Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier: 7p0YN+Xy+YvtwwRvC1vHZOx7JGTsnmsARUsMvcG4n6Y=
Subject key identifier: 63:7B:08:A6:4A:9A:3C:1D:53:9C:42:62:94:5D:EA:25:51:C4:5A:8B
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 019CAAC695BD21B7356CBE988777F2EE35E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number: 1614
Signing time: Sun 01 Mar 2026 19:01:07 +0000
Manifest this update: Sun 01 Mar 2026 19:01:07 +0000
Manifest next update: Mon 02 Mar 2026 19:01:07 +0000
Files and hashes: 1: 0RRbgUYbY47EzL3vocqK6zrfYdk.roa (hash: IF6XV0R5dhbBLV5xLicL36fWPzjrJS+64OX5boNdTPo=)
2: FxlVSI3Pzk5LMHhEN368eliO1Zk.roa (hash: gF++G6xQjDJflZ/Ja5HPf6B0qWFfzOW2mYFsfoVk7H8=)
3: tPyBEO-2bgQWRhIbSkeHYfcbCJ4.roa (hash: 7oVVhFstrQvcK+boD9No6AXtqD2sR6u8SatBlTCoiFg=)
4: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: clpbSqSNC164+GOCMY9nFeMAC//KlMdAtB1EZK9LWXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:95:bd:21:b7:35:6c:be:98:87:77:f2:ee:35:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Mar 1 19:01:07 2026 GMT
Not After : Mar 2 19:01:07 2026 GMT
Subject: CN=637b08a64a9a3c1d539c4262945dea2551c45a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:44:9f:7c:67:59:04:a6:c3:2c:1d:73:05:
b4:0c:57:67:1c:74:4b:7f:ea:80:9a:de:7f:ed:91:
7e:cd:9d:ed:82:13:f4:33:e4:ad:4c:84:6e:be:2c:
83:06:fa:80:27:15:9c:69:0b:47:41:42:2d:24:ef:
18:4e:59:31:fe:e8:3d:a3:ff:f4:0f:c6:ed:60:e6:
bc:43:b1:23:3b:5e:ed:4d:44:9b:a7:c6:44:fb:5a:
8a:9b:f9:1a:d7:85:60:b4:52:62:86:34:11:88:05:
b3:31:68:30:99:e6:15:49:5b:34:69:bc:8c:a2:24:
04:61:0e:c9:5b:f6:e3:14:16:24:1b:9e:41:b1:3e:
a5:3d:36:17:02:ae:4a:cf:3d:4c:e2:93:f8:94:d7:
e2:77:44:f7:91:a9:27:5f:2e:d2:b2:49:30:66:da:
26:72:6f:bb:da:52:68:f2:88:d1:5e:f1:d5:37:c3:
7f:a2:a0:3c:d5:40:0a:3c:2a:73:9e:3a:e6:65:0c:
c9:48:79:85:d4:c9:ea:78:d7:67:9a:7e:9d:c2:1a:
72:10:fd:a4:c0:f1:51:63:14:ce:aa:84:d6:77:b0:
ef:24:6c:c3:fe:20:64:bb:1a:40:0f:d5:f6:68:24:
4e:5e:df:19:55:d2:0e:a5:18:dc:06:cc:61:5b:85:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7B:08:A6:4A:9A:3C:1D:53:9C:42:62:94:5D:EA:25:51:C4:5A:8B
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5a:7c:65:88:05:53:ad:f2:98:5c:47:e7:e8:14:ef:9d:0c:
7d:7b:53:5f:f1:58:b3:44:13:34:f8:fe:03:41:6a:f8:79:98:
b5:51:29:e2:0f:ff:d3:5e:fd:58:be:99:2d:22:6a:76:94:6c:
ce:8c:df:b2:e1:a8:e7:a1:c7:c2:eb:19:e4:97:fd:94:8b:5e:
f0:58:0b:97:0e:a3:d2:50:da:ff:4a:aa:bc:43:04:17:d9:02:
82:47:90:e1:fd:b5:2e:73:bd:06:c7:b3:67:f1:d5:e1:47:db:
9d:87:bd:e3:7d:2e:97:cb:79:b9:d6:a5:84:ae:d9:13:bc:dd:
87:57:56:41:13:f0:56:ff:cb:3a:17:f3:48:a3:4c:6a:c2:bb:
b1:19:cc:b8:90:34:be:f1:3d:bd:3f:5e:b3:53:0f:d5:ae:2c:
0a:eb:da:73:8f:05:7f:bf:6c:39:64:97:c2:56:0f:38:1f:cd:
04:cd:42:f0:26:5b:ff:99:ae:14:ef:cb:89:a3:96:71:21:f1:
3f:e6:18:30:b5:37:ef:ee:02:5b:dc:f2:54:b1:d2:9e:b5:b3:
1c:be:50:8c:a6:d3:4f:c7:e8:a0:98:1c:cc:bd:c2:d7:38:ad:
e4:4f:36:b7:4c:e8:6e:cb:e1:67:11:45:d4:bf:d6:d6:14:e9:
66:5e:86:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:35:36 2026 by rpki-client