Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier: D7jJaicRS8o54THAybVCIhEiswS7odrF252kLJ+B2+4=
Subject key identifier: A0:5E:B1:36:37:AB:51:7E:D9:EF:C5:EF:89:40:89:08:B1:42:E5:DF
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 01A1A29328A753044E8253BBC91F30A0937C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number: 14AD
Signing time: Tue 03 Nov 2026 18:01:55 +0000
Manifest this update: Tue 03 Nov 2026 18:01:55 +0000
Manifest next update: Wed 04 Nov 2026 18:01:55 +0000
Files and hashes: 1: R1X-0N_qCuCvnv8CkB9Z_OSw2o4.roa (hash: D3kS568Iv2wmPNkEcgVaGHK64PzLTmFGbe9n3gWj/eM=)
2: YqVzzltVIPdeaSwCpyQY30xpr1w.asa (hash: WikOOkK+XwRTMCM7gYW5rQHy5y4vCTIDLGljHlXKP5E=)
3: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: jHhXkW+5BMxvvKxbL0cF2w2omNGjg9KA+oIdkhjZKGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 16:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:93:28:a7:53:04:4e:82:53:bb:c9:1f:30:a0:93:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: Nov 3 18:01:55 2026 GMT
Not After : Nov 4 18:01:55 2026 GMT
Subject: CN=a05eb13637ab517ed9efc5ef89408908b142e5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:c8:fa:46:d1:64:80:55:b6:1e:c0:d5:29:
2e:89:91:7b:5e:0c:d6:1b:2d:07:24:55:40:17:10:
c7:e2:c6:3c:36:28:53:90:0d:e1:49:34:c0:27:2a:
f2:89:ab:9a:20:46:ed:63:a6:82:b3:36:b6:af:d1:
9f:5a:94:cf:1d:90:c6:18:1a:e0:fc:5f:0c:ba:4a:
1c:2d:ca:60:8a:19:50:76:44:e7:55:65:4b:3a:aa:
4c:70:c5:84:60:54:99:05:61:e2:06:d2:70:c5:a5:
a9:6a:0a:4e:73:05:a2:53:9b:e6:7b:6c:33:da:ff:
32:c3:35:99:3f:ee:06:be:e8:ae:33:45:44:7b:ef:
a5:50:60:05:0f:77:41:43:c0:26:4f:77:e8:c5:f8:
9a:73:c2:a0:fc:ab:9c:cb:ba:bd:d0:b0:ff:4b:da:
44:8c:99:20:bc:e3:7c:e5:65:6b:62:ac:d3:6a:b8:
2a:29:dc:22:67:8f:9b:2a:af:17:20:9c:6a:ff:ca:
eb:bb:64:cd:73:49:68:c5:38:2a:41:8d:ea:11:41:
5b:13:93:46:8b:fd:6f:56:96:48:1f:7b:8c:ef:92:
8d:3e:e5:89:96:4d:8f:83:61:35:45:58:6d:d6:77:
db:cb:04:15:d1:32:75:d7:73:c9:26:52:37:9e:f6:
59:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5E:B1:36:37:AB:51:7E:D9:EF:C5:EF:89:40:89:08:B1:42:E5:DF
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f2:f7:6b:b3:5e:9a:97:e5:a5:d3:f7:61:94:0e:54:33:48:
44:b9:90:92:92:1a:54:b4:75:cd:2d:e0:6b:05:23:55:5e:75:
22:e6:98:08:38:09:5f:5e:54:64:01:1b:c9:a5:f9:87:6c:1b:
ae:df:92:e7:45:11:c9:b3:7a:25:ea:18:d0:11:3c:5e:af:37:
42:cf:a7:5a:59:52:ca:61:b2:88:12:ff:0b:bc:10:c8:74:f0:
85:c9:85:ab:78:7f:b1:97:4a:ec:e4:8d:61:b2:72:17:98:d6:
e7:af:3b:0f:d8:5b:9e:b0:16:8d:13:b6:50:d0:75:83:a7:64:
c7:3f:bb:a1:ed:c0:3c:d7:ac:57:02:71:d2:01:dd:c7:0f:2a:
b6:90:54:28:58:ec:82:ab:2e:2a:07:1c:7d:b8:ec:7e:be:b5:
21:03:42:ea:12:22:62:de:87:d1:31:55:b9:96:5d:89:4c:46:
ce:b2:7b:de:58:9e:2e:d3:fc:a4:61:e6:13:53:48:57:71:22:
44:ea:5e:5a:3f:2c:27:d9:89:7b:c6:15:a8:2d:65:7c:7c:fa:
e6:97:a7:a2:d3:0f:7f:43:da:91:07:70:58:d1:37:fc:c8:d6:
3d:c6:a1:69:8e:52:97:c3:63:d6:f5:2a:a0:08:12:be:26:98:
26:13:74:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 02:46:47 2026 by rpki-client