2026 by rpki-client