Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
File: vkjMNUiL2ebzErIPx2oQJy8M3to.mft (raw, json)
Hash identifier: 8Evr4M0BF26Lur2mmSiSxd+BeRTBqX9MNRKnS1D8X4M=
Subject key identifier: 8D:FD:3A:F4:C0:4F:D5:BF:DA:92:64:E1:EC:14:32:CA:D0:31:0D:ED
Authority key identifier: BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
Certificate issuer: /CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Certificate serial: 019CAD59D871702E4F7696649B894633C699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 07:01:12 +0000
Manifest this update: Mon 02 Mar 2026 07:01:12 +0000
Manifest next update: Tue 03 Mar 2026 07:01:12 +0000
Files and hashes: 1: 1-jVMWvCo1Ia8-NPvjqSraY5h6j8.roa (hash: UbgB51BsUdBtKMnN7GLkK8Ly1Wmd/yhJ431EUB3j0ds=)
2: vkjMNUiL2ebzErIPx2oQJy8M3to.crl (hash: 9BwQ9rDfWcbqJkx0wb2Fhmchr1xkqEQSbOStS8sZShs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:d8:71:70:2e:4f:76:96:64:9b:89:46:33:c6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Validity
Not Before: Mar 2 07:01:12 2026 GMT
Not After : Mar 3 07:01:12 2026 GMT
Subject: CN=8dfd3af4c04fd5bfda9264e1ec1432cad0310ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:a2:64:8b:70:ec:97:3f:0d:40:ad:e5:ea:
7b:fd:84:f6:de:5a:bb:7d:31:a3:1e:74:29:f4:93:
35:ab:1d:50:31:0f:e9:72:f4:38:f0:34:95:ec:6e:
cd:c7:8d:2d:55:9a:1a:de:86:82:6d:9f:52:33:f4:
34:0b:73:ed:61:39:fe:e9:64:cb:b0:d0:c3:a7:cf:
9f:3e:09:47:f0:77:65:3d:f4:0c:d9:70:7f:4d:0e:
24:ec:89:bc:aa:7c:03:c1:bc:77:70:c7:85:8f:c2:
cb:67:f8:d6:22:26:1d:d8:cc:60:08:a2:88:50:bf:
4f:a9:32:e3:84:78:72:04:5a:cc:17:47:ce:20:31:
70:29:33:ee:c2:ea:2f:bb:b8:c0:28:1e:62:21:47:
46:00:36:d3:62:89:ea:65:8d:96:eb:b4:d8:5d:6e:
d8:da:06:c2:0a:b2:27:b6:1c:cd:15:9f:89:61:da:
3b:c2:34:f2:90:02:96:0e:83:4f:04:6e:1f:cc:1d:
ad:6e:ca:59:97:e8:3d:af:e5:c9:d7:87:38:92:d5:
a5:9a:ca:f3:b1:d9:fd:f9:9c:93:a6:d3:b4:88:a8:
a0:bd:eb:f7:7d:8c:86:5b:d7:9f:90:d5:be:72:3c:
16:f7:a4:90:81:9b:d8:a9:36:06:ae:6e:33:0e:db:
16:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FD:3A:F4:C0:4F:D5:BF:DA:92:64:E1:EC:14:32:CA:D0:31:0D:ED
X509v3 Authority Key Identifier:
keyid:BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cf:e7:02:fd:5f:64:0e:e1:0d:c7:36:87:09:01:6c:c1:32:
95:69:30:af:0d:24:6d:6e:90:02:db:c0:88:c3:44:7d:cd:8c:
9f:bf:f7:24:b2:95:94:7e:d5:18:49:a7:ee:4f:75:8b:12:ef:
e5:f7:e8:ab:d8:94:56:5f:32:65:16:9c:1c:b5:a8:5f:e2:79:
71:a7:94:04:8e:fb:e7:2d:7e:69:89:52:bb:43:0e:8b:86:87:
61:40:e3:74:70:b4:c2:be:48:a0:5c:ae:e1:0a:07:8f:cd:f0:
93:40:70:23:06:c1:78:51:cc:57:86:0c:ee:76:4d:f9:bc:cc:
87:9e:ea:49:38:2f:e4:bf:68:33:83:ae:f8:4b:08:00:4f:a0:
5f:b4:3b:dd:aa:5d:2e:f9:c5:b8:49:61:a2:78:e8:9e:6a:88:
e7:3f:70:fb:f3:68:82:5d:92:df:1c:51:da:09:36:d8:aa:e2:
32:62:04:3e:b2:48:7a:64:a6:06:4f:9a:b4:82:09:13:d8:73:
c1:9b:32:61:49:b9:92:e3:5d:21:4c:2d:38:37:88:71:56:12:
46:18:d0:26:03:a5:ac:78:99:f2:cb:73:41:e2:87:43:e9:2b:
45:44:e2:a0:84:f7:12:18:6c:dd:ee:5f:ce:9a:35:00:1c:d4:
e2:21:30:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:26 2026 by rpki-client