Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier: 88n4uggNQLbVgRZ7U141+kPnp6RiKQWOKdyL7kfve4A=
Subject key identifier: 22:0A:74:2B:9F:8B:3A:FB:4A:21:4B:90:77:A7:9E:2A:72:32:CF:35
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 019CAD223EE77E3F2A94C2A7006FE978AD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number: 16ED
Signing time: Mon 02 Mar 2026 06:00:28 +0000
Manifest this update: Mon 02 Mar 2026 06:00:28 +0000
Manifest next update: Tue 03 Mar 2026 06:00:28 +0000
Files and hashes: 1: 2e1cz0qQm98XsgOLRW_MtsZatHo.roa (hash: s7uLnF7oXLpb3y50Cb2KADpe3RUMwrdqTlQV52zh+8g=)
2: GyEClr1YQ4_DWaldbIWVGzirKrM.roa (hash: Hf1oKmBrTqtefmUDpN3mwcJ/zJ6TmhTAUewS81ncFOM=)
3: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: Su0b+fpwQfZvis+u/9aGZ4la6Y+jN7hImnUZADcxVaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:3e:e7:7e:3f:2a:94:c2:a7:00:6f:e9:78:ad:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Mar 2 06:00:28 2026 GMT
Not After : Mar 3 06:00:28 2026 GMT
Subject: CN=220a742b9f8b3afb4a214b9077a79e2a7232cf35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:90:f3:71:b9:29:56:4a:de:42:2f:eb:f3:
63:bc:45:c5:d7:1d:83:c3:89:be:cb:29:55:5a:d1:
22:3b:01:68:31:34:4f:33:ff:71:dd:bb:55:44:0d:
b8:dc:34:c6:3d:9f:33:93:86:e5:29:ce:51:cd:c4:
3b:a5:a3:a4:38:36:b2:8e:1e:fb:be:89:e3:f8:68:
70:55:6e:fe:71:b2:9c:f2:d1:df:76:35:1d:a0:76:
93:c7:bc:d0:b1:29:70:f6:25:ed:be:6f:3c:b2:c1:
e8:c2:b5:4a:a4:f2:d8:af:c9:e0:d8:56:a1:75:87:
ef:99:3b:ca:0f:68:ce:65:60:16:11:a5:c5:da:5d:
eb:39:3b:93:65:f3:62:6f:72:b1:61:88:7f:9d:c0:
47:d1:4a:74:3f:6c:ef:df:b1:d9:51:bc:f4:08:2d:
68:a0:ba:13:34:1c:5d:ca:bb:8b:1a:8c:f6:92:1b:
98:98:55:23:64:78:09:be:6a:6b:6e:ef:cb:07:20:
20:fd:ed:1a:d7:08:06:00:6b:83:b8:93:43:98:99:
fd:99:83:26:45:b0:cd:08:b6:08:3e:40:1f:bb:09:
d9:2f:37:5f:8f:cd:5c:49:51:00:84:e9:f3:a9:97:
59:0a:ca:ec:35:03:36:46:36:b1:4e:fc:cc:30:98:
84:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0A:74:2B:9F:8B:3A:FB:4A:21:4B:90:77:A7:9E:2A:72:32:CF:35
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5b:4b:07:1f:6f:d2:23:27:f3:e6:92:99:96:5c:7d:16:07:
ee:20:fd:0a:3b:36:21:06:fe:d6:bf:ad:1c:e7:e3:4a:7a:0a:
f0:8a:d9:7c:49:6c:3b:94:88:72:40:ca:92:89:ef:29:92:93:
8e:60:66:d1:71:9a:da:79:37:ac:e8:df:6f:58:11:a1:05:b8:
14:b9:b6:ed:9f:da:de:ba:c9:ed:2e:ba:60:19:fc:d4:fa:3f:
ed:ab:12:cd:70:33:6f:38:49:dc:e9:50:ea:14:83:3a:cc:28:
5d:84:e9:65:1a:48:ab:bb:05:31:a8:72:fb:8b:69:14:0d:09:
2b:c1:b2:62:13:39:4d:ab:8a:59:69:30:f1:ed:e9:9e:98:96:
21:ad:79:1c:f9:c7:db:89:fc:04:fa:cd:e6:05:a4:99:4d:c6:
89:24:4b:fb:86:77:3b:ff:0d:53:14:58:36:6a:9c:86:b1:c7:
5a:ff:42:d0:5e:83:da:3b:32:ab:ba:d6:5d:cc:a2:24:da:bf:
70:4b:b6:a5:a1:7f:2d:ff:95:94:f4:68:12:24:c1:38:ac:f4:
cc:a7:34:79:7a:d8:32:c0:9d:31:e8:52:d0:49:8b:a0:b5:e2:
3b:97:0f:ea:8a:ff:58:6d:1c:59:6f:ed:8f:cc:72:5e:1e:d1:
2a:9a:af:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:20 2026 by rpki-client