Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier: OSFgsDIYIGTCLZFTcqDEbRgoTiaNBQBRu/v0Ze+5NSs=
Subject key identifier: B6:34:47:6C:62:A6:AC:B5:1D:2A:22:56:39:96:67:F3:60:30:D7:E0
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 01A0E32B48F0F10862FB0FDF3DF8D44A41FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number: 1844
Signing time: Sun 27 Sep 2026 14:00:59 +0000
Manifest this update: Sun 27 Sep 2026 14:00:59 +0000
Manifest next update: Mon 28 Sep 2026 14:00:59 +0000
Files and hashes: 1: FxlVSI3Pzk5LMHhEN368eliO1Zk.roa (hash: gF++G6xQjDJflZ/Ja5HPf6B0qWFfzOW2mYFsfoVk7H8=)
2: tPyBEO-2bgQWRhIbSkeHYfcbCJ4.roa (hash: 7oVVhFstrQvcK+boD9No6AXtqD2sR6u8SatBlTCoiFg=)
3: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: 3Z9U0C6T8B9BhJjEJKqsb+Gt1JC064z/TpG/6anie5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:48:f0:f1:08:62:fb:0f:df:3d:f8:d4:4a:41:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Sep 27 14:00:59 2026 GMT
Not After : Sep 28 14:00:59 2026 GMT
Subject: CN=b634476c62a6acb51d2a2256399667f36030d7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:e2:9e:c5:f2:40:dc:99:8c:10:60:e2:fa:
32:ad:b1:52:76:92:9a:7b:af:52:f2:af:57:09:9e:
cd:9a:ae:8e:41:2f:0f:21:cb:d7:6e:48:bb:47:95:
bd:18:f5:be:22:c8:5b:2a:72:d8:cf:9f:28:7f:6e:
31:5b:e5:f5:6c:87:a5:64:ec:cb:74:8c:3b:4a:84:
c3:66:1d:90:5b:67:21:05:f1:d5:9b:06:e5:ab:d9:
d5:6d:a5:4e:64:15:1c:a1:9e:fb:c4:1c:99:22:7b:
c7:75:a5:5b:49:7c:91:1d:21:32:14:1f:36:cb:ef:
2d:59:b2:08:3e:ec:37:47:b7:95:33:89:37:09:90:
c8:11:8d:51:0b:bf:6d:8d:bc:1c:50:a8:1b:d7:41:
ac:a6:06:5a:db:30:20:a2:68:ab:37:61:73:b8:db:
d6:1d:4f:77:2f:d2:a5:e5:ae:a4:d3:10:eb:ba:12:
77:84:2d:dd:65:43:64:20:45:98:3c:63:66:88:5c:
a2:b0:4f:d6:a1:71:a3:f5:eb:bd:f0:94:02:b7:b1:
03:76:ee:1a:f8:5e:30:de:ab:bf:cd:d5:6c:d6:fb:
43:3c:42:8d:21:13:6c:e3:35:7c:73:c0:49:98:3d:
40:f5:9f:98:f2:b8:ae:2c:03:2d:35:37:e8:05:60:
59:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:34:47:6C:62:A6:AC:B5:1D:2A:22:56:39:96:67:F3:60:30:D7:E0
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9d:79:04:c8:72:88:ff:dd:0a:4f:ce:1b:19:5c:eb:90:ae:
9f:f9:4c:f1:a0:1c:e5:db:c1:b2:b3:b1:e4:42:aa:74:a5:b2:
5e:86:89:9a:45:ff:1e:9b:2a:3f:44:4f:e5:fb:4a:a4:38:5c:
5a:79:07:14:8d:e2:cc:ee:d9:f8:92:4e:be:3e:dc:af:1c:34:
09:46:df:8f:72:5f:8f:fa:84:63:50:2b:45:5b:06:6a:da:76:
34:ab:a3:17:0f:2e:cf:76:57:fc:ce:15:ab:67:25:c9:47:d2:
46:e5:d1:85:d9:c3:11:83:a0:13:34:e9:49:a9:51:75:f6:bd:
57:5f:08:a1:6a:84:9f:81:09:76:ce:b4:24:9d:82:0d:9d:d3:
27:b4:5b:31:85:4f:c8:c4:0c:7f:84:d2:12:10:7a:28:e1:66:
5b:85:0e:3b:9d:87:b0:12:e1:30:c0:8f:71:d9:97:24:52:dc:
27:59:26:f4:0f:b1:19:cc:7b:7e:8a:dc:2b:78:ed:9d:34:9c:
24:06:37:77:76:dc:22:66:9a:35:be:38:a5:24:9e:c9:fc:fa:
3f:07:4c:1f:d5:c1:72:05:c5:10:f4:df:10:6c:4a:c3:ba:8b:
d5:9d:9c:5a:44:07:bf:9c:06:33:d3:3c:57:91:07:51:36:ca:
4a:cc:82:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:51:11 2026 by rpki-client