Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: TqS/0rLzpTqyvsz4NainQqdlS5mF+HACRv0JQmper7s=
Subject key identifier: 8F:CB:F8:E0:9A:59:C7:C3:AE:1D:07:81:BD:49:63:1D:A3:61:86:89
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 019D04E54EECD447AC1861B424DF8BFF8840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 14D1
Signing time: Thu 19 Mar 2026 07:00:29 +0000
Manifest this update: Thu 19 Mar 2026 07:00:29 +0000
Manifest next update: Fri 20 Mar 2026 07:00:29 +0000
Files and hashes: 1: BngoaXPmBES0lcWptUUTkZigcEg.roa (hash: Qe0QVZ+QGm2n+wH6gehbJlOWTxMGZjX9oLD1ObVldNI=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: a6Rq6XWY14fncXmZLm+gs6EAN0sa8kK59YtsvT8cv1I=)
3: xcw2R2YD0BpUNlrolf3aKOVApLA.roa (hash: 2wiyEKSnDgQYW+1aN/U9IvVMDBKDQ1GzIsfrU/OlUSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:e5:4e:ec:d4:47:ac:18:61:b4:24:df:8b:ff:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Mar 19 07:00:29 2026 GMT
Not After : Mar 20 07:00:29 2026 GMT
Subject: CN=8fcbf8e09a59c7c3ae1d0781bd49631da3618689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e5:90:4b:4c:53:03:44:50:2a:3a:c1:10:8a:
30:ff:40:25:2a:f4:06:bf:5f:7c:89:55:40:84:62:
4f:1b:90:c8:5d:3e:c9:60:11:1e:9f:2a:a7:9b:ab:
00:f0:98:d0:be:7f:99:44:39:74:c0:bb:51:41:99:
33:72:34:78:f5:e3:fa:66:ef:db:40:da:45:6d:f6:
89:9a:72:dd:4a:f4:40:15:83:58:c3:1e:5a:19:c0:
67:aa:6e:ca:8c:81:b8:11:49:47:36:fb:8e:72:7e:
ec:0e:32:b6:c6:2c:01:be:39:58:ac:27:cb:0a:f4:
ef:dc:78:70:77:35:5a:f3:a7:1e:a4:a5:24:10:11:
4e:ef:0c:7c:61:80:43:a0:96:55:0f:a8:5e:99:bb:
cf:8b:ec:dc:c3:31:8b:70:85:02:ef:9b:3e:6a:d1:
0b:08:93:b9:c3:bf:39:1f:2a:38:a6:5b:8f:b1:15:
8a:40:be:66:15:0f:db:c0:1b:d6:96:7f:0f:ba:36:
54:e2:3d:08:7a:4d:f1:7b:f5:8e:d2:93:17:8d:99:
c5:07:95:89:9c:2c:d6:bb:f3:d9:ea:43:65:ab:28:
b5:2a:96:0a:1d:42:95:8e:10:ee:96:a4:60:a0:c6:
07:0b:7b:9a:8e:50:e4:a2:45:a3:28:68:65:a1:58:
e3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CB:F8:E0:9A:59:C7:C3:AE:1D:07:81:BD:49:63:1D:A3:61:86:89
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:40:bd:b6:d0:d2:07:6f:02:d1:29:66:f4:bd:fb:19:62:12:
6d:40:f7:d5:69:9f:ee:9c:52:71:48:53:7f:eb:61:1b:c5:47:
be:e2:7d:d7:83:6c:99:9a:38:93:11:81:48:5d:a4:bb:d1:42:
16:d9:3e:a3:b9:7d:1e:0d:4e:a4:09:cb:e9:21:69:0e:e1:44:
67:aa:f6:ad:de:26:ff:4e:2e:c4:ba:10:b9:1d:17:b7:68:4f:
2d:be:7b:73:19:1d:61:61:92:50:2f:eb:f9:e5:a9:20:99:a0:
ee:df:11:bb:bb:c1:63:ad:7e:1d:8b:7d:d9:3d:bb:5c:68:12:
28:22:72:92:0c:4d:a4:ef:21:6e:a3:a3:64:cd:32:f2:90:36:
a4:ac:de:de:f2:e5:99:ed:9d:74:3f:78:d2:d5:4b:a2:f9:38:
71:4e:9c:4d:ff:6f:05:e4:91:b7:fa:a3:ad:ca:33:a2:12:3c:
56:bc:dc:6c:bd:0a:ac:3e:40:b2:bc:2c:40:fe:f6:df:bb:a5:
c5:cb:94:9c:e8:82:e6:80:27:e0:8c:c3:fd:0c:e4:b2:1a:66:
dc:1c:15:03:0d:f0:5d:5c:18:ce:ea:b9:a2:0c:1f:57:e1:36:
f4:e4:64:c2:46:79:e7:11:1d:d1:ea:91:a1:97:06:60:56:ee:
c9:4b:33:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:00:49 2026 by rpki-client