Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier: +RTGIXaIVMJ1buxnL7NllY1s612E8sV3k6bxrQfQMcQ=
Subject key identifier: A5:E6:2F:01:00:B9:35:7F:E5:C8:CC:B0:2F:A4:76:A5:25:94:E7:D8
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 019D37C0ABE6404F77F383065C8AFCF4AC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number: 1263
Signing time: Sun 29 Mar 2026 04:01:06 +0000
Manifest this update: Sun 29 Mar 2026 04:01:06 +0000
Manifest next update: Mon 30 Mar 2026 04:01:06 +0000
Files and hashes: 1: R1X-0N_qCuCvnv8CkB9Z_OSw2o4.roa (hash: D3kS568Iv2wmPNkEcgVaGHK64PzLTmFGbe9n3gWj/eM=)
2: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: cdJmgDDq8hs3cAkLKu/L0gBtFlBDjRBeS+FQGim1k9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ab:e6:40:4f:77:f3:83:06:5c:8a:fc:f4:ac:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: Mar 29 04:01:06 2026 GMT
Not After : Mar 30 04:01:06 2026 GMT
Subject: CN=a5e62f0100b9357fe5c8ccb02fa476a52594e7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:26:01:b8:3a:76:98:ee:e2:e5:03:b8:ca:
6f:34:6f:33:f4:45:1c:8c:4e:21:77:ca:99:15:c0:
08:8a:74:dc:b0:88:20:cf:bf:21:45:f1:5a:11:5a:
9e:8a:cd:c6:d8:de:68:95:3e:a4:6b:49:7c:7d:59:
97:e6:0c:4e:6a:a8:70:a2:89:b7:b0:0f:03:3f:02:
17:15:c9:79:a1:e6:5b:44:a6:98:28:6c:04:61:dc:
c2:98:ae:70:c1:f8:c1:bd:04:1a:0b:df:cc:10:98:
ff:95:42:a8:b3:0f:fe:61:53:4c:d2:08:95:ae:6f:
f8:9e:a3:89:be:73:23:d5:79:89:f1:6d:2c:ce:79:
10:ad:ee:da:97:ca:03:af:f9:a9:27:7f:63:3b:07:
a2:c6:25:f9:45:60:69:59:d2:af:9a:11:24:9f:1e:
f2:e6:64:82:f0:02:3d:0c:5f:d5:cd:2e:af:7d:83:
37:d8:8c:ab:36:5b:b4:aa:b5:cd:15:b9:8b:46:52:
43:c3:03:7a:be:4a:39:36:05:4f:c8:ee:8a:aa:bb:
fe:35:ec:9b:e2:dc:73:bd:46:50:85:56:42:81:79:
43:90:0a:de:13:4d:38:8d:de:d4:16:b7:3d:00:b9:
3b:fa:48:96:75:67:d2:15:f5:c5:ee:db:d8:4f:aa:
57:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E6:2F:01:00:B9:35:7F:E5:C8:CC:B0:2F:A4:76:A5:25:94:E7:D8
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:77:4a:eb:ee:33:67:ed:a7:e5:2b:88:5d:30:1d:b0:ad:36:
8c:bb:6e:c6:92:3c:88:c1:a9:0b:ea:44:25:d4:81:76:72:fd:
2c:2a:46:b9:77:16:e2:0b:de:2a:47:29:7e:92:b1:11:ab:f1:
a0:c3:0d:ae:13:8c:85:2a:81:b9:08:34:34:7e:c0:f3:87:6c:
3d:75:37:12:4c:f2:5f:05:64:06:35:0e:3c:a7:f7:dd:f9:9e:
18:39:18:f5:3e:40:52:c0:1f:44:8e:41:dc:f4:0f:15:ab:6c:
a4:e6:e0:b4:00:7e:fd:25:8d:ae:04:a7:4f:c5:c9:c0:f3:26:
c2:6c:59:7f:7f:12:12:1d:69:e9:17:99:85:01:76:67:79:7c:
a4:2b:f6:e0:3a:8a:b4:10:b9:3e:21:57:8e:56:7d:9d:f7:e9:
17:4c:72:04:ef:e1:db:86:b9:44:ac:f0:b8:7a:89:33:9c:6b:
52:d7:9d:ed:e3:45:80:77:2c:4f:05:0c:9d:31:7c:40:8f:c5:
3e:12:67:33:8c:2f:dd:f5:80:95:b7:80:48:ff:78:53:68:3a:
02:ef:15:cc:ef:e9:cf:94:db:1f:05:97:34:c9:91:f9:b5:f7:
0c:81:f1:97:cd:a5:e0:37:9e:25:41:0a:e1:23:5c:ba:8a:6a:
d7:24:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:28 2026 by rpki-client