Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: ysiJbtdzT4fWLXzd6JiNVoSO+xLC/srQ7B39ssPp0es=
Subject key identifier: B4:73:05:4D:F7:EC:2C:CB:40:D3:E4:12:EF:AD:14:31:CC:C6:63:6A
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 01A0208BD2104A83378B9F2A0027CACB4AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 166D
Signing time: Thu 20 Aug 2026 19:00:29 +0000
Manifest this update: Thu 20 Aug 2026 19:00:29 +0000
Manifest next update: Fri 21 Aug 2026 19:00:29 +0000
Files and hashes: 1: BngoaXPmBES0lcWptUUTkZigcEg.roa (hash: Qe0QVZ+QGm2n+wH6gehbJlOWTxMGZjX9oLD1ObVldNI=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: 84/K4nfr9OnanQofnfTeSrtsoHgNfTHMryxsh9L0pd4=)
3: xcw2R2YD0BpUNlrolf3aKOVApLA.roa (hash: 2wiyEKSnDgQYW+1aN/U9IvVMDBKDQ1GzIsfrU/OlUSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:8b:d2:10:4a:83:37:8b:9f:2a:00:27:ca:cb:4a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Aug 20 19:00:29 2026 GMT
Not After : Aug 21 19:00:29 2026 GMT
Subject: CN=b473054df7ec2ccb40d3e412efad1431ccc6636a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:f4:c3:a9:c0:8a:12:0c:8f:3f:b7:e6:39:
62:31:77:9e:56:f6:e0:7b:92:70:c1:4a:53:09:84:
dc:c0:04:16:99:d5:d0:09:4f:ed:9f:71:76:7b:33:
93:9f:2b:5c:66:d9:f4:67:08:1e:19:a3:31:b4:63:
01:ed:67:b8:36:b6:da:98:ef:3d:18:e7:a1:25:b9:
ca:ec:85:54:cd:7c:77:4e:e1:ff:a9:90:32:d4:4f:
87:3b:66:0f:d7:d9:d5:7d:41:57:9d:c1:c5:46:54:
da:4f:27:76:d3:40:c8:bf:81:aa:d5:cc:97:c9:43:
27:61:01:96:3a:d5:71:4d:15:6d:ae:99:75:96:fd:
7f:6b:39:41:3f:ec:d5:4c:fb:06:43:5f:00:eb:e7:
39:83:a9:ff:59:c0:92:af:4c:2d:e1:ac:f8:0c:30:
43:0f:ce:60:68:50:36:c1:66:83:13:1a:f7:c4:0c:
7e:8f:d6:62:b8:a8:a1:a0:bf:43:a0:3f:d0:91:70:
6e:2a:3b:49:63:13:32:f9:f8:6a:32:3f:75:d8:aa:
a2:42:ff:7e:bf:79:80:4e:82:7a:9a:2f:44:57:e5:
3a:b5:e2:07:50:58:39:a7:09:ea:dc:13:79:c2:90:
aa:8f:1a:4e:88:e0:c8:b5:66:9e:12:87:6d:10:65:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:73:05:4D:F7:EC:2C:CB:40:D3:E4:12:EF:AD:14:31:CC:C6:63:6A
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a2:e4:e5:20:8d:62:ef:2b:c6:15:d3:88:3f:27:7f:6c:b6:
00:d9:3c:ab:91:28:98:da:1a:a7:29:2b:dc:56:9c:16:ce:5d:
32:8f:b4:f4:64:d8:3f:ce:92:6e:70:11:7b:c7:a3:8e:81:87:
72:a1:5b:42:46:a8:be:bc:1d:05:34:79:71:49:cf:51:26:ec:
07:01:a2:77:8d:97:aa:5d:0f:85:a1:ae:3b:78:0d:b1:27:e4:
8b:0f:bf:3e:79:d2:cf:c6:41:5e:a7:b3:aa:88:5a:7e:0e:ba:
b7:e1:89:70:a7:a1:a2:ec:d8:e7:0c:8b:41:d8:54:2f:91:61:
ce:c0:a0:ac:3e:66:eb:10:a8:9d:cb:16:08:33:3b:61:6e:ed:
e6:8a:85:d9:c7:eb:ba:aa:d5:ec:4b:8d:27:db:73:4f:e3:3b:
f9:2f:cf:27:a4:32:1e:17:68:64:c0:2c:b3:50:ac:20:32:f5:
de:6c:72:53:17:e1:00:3f:78:82:d9:e6:4b:43:3e:86:1b:ef:
c4:5f:22:f9:07:32:97:7d:61:ce:e8:25:f3:7b:67:c0:9b:86:
7e:27:d5:56:ab:43:a2:5d:90:8e:38:d7:2e:1d:8d:37:38:f5:
b5:d7:38:a5:96:64:c5:21:a7:cc:99:7e:8d:03:76:cf:6d:1d:
82:6b:6e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:32:18 2026 by rpki-client