Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier: uEiEXoPH6iDiaz4p+88AFWKJRomq9eJNRjr+MyZUU0c=
Subject key identifier: 4E:74:64:CB:B9:93:53:C1:85:95:E3:23:1F:8B:D6:FA:76:4D:DF:D6
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 019D9850502FDD0BF9FEDF6ED4BCC1B9A186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number: 168F
Signing time: Thu 16 Apr 2026 22:01:33 +0000
Manifest this update: Thu 16 Apr 2026 22:01:33 +0000
Manifest next update: Fri 17 Apr 2026 22:01:33 +0000
Files and hashes: 1: 0RRbgUYbY47EzL3vocqK6zrfYdk.roa (hash: IF6XV0R5dhbBLV5xLicL36fWPzjrJS+64OX5boNdTPo=)
2: FxlVSI3Pzk5LMHhEN368eliO1Zk.roa (hash: gF++G6xQjDJflZ/Ja5HPf6B0qWFfzOW2mYFsfoVk7H8=)
3: tPyBEO-2bgQWRhIbSkeHYfcbCJ4.roa (hash: 7oVVhFstrQvcK+boD9No6AXtqD2sR6u8SatBlTCoiFg=)
4: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: 1fL1+ky89XUTuvfHMpFze4S8J4OkrvWYGVZuNlr+Y0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:50:2f:dd:0b:f9:fe:df:6e:d4:bc:c1:b9:a1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Apr 16 22:01:33 2026 GMT
Not After : Apr 17 22:01:33 2026 GMT
Subject: CN=4e7464cbb99353c18595e3231f8bd6fa764ddfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:7b:a1:2d:d5:97:91:f2:f0:54:fe:24:46:
f9:12:e4:1b:5b:5e:4a:5a:e1:9e:8b:19:41:e0:2e:
a6:1c:4a:66:67:96:a7:e1:48:01:89:4b:5d:a8:15:
31:59:a0:59:19:60:d9:c7:cf:f3:06:4c:3c:4b:0b:
d6:e1:db:7d:ce:f0:95:3a:de:b1:5a:be:13:43:c4:
6f:99:65:95:2b:63:ae:2f:44:b0:3a:09:4a:24:f6:
77:21:ac:3e:a3:c5:5a:cf:77:4a:45:a6:87:cb:bf:
94:39:0b:cb:67:f3:d8:f4:89:ae:d3:7e:14:bd:54:
37:0e:0d:e2:60:4e:9a:65:e8:d0:3c:c1:af:2b:c0:
2e:44:72:32:e0:52:92:2d:92:fb:e4:d8:13:9e:98:
be:e7:24:b2:df:e0:ae:0f:b4:a5:4d:95:ee:9f:a8:
92:25:9b:d2:2d:f1:b9:c7:aa:93:5c:b9:6e:10:a9:
3f:e6:1b:6c:dd:e7:d6:4d:e8:57:3d:5e:7a:ee:bf:
35:63:69:27:66:78:16:8d:3c:ab:b1:0c:7c:4d:2b:
84:cc:63:0b:79:fc:4d:7a:f8:79:25:bb:f7:07:94:
42:5a:ba:bf:d8:5d:c1:d8:93:a2:9b:5e:cb:2a:ae:
56:7f:c5:51:91:da:1b:f6:67:04:0f:29:61:e8:bf:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:74:64:CB:B9:93:53:C1:85:95:E3:23:1F:8B:D6:FA:76:4D:DF:D6
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:dc:a9:bb:a4:31:43:a9:97:ba:6d:4e:3c:36:11:5d:c9:2f:
e7:07:ec:bf:05:6a:ae:28:34:5b:5d:d9:e3:1b:f6:53:ea:6b:
c4:04:8e:1b:96:f3:ff:c2:ad:97:41:bc:49:fe:64:38:5f:2f:
8c:52:c0:7b:eb:1e:ad:28:f4:62:29:ab:a4:b0:de:51:fe:59:
91:99:5b:a9:3c:f2:08:28:ba:e5:e4:a5:0a:5c:58:d5:c1:7d:
c2:22:58:28:6f:bc:8b:85:28:b2:f4:16:85:61:ea:59:65:a6:
f0:5c:e6:cf:78:a2:99:7f:f1:a6:ca:28:27:91:47:64:c4:a6:
d4:88:e6:ed:f3:35:4a:91:ae:d5:58:85:58:0b:31:d5:cd:d6:
df:a6:bc:4d:44:de:4e:c0:51:27:48:3c:8b:85:a2:c8:f3:d5:
65:d4:24:6f:0b:00:59:31:26:b4:72:0f:a0:ce:67:ea:88:b3:
68:fb:2f:3c:38:b5:a8:de:1f:69:7d:70:69:2a:57:2c:73:b7:
e0:57:eb:4a:71:2d:97:c4:da:65:0f:e0:da:0f:5a:89:4c:42:
40:f0:4a:55:13:ee:7d:cb:db:32:f2:97:a7:dd:80:ed:11:28:
39:0b:9b:0a:54:dc:09:99:88:07:1c:ff:92:57:4e:7b:84:98:
c5:8c:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:03:03 2026 by rpki-client