Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier: kLAu/PX4JozU0v33i1Pl7+HzmFyQyXz4owIwqaZydig=
Subject key identifier: E0:21:87:45:B3:6F:B7:CC:E0:D2:2A:DE:F0:2F:D7:1A:24:82:B7:8B
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 019FAB6373094002998E012D7E36FFD280D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number: 17A2
Signing time: Wed 29 Jul 2026 01:00:49 +0000
Manifest this update: Wed 29 Jul 2026 01:00:49 +0000
Manifest next update: Thu 30 Jul 2026 01:00:49 +0000
Files and hashes: 1: 0RRbgUYbY47EzL3vocqK6zrfYdk.roa (hash: IF6XV0R5dhbBLV5xLicL36fWPzjrJS+64OX5boNdTPo=)
2: FxlVSI3Pzk5LMHhEN368eliO1Zk.roa (hash: gF++G6xQjDJflZ/Ja5HPf6B0qWFfzOW2mYFsfoVk7H8=)
3: tPyBEO-2bgQWRhIbSkeHYfcbCJ4.roa (hash: 7oVVhFstrQvcK+boD9No6AXtqD2sR6u8SatBlTCoiFg=)
4: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: ZtmJbi/30uqkwF1w+O6xdDTwP/dNahatRMlM8mM81R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:73:09:40:02:99:8e:01:2d:7e:36:ff:d2:80:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Jul 29 01:00:49 2026 GMT
Not After : Jul 30 01:00:49 2026 GMT
Subject: CN=e0218745b36fb7cce0d22adef02fd71a2482b78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:94:4c:e7:1e:74:fb:39:fd:8f:2a:ba:2c:
8b:ba:10:3a:53:71:78:dc:1f:e6:ea:3d:f4:3e:da:
ad:06:69:0f:b1:07:56:86:49:c8:6c:a1:25:ef:57:
68:9a:90:a3:e3:75:da:a9:6e:13:ab:fa:fe:d5:3b:
5b:31:69:14:87:b4:01:28:3b:6a:63:4c:7f:a6:98:
5d:24:11:ad:f4:67:bd:02:69:02:79:ac:cf:56:ca:
af:be:c8:01:2e:3a:a6:a9:3d:97:43:be:cb:5a:02:
64:94:d6:b1:4e:3b:df:30:12:d1:79:4a:6a:37:b1:
4c:7b:8a:b7:c4:0e:18:7e:88:47:97:8b:5e:7b:39:
f5:8a:78:e0:6f:fb:94:47:b8:80:58:a5:06:c0:e6:
16:2f:95:88:da:bc:75:15:3d:b3:5e:ad:eb:0a:3f:
a7:46:68:e0:8d:5d:d8:dd:28:71:75:91:41:a3:4c:
c2:e5:06:b1:22:ed:b4:5f:41:cd:5b:34:bf:ae:3e:
d4:9c:08:48:ef:c8:15:f9:db:e0:54:ca:04:eb:ae:
99:f4:3b:dc:f6:77:e2:3a:34:b5:d4:2f:40:d3:83:
90:85:67:fb:bc:b1:30:e1:86:ae:02:9d:22:84:d9:
e7:ca:41:c6:a1:79:67:14:52:78:23:ce:18:93:02:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:21:87:45:B3:6F:B7:CC:E0:D2:2A:DE:F0:2F:D7:1A:24:82:B7:8B
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8f:9f:10:12:ee:e8:f4:94:70:16:a6:78:88:ce:87:98:7e:
40:1d:45:98:44:6a:b0:88:7c:82:97:82:53:49:43:9c:04:4c:
c1:b1:e9:6e:1b:12:4b:4f:51:fb:80:d1:91:34:a0:5e:c5:52:
3b:0f:8b:62:59:95:5f:9e:f5:64:33:2d:7a:38:b2:e0:5f:46:
9d:5a:a7:6f:2e:4f:0b:39:9f:12:7d:81:02:97:3c:ef:c5:ab:
c4:a8:83:82:ae:5f:e4:fe:fb:4a:7e:21:3a:e0:9d:69:b3:e6:
15:3f:51:eb:62:51:54:b7:ed:ce:8a:8d:ad:17:2c:57:94:70:
72:94:f6:72:7a:fd:16:ee:88:39:82:1e:d8:d8:04:55:af:25:
46:07:64:b4:fc:99:7e:00:76:06:f2:30:e5:0c:a5:61:00:69:
5d:5f:72:9d:35:f0:86:6a:ca:e3:25:91:68:b4:90:82:33:f4:
09:8a:39:92:dc:b1:cd:71:32:13:5f:4f:4c:0b:1c:db:97:6e:
ea:02:e5:c6:8c:6f:71:ea:80:34:80:4b:c5:27:ec:e3:40:bc:
24:42:22:8d:60:65:b3:6f:0c:4f:fe:8a:7b:46:2a:f6:96:4b:
78:bf:81:4f:a0:fc:bc:8d:23:63:1c:5c:98:42:51:b6:e3:3b:
90:fc:16:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY3MJQAKZjgEtfjb/0oDXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDM5OTUyODliNmE1Y2E5NzJjNGI4N2I1ZTMxNDljMzJj
YjQ0MzAwHhcNMjYwNzI5MDEwMDQ5WhcNMjYwNzMwMDEwMDQ5WjAzMTEwLwYDVQQD
EyhlMDIxODc0NWIzNmZiN2NjZTBkMjJhZGVmMDJmZDcxYTI0ODJiNzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDKUTOcedPs5/Y8quiyLuhA6U3F4
3B/m6j30PtqtBmkPsQdWhknIbKEl71dompCj43XaqW4Tq/r+1TtbMWkUh7QBKDtq
Y0x/pphdJBGt9Ge9AmkCeazPVsqvvsgBLjqmqT2XQ77LWgJklNaxTjvfMBLReUpq
N7FMe4q3xA4YfohHl4teezn1injgb/uUR7iAWKUGwOYWL5WI2rx1FT2zXq3rCj+n
RmjgjV3Y3ShxdZFBo0zC5QaxIu20X0HNWzS/rj7UnAhI78gV+dvgVMoE666Z9Dvc
9nfiOjS11C9A04OQhWf7vLEw4YauAp0ihNnnykHGoXlnFFJ4I84YkwIrdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAhh0Wzb7fM4NIq3vAv1xokgreLMB8GA1UdIwQY
MBaAFL5DmVKJtqXKlyxLh7XjFJwyy0QwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTIt
MzA2MDQ1ZWZjZDY4LzEvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTItMzA2MDQ1ZWZjZDY4
LzEvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXI+fEBLu
6PSUcBameIjOh5h+QB1FmERqsIh8gpeCU0lDnARMwbHpbhsSS09R+4DRkTSgXsVS
Ow+LYlmVX571ZDMtejiy4F9GnVqnby5PCzmfEn2BApc878WrxKiDgq5f5P77Sn4h
OuCdabPmFT9R62JRVLftzoqNrRcsV5RwcpT2cnr9Fu6IOYIe2NgEVa8lRgdktPyZ
fgB2BvIw5QylYQBpXV9ynTXwhmrK4yWRaLSQgjP0CYo5ktyxzXEyE19PTAsc25du
6gLlxoxvceqANIBLxSfs40C8JEIijWBls28MT/6Ke0Yq9pZLeL+BT6D8vI0jYxxc
mEJRtuM7kPwWAQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:10:47 2026 by rpki-client