Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: d5zzWhgQndREvABr+hHV3uvUwr+ST+DUjMYv00Yv37A=
Subject key identifier: 0D:D5:31:13:4B:55:56:3F:B8:B8:45:61:93:1B:AC:2D:A7:E0:0B:B2
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 01A11003741197625CD7621271026D688584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 16E9
Signing time: Tue 06 Oct 2026 07:00:24 +0000
Manifest this update: Tue 06 Oct 2026 07:00:24 +0000
Manifest next update: Wed 07 Oct 2026 07:00:24 +0000
Files and hashes: 1: BngoaXPmBES0lcWptUUTkZigcEg.roa (hash: Qe0QVZ+QGm2n+wH6gehbJlOWTxMGZjX9oLD1ObVldNI=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: 7Mmy3blvIRnulQvbJDNr+Yz+SvSpbmYnGE6PKmH3VAk=)
3: xcw2R2YD0BpUNlrolf3aKOVApLA.roa (hash: 2wiyEKSnDgQYW+1aN/U9IvVMDBKDQ1GzIsfrU/OlUSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:03:74:11:97:62:5c:d7:62:12:71:02:6d:68:85:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Oct 6 07:00:24 2026 GMT
Not After : Oct 7 07:00:24 2026 GMT
Subject: CN=0dd531134b55563fb8b84561931bac2da7e00bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:40:fd:a8:63:8f:18:23:1e:be:96:cd:9a:
ae:56:59:b6:d0:44:f9:0b:a8:ec:a3:5f:99:bb:c8:
a7:f8:83:c2:10:0e:81:3a:8f:b3:42:70:ff:74:32:
4f:02:68:20:92:ba:73:8a:51:60:ee:7a:d1:59:3a:
a4:06:4f:66:53:bb:8a:de:96:f5:37:b8:fe:71:5e:
34:8c:45:f6:49:21:22:da:93:ed:ef:ee:ca:db:9b:
3a:91:4d:f3:a1:65:de:5f:eb:95:f1:d3:a9:38:cc:
3b:ff:bb:d9:50:51:e0:48:a2:67:41:f6:9f:6e:98:
1a:08:03:95:42:c4:a8:f2:79:bb:a3:c2:39:4b:d6:
14:10:f0:8f:0d:3b:74:9f:6b:38:0e:14:64:82:d6:
69:0d:5a:df:a2:26:a5:fe:b6:d8:be:40:5d:ca:71:
9b:bc:35:fb:72:05:b0:82:9e:8f:e3:c5:81:01:18:
a2:f4:b0:c0:ed:2b:04:e2:e7:48:96:5b:06:62:dd:
78:a7:c6:36:c3:31:9e:aa:19:92:32:37:00:e6:8a:
78:09:aa:22:e0:85:73:c1:7d:69:66:1c:50:dd:7d:
a9:ae:fc:96:8f:4a:82:33:68:4e:12:37:d7:e5:4f:
2a:b9:6f:f9:ba:85:5d:3a:a2:f1:5d:00:a6:8b:53:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D5:31:13:4B:55:56:3F:B8:B8:45:61:93:1B:AC:2D:A7:E0:0B:B2
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9a:2d:d8:a4:ff:2e:43:43:81:64:79:0d:cd:83:af:cc:42:
3a:f8:b0:3e:44:43:79:e8:5f:b5:7b:a5:21:d9:56:93:aa:02:
c6:e5:b2:af:37:82:6d:e9:f6:13:27:58:f2:21:03:bd:de:36:
ce:dd:24:48:d8:84:ad:94:40:e0:08:19:2a:14:ae:ac:c2:d3:
6a:de:bd:64:59:93:c8:0a:ef:2a:70:75:35:7c:7a:17:38:f3:
51:ec:5b:e4:e6:cb:32:f6:27:d1:aa:9e:ff:03:a4:e5:1d:d2:
98:e8:ec:09:e6:81:bc:ea:1f:10:8b:4a:6d:10:58:18:91:93:
3f:a5:bd:68:f4:d8:fc:ea:a2:8d:c5:a0:73:af:55:e6:0e:c9:
90:23:21:b5:33:58:86:da:23:6a:eb:fd:20:72:f7:33:9c:db:
19:c7:69:ce:a7:73:8c:5a:ab:55:e2:6b:98:02:d3:65:dc:ab:
89:ac:ee:b3:8c:c7:68:36:e1:34:74:05:b8:fd:7d:87:15:b4:
e7:20:f3:24:0f:66:b1:90:1e:e5:a9:98:12:60:cd:4f:15:c7:
d8:58:a7:4e:f8:91:72:74:9f:91:3e:bf:f6:39:47:76:d3:a0:
ed:c6:37:b7:3a:30:a0:84:7b:35:0f:9f:eb:74:ff:30:a3:b8:
1f:9c:97:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:14:48 2026 by rpki-client