Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft
File: VKDwgR-cJWN0RIqgFdd2knGCG_M.mft (raw, json)
Hash identifier: ZCmUpSYE3SwDE1/aAe12rsvm4FcV+F7FE36gB0r0oGo=
Subject key identifier: 83:1B:37:83:48:48:BC:B4:95:67:0C:05:72:67:73:C6:87:F8:2B:39
Authority key identifier: 54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3
Certificate issuer: /CN=54a0f0811f9c256374448aa015d7769271821bf3
Certificate serial: 019FA975C41D13296EBBECEE1C070491D233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft
Manifest number: 0289
Signing time: Tue 28 Jul 2026 16:01:34 +0000
Manifest this update: Tue 28 Jul 2026 16:01:34 +0000
Manifest next update: Wed 29 Jul 2026 16:01:34 +0000
Files and hashes: 1: Be8ZE-3fUDOUREKbRltRl9iw1eI.roa (hash: ts/tUG1XY8HQ9PPvnRSU96o95po47vRKYvpi0JSwMOQ=)
2: KdG-p7QNBBZf80fxoRYsw8Qdqqg.roa (hash: STOpthi9fIqQrBgL0RFuYE1hPDU+DhmrIEE/sT35Alo=)
3: UZH0fpr1tyUVaCTBDnjkP57r0fg.roa (hash: asbZ5HvBqKNvkMzm24LOBMXDZ+s4an0DuYC6LDjlSWE=)
4: VKDwgR-cJWN0RIqgFdd2knGCG_M.crl (hash: ONoa+zsw0qpSqj/RCF4nBeYUXmdLXAObUeCe6NI1Gpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:c4:1d:13:29:6e:bb:ec:ee:1c:07:04:91:d2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a0f0811f9c256374448aa015d7769271821bf3
Validity
Not Before: Jul 28 16:01:34 2026 GMT
Not After : Jul 29 16:01:34 2026 GMT
Subject: CN=831b37834848bcb495670c05726773c687f82b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:84:8c:d7:50:33:1f:6a:c6:fb:d0:15:1d:10:
1e:96:0c:fc:86:6b:b9:7a:eb:d0:f8:c7:10:0e:2b:
80:b1:0a:c6:46:85:6b:ba:76:8f:f7:26:5e:2a:5a:
e7:9b:2d:56:1b:41:13:0d:1f:9d:d2:d7:02:ae:72:
c5:12:ab:91:59:69:a3:3a:73:d7:b4:b8:46:ce:75:
5d:d4:0f:2f:1c:7c:d4:70:4a:59:6a:4c:7b:96:e9:
71:e2:66:8c:b7:a3:0f:9d:52:bb:e4:1c:38:39:6a:
4c:e7:5a:ba:5a:04:99:42:53:c0:a5:3f:98:6e:42:
72:57:e9:f5:e1:92:0c:75:17:8f:80:b0:55:3e:a7:
5d:2c:0b:f6:ca:d6:f8:e0:fc:21:9b:f5:72:c0:6e:
f4:0d:99:c5:75:05:4c:c4:25:d9:50:36:d1:03:a9:
c5:b1:95:5e:3c:37:fd:fc:f8:7f:5b:56:1b:64:78:
2e:65:05:79:82:08:4a:12:dd:d6:4d:cf:15:34:72:
03:80:4c:16:9d:3a:43:f5:6d:dd:bf:5f:46:35:ed:
5d:2d:67:63:da:ee:3a:6c:9d:c5:49:7d:68:9a:cb:
cf:5d:73:9e:8d:7a:a6:87:06:07:e0:92:ab:95:af:
b7:21:52:a5:1f:a7:20:aa:12:af:46:c3:dc:b0:be:
57:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1B:37:83:48:48:BC:B4:95:67:0C:05:72:67:73:C6:87:F8:2B:39
X509v3 Authority Key Identifier:
keyid:54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8c:30:6a:40:81:70:f4:68:2e:32:4a:c3:8c:6d:7d:a8:54:
c3:fc:ce:ff:27:a3:1d:36:ed:cb:f1:84:e5:2a:43:8e:0f:1a:
0c:76:68:82:82:09:19:58:8a:18:90:97:21:9b:8f:0c:9e:86:
93:55:08:20:2c:ab:d7:31:4f:2d:54:66:f7:a1:69:ef:12:43:
ed:0e:2f:b5:38:4b:d5:55:fc:35:60:fc:06:07:bc:17:fa:d8:
1b:0d:6b:4f:c2:1f:c0:b1:61:f1:82:49:5d:25:01:d6:c3:3c:
38:f5:59:9a:52:1c:36:ec:77:c6:09:de:ef:8c:30:4e:be:9b:
48:96:f4:ed:0d:cc:1d:dc:4b:df:d6:85:0e:00:9c:ba:ec:55:
73:66:62:8a:d2:93:86:84:30:11:58:20:a4:ce:81:86:ec:f8:
1a:23:c4:00:a1:31:f1:1f:90:65:c4:c2:8e:b6:af:67:31:3a:
4d:08:17:bc:08:e4:5c:af:92:44:c0:c1:d7:31:a3:20:e8:8c:
6c:98:e9:21:b0:53:a9:12:b8:db:23:aa:23:18:49:0d:f1:c7:
bd:9e:62:38:39:a6:16:2b:ec:35:83:50:c4:bc:7b:14:76:42:
c0:a1:91:d1:e0:c7:8b:3e:ce:45:67:2c:34:d3:30:88:31:42:
f4:18:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:54:20 2026 by rpki-client