Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: 4QvbfIdBG4c4mFKTQATMESOBOR7Wg/ZY3igNEG+LYK8=
Subject key identifier: AB:B5:0D:F5:7B:46:1B:C8:F7:F0:F9:D8:88:0B:52:4E:BE:F1:0B:3F
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 019DECA40184BDD859C86F0862A14A0D747B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 1549
Signing time: Sun 03 May 2026 07:01:04 +0000
Manifest this update: Sun 03 May 2026 07:01:04 +0000
Manifest next update: Mon 04 May 2026 07:01:04 +0000
Files and hashes: 1: BngoaXPmBES0lcWptUUTkZigcEg.roa (hash: Qe0QVZ+QGm2n+wH6gehbJlOWTxMGZjX9oLD1ObVldNI=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: 1jCpu9fg5vxpjtvTZOS/8D0k7GxMTY1ld2elv2ybCyc=)
3: xcw2R2YD0BpUNlrolf3aKOVApLA.roa (hash: 2wiyEKSnDgQYW+1aN/U9IvVMDBKDQ1GzIsfrU/OlUSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:a4:01:84:bd:d8:59:c8:6f:08:62:a1:4a:0d:74:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: May 3 07:01:04 2026 GMT
Not After : May 4 07:01:04 2026 GMT
Subject: CN=abb50df57b461bc8f7f0f9d8880b524ebef10b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:0a:fb:73:0d:d6:c3:50:82:45:74:e9:a3:
5c:f8:6d:c5:24:4f:23:c0:06:98:15:de:ee:8f:96:
53:d3:7d:2d:1b:c0:b8:db:86:1c:c6:23:ac:3c:3c:
c0:44:74:6f:3b:4e:f6:8d:88:4e:f9:6a:c6:a5:d3:
87:c2:aa:84:80:07:52:53:3b:ad:29:4e:aa:72:38:
f2:17:4a:b1:7a:51:99:80:cb:b0:43:3d:67:36:36:
ef:ce:b5:a8:45:4b:0e:1b:0c:70:c0:f6:7d:b9:e4:
f6:3f:34:83:50:2f:eb:60:16:23:8b:49:e6:cd:b3:
2f:3a:ba:d0:3a:15:3c:14:7c:8f:3c:5b:e5:db:f6:
65:ef:8e:20:3c:c2:6d:4e:0b:53:37:2f:b7:51:96:
23:12:63:af:c6:0c:64:82:75:e4:12:d9:6d:ca:4d:
01:b2:71:c9:68:18:28:84:9c:9f:fe:8e:25:91:e4:
91:0e:c3:bb:c9:30:9a:60:35:fb:47:f1:79:80:70:
dd:a2:bf:bf:5f:92:ee:c0:d4:1c:42:c3:c4:56:4e:
c5:c6:28:6f:33:b9:8f:3c:13:34:89:17:1d:2f:eb:
da:b1:95:a4:1d:3b:a4:59:87:22:13:f7:51:95:fb:
65:d0:b5:4d:ec:d6:9e:25:68:57:99:79:9d:c1:ac:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B5:0D:F5:7B:46:1B:C8:F7:F0:F9:D8:88:0B:52:4E:BE:F1:0B:3F
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:17:b4:5c:57:eb:7c:d6:f2:0b:a5:ac:84:ed:db:4c:70:37:
43:17:44:28:ef:7a:3f:c7:9d:1b:1a:2f:e6:3f:d5:90:e6:67:
ec:f0:eb:21:73:66:45:2f:7e:b2:2d:40:bb:8c:90:68:6e:4a:
b4:9d:7d:b7:c8:26:64:d7:24:ba:cf:14:b5:aa:f4:85:0a:be:
f7:c5:5f:a4:da:e1:e3:90:e5:80:59:69:de:a4:23:c3:c0:7f:
bb:2d:04:2e:c6:d3:b6:8d:d6:2d:a3:0b:e3:c9:24:a4:b5:37:
52:90:bc:5a:7e:15:aa:7e:94:d7:a8:e8:c2:b6:a0:d3:4e:d1:
a9:dd:ba:d3:39:fd:d8:0c:f0:de:b7:1b:f2:d5:b5:f0:17:37:
70:4a:6e:54:86:c6:12:61:97:9d:24:54:ea:e0:26:bf:07:ce:
8d:2a:e3:e2:4a:df:f8:5b:99:40:29:8f:7e:3a:36:07:98:57:
d2:03:b5:1a:f9:cc:bd:39:9b:ec:f4:ca:75:95:ad:2d:a3:6f:
b5:ac:5e:3c:7a:cf:a9:bd:a8:71:09:f1:d1:8e:f7:8c:5c:a4:
89:6a:28:63:a2:ff:c8:2f:9a:9d:18:ea:bb:03:5a:60:cc:13:
4a:ea:ed:61:5e:bc:ea:f7:84:4e:a1:5f:2b:31:57:47:82:f4:
87:48:67:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:06:44 2026 by rpki-client