
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft
File: VKDwgR-cJWN0RIqgFdd2knGCG_M.mft (raw, json)
Hash identifier: wdXh/ptgLkCYSw30+OkChzVwq49whcjV62SaIN3tV0E=
Subject key identifier: E2:40:A0:51:52:05:4F:B3:90:7F:14:F1:FF:74:9D:7A:A4:E0:8B:54
Authority key identifier: 54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3
Certificate issuer: /CN=54a0f0811f9c256374448aa015d7769271821bf3
Certificate serial: 019CADFE6FF3E2C46BE458D86B8966AA33A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft
Manifest number: FD
Signing time: Mon 02 Mar 2026 10:00:58 +0000
Manifest this update: Mon 02 Mar 2026 10:00:58 +0000
Manifest next update: Tue 03 Mar 2026 10:00:58 +0000
Files and hashes: 1: Be8ZE-3fUDOUREKbRltRl9iw1eI.roa (hash: ts/tUG1XY8HQ9PPvnRSU96o95po47vRKYvpi0JSwMOQ=)
2: JPN0ZhHYSvkn7r532xwlghazy8M.roa (hash: b6weq00B1xhN/jGEGOFPdub/LMTw7LxhTg6NLGhBKwY=)
3: UZH0fpr1tyUVaCTBDnjkP57r0fg.roa (hash: asbZ5HvBqKNvkMzm24LOBMXDZ+s4an0DuYC6LDjlSWE=)
4: VKDwgR-cJWN0RIqgFdd2knGCG_M.crl (hash: RJq2CPlAmieG45yjnKP/AKk9ZOpSIqNVW9i2kfOY+Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:6f:f3:e2:c4:6b:e4:58:d8:6b:89:66:aa:33:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a0f0811f9c256374448aa015d7769271821bf3
Validity
Not Before: Mar 2 10:00:58 2026 GMT
Not After : Mar 3 10:00:58 2026 GMT
Subject: CN=e240a05152054fb3907f14f1ff749d7aa4e08b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:91:1a:92:56:1d:39:91:bd:8e:a0:dd:c9:2d:
30:21:2a:b9:d5:3f:c8:3d:0b:6d:18:be:13:b5:8b:
fe:bf:e7:cf:86:e6:33:dd:7f:07:24:3e:44:49:69:
fe:3f:b3:1c:14:fb:08:01:91:a2:79:5b:b6:a9:4e:
0e:0c:eb:d7:3d:e2:aa:19:fc:3f:99:e9:a6:99:26:
bc:95:d2:e5:26:2d:fb:97:9d:e4:4c:4d:a6:98:8a:
03:d7:be:20:22:4c:ba:6b:3d:01:a1:e7:0d:d8:3e:
13:3b:c8:a0:d5:0a:c8:f4:f1:fd:19:4d:3f:cc:d7:
a9:21:ef:ac:ca:89:61:f4:1b:44:1b:ae:f5:0c:84:
b4:87:82:cc:df:7d:ae:36:19:73:f7:82:76:e8:b3:
36:1a:07:09:43:2a:ed:20:f7:2b:7e:a0:28:af:e4:
3b:5e:e9:2d:2e:d6:8c:16:02:0a:01:27:17:ce:8b:
fc:6f:c9:e1:06:ec:59:46:f8:a3:32:5a:ba:04:cd:
9e:e0:00:65:d3:79:99:79:c4:e0:a0:2f:d4:4c:1c:
05:c8:12:36:1f:28:bc:5d:33:ef:0b:55:73:91:3c:
65:f7:a4:9b:aa:b5:a1:5b:44:26:fd:6a:94:ed:48:
45:b6:f5:53:11:53:ca:32:dd:e6:91:f2:43:a5:72:
85:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:40:A0:51:52:05:4F:B3:90:7F:14:F1:FF:74:9D:7A:A4:E0:8B:54
X509v3 Authority Key Identifier:
keyid:54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0a:69:2f:a1:c8:91:ee:9a:00:f9:a6:26:64:41:95:2b:94:
49:5b:61:c3:f1:87:86:4e:c5:14:7f:3a:31:d1:43:1b:41:e3:
d5:4a:fa:9d:f4:56:8c:3a:25:da:4d:86:64:79:d4:f0:9a:e7:
85:73:c1:f4:81:4c:96:2d:6f:03:73:92:2f:04:de:8e:e3:25:
ca:79:4e:77:35:f1:6c:9b:f1:8b:d9:04:8c:82:a2:8a:7b:5a:
44:70:00:64:6b:f8:9c:cd:ab:3e:09:98:03:55:a7:0a:8d:3f:
3e:fd:2d:35:62:9f:3f:da:ac:5f:a1:e3:3c:2e:7f:7e:78:ba:
03:22:80:72:22:1a:15:17:46:a6:56:61:f4:c1:30:a4:9a:c4:
bc:df:2e:f6:f4:69:15:b8:e1:6f:54:b0:b9:56:f9:cb:f4:af:
c9:67:b4:9d:95:43:26:ba:52:2c:d5:70:be:10:b1:57:34:28:
95:2a:c7:ac:c4:bb:b1:1a:d0:4f:05:33:b8:eb:d2:85:a2:aa:
3f:ab:3f:ed:8f:61:48:1d:df:c0:a2:2f:dc:c0:ae:d2:b6:fd:
b6:b2:b2:9a:dc:07:da:8e:72:d4:ef:1a:76:c0:4b:0a:6b:30:
f3:83:30:b5:fa:5b:b2:5f:f1:9f:5c:4c:1b:bb:f4:82:ff:9e:
13:a8:71:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/m/z4sRr5FjYa4lmqjOmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTBmMDgxMWY5YzI1NjM3NDQ0OGFhMDE1ZDc3NjkyNzE4
MjFiZjMwHhcNMjYwMzAyMTAwMDU4WhcNMjYwMzAzMTAwMDU4WjAzMTEwLwYDVQQD
EyhlMjQwYTA1MTUyMDU0ZmIzOTA3ZjE0ZjFmZjc0OWQ3YWE0ZTA4YjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pEaklYdOZG9jqDdyS0wISq51T/I
PQttGL4TtYv+v+fPhuYz3X8HJD5ESWn+P7McFPsIAZGieVu2qU4ODOvXPeKqGfw/
memmmSa8ldLlJi37l53kTE2mmIoD174gIky6az0BoecN2D4TO8ig1QrI9PH9GU0/
zNepIe+syolh9BtEG671DIS0h4LM332uNhlz94J26LM2GgcJQyrtIPcrfqAor+Q7
XuktLtaMFgIKAScXzov8b8nhBuxZRvijMlq6BM2e4ABl03mZecTgoC/UTBwFyBI2
Hyi8XTPvC1VzkTxl96SbqrWhW0Qm/WqU7UhFtvVTEVPKMt3mkfJDpXKF9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJAoFFSBU+zkH8U8f90nXqk4ItUMB8GA1UdIwQY
MBaAFFSg8IEfnCVjdESKoBXXdpJxghvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmIt
MDI5NjRjNTBkMjEyLzEvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmItMDI5NjRjNTBkMjEy
LzEvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwppL6HI
ke6aAPmmJmRBlSuUSVthw/GHhk7FFH86MdFDG0Hj1Ur6nfRWjDol2k2GZHnU8Jrn
hXPB9IFMli1vA3OSLwTejuMlynlOdzXxbJvxi9kEjIKiintaRHAAZGv4nM2rPgmY
A1WnCo0/Pv0tNWKfP9qsX6HjPC5/fni6AyKAciIaFRdGplZh9MEwpJrEvN8u9vRp
Fbjhb1SwuVb5y/SvyWe0nZVDJrpSLNVwvhCxVzQolSrHrMS7sRrQTwUzuOvShaKq
P6s/7Y9hSB3fwKIv3MCu0rb9trKymtwH2o5y1O8adsBLCmsw84Mwtfpbsl/xn1xM
G7v0gv+eE6hxlw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:33 2026 by rpki-client