Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier: JaHnzPAzS6dWAil3jmZSvnVQkC1IVAzfdKm2iXKgRrw=
Subject key identifier: ED:68:EA:DF:FC:9E:07:18:31:F4:C4:69:22:07:3E:50:CB:04:FF:66
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 01A1A66F7245AC02BA5A77B91591ECB0BC43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number: 14AF
Signing time: Wed 04 Nov 2026 12:01:23 +0000
Manifest this update: Wed 04 Nov 2026 12:01:23 +0000
Manifest next update: Thu 05 Nov 2026 12:01:23 +0000
Files and hashes: 1: R1X-0N_qCuCvnv8CkB9Z_OSw2o4.roa (hash: D3kS568Iv2wmPNkEcgVaGHK64PzLTmFGbe9n3gWj/eM=)
2: YqVzzltVIPdeaSwCpyQY30xpr1w.asa (hash: WikOOkK+XwRTMCM7gYW5rQHy5y4vCTIDLGljHlXKP5E=)
3: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: u+CvPRYqQJc6WVDq46WVvWO95C63FfEf3+jsPtbEwdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:6f:72:45:ac:02:ba:5a:77:b9:15:91:ec:b0:bc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: Nov 4 12:01:23 2026 GMT
Not After : Nov 5 12:01:23 2026 GMT
Subject: CN=ed68eadffc9e071831f4c46922073e50cb04ff66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7d:48:85:2b:09:0f:f0:5e:5b:96:6c:7d:30:
cb:19:94:3e:17:68:c0:50:f6:f3:b5:d7:39:ed:d8:
d2:21:22:da:ca:96:3a:4a:76:8c:3b:a1:c3:e2:3e:
c1:6a:df:e5:76:8b:8b:01:9a:7a:01:61:5e:01:8f:
a8:81:14:a0:b6:21:bd:f4:76:72:24:37:6a:11:30:
85:6d:24:00:85:db:c7:48:51:17:5d:c1:4c:a1:01:
ed:bc:6b:5e:ab:bc:ca:86:17:9d:1c:41:45:72:f0:
6e:c4:40:6a:ab:73:e1:75:30:47:16:b6:3f:11:d4:
3a:67:ef:7b:38:83:47:fb:82:2d:9b:04:34:cb:e8:
de:22:c9:81:cd:04:14:84:92:f3:35:ae:aa:01:3b:
ea:56:aa:fc:70:18:4c:a8:50:d5:25:3e:4e:cb:74:
f6:25:40:79:e2:f9:00:3b:81:ee:c5:ca:2c:8d:78:
fe:c7:7a:da:e0:7e:93:ac:e7:ed:ec:7e:91:b9:bd:
dd:db:fd:24:51:e3:0f:35:67:14:39:2b:f2:1c:e0:
81:61:ee:16:35:40:b0:4b:06:4d:d7:dc:5c:3d:b7:
48:f6:87:1a:12:ad:8f:bd:78:02:f7:3e:5f:77:28:
0c:b3:88:45:55:82:d9:8c:a2:95:7d:dc:f7:48:67:
7f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:68:EA:DF:FC:9E:07:18:31:F4:C4:69:22:07:3E:50:CB:04:FF:66
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0b:dd:4a:65:c2:ef:2b:17:ea:cd:cd:9a:3e:30:9b:62:7e:
7c:0a:5f:4a:0d:3d:37:69:97:72:a0:f6:23:b5:ff:65:78:28:
49:56:2e:d7:d0:85:7c:b8:83:96:cd:2e:3f:fb:64:d2:e1:8c:
ac:2d:bf:ba:03:90:fe:8b:8f:86:19:e0:a3:74:8a:95:aa:8b:
b2:1a:43:7e:72:8f:9f:33:28:e7:7f:1a:4c:df:25:63:fe:e2:
0f:da:6d:83:18:d5:b9:16:15:55:6d:8a:67:d2:7c:4d:8b:5d:
f8:c0:a7:31:3a:a7:41:7c:e9:c3:f1:23:3f:f0:8e:7e:dd:e8:
7d:6c:8d:51:25:4a:61:ba:7b:8a:3d:90:82:e9:7e:ab:c1:85:
d3:c4:8f:cd:b7:d5:45:0d:d4:a6:70:62:c0:80:c4:03:57:5f:
9b:c3:40:b1:35:75:05:d0:62:6a:60:1a:9e:3c:c4:d8:6e:33:
8f:ac:37:69:9e:23:1f:09:24:e8:81:8c:18:46:d2:f3:fc:84:
d3:4e:ee:e2:7d:48:7d:b2:d0:29:eb:2d:42:36:10:f5:27:2d:
13:6e:18:6d:52:63:86:b8:7e:ae:f7:b4:b8:30:79:df:2f:49:
da:1f:a1:10:e2:55:89:15:ec:c2:62:27:9f:d4:53:28:ba:3f:
3b:50:02:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGmb3JFrAK6Wne5FZHssLxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDNkMjcxMGFhZDdjOThjMTBmNGQ5NDVkYWJkZWVhMjFj
NDlkMzEwHhcNMjYxMTA0MTIwMTIzWhcNMjYxMTA1MTIwMTIzWjAzMTEwLwYDVQQD
EyhlZDY4ZWFkZmZjOWUwNzE4MzFmNGM0NjkyMjA3M2U1MGNiMDRmZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA331IhSsJD/BeW5ZsfTDLGZQ+F2jA
UPbztdc57djSISLaypY6SnaMO6HD4j7Bat/ldouLAZp6AWFeAY+ogRSgtiG99HZy
JDdqETCFbSQAhdvHSFEXXcFMoQHtvGteq7zKhhedHEFFcvBuxEBqq3PhdTBHFrY/
EdQ6Z+97OINH+4ItmwQ0y+jeIsmBzQQUhJLzNa6qATvqVqr8cBhMqFDVJT5Oy3T2
JUB54vkAO4HuxcosjXj+x3ra4H6TrOft7H6Rub3d2/0kUeMPNWcUOSvyHOCBYe4W
NUCwSwZN19xcPbdI9ocaEq2PvXgC9z5fdygMs4hFVYLZjKKVfdz3SGd/IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1o6t/8ngcYMfTEaSIHPlDLBP9mMB8GA1UdIwQY
MBaAFL5D0nEKrXyYwQ9NlF2r3uohxJ0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZjQ3OTQtOWU1My00ZjMwLWE5ODct
OGFmN2FlMGE5YWM3LzEvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZjQ3OTQtOWU1My00ZjMwLWE5ODctOGFmN2FlMGE5YWM3
LzEvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAvdSmXC
7ysX6s3Nmj4wm2J+fApfSg09N2mXcqD2I7X/ZXgoSVYu19CFfLiDls0uP/tk0uGM
rC2/ugOQ/ouPhhngo3SKlaqLshpDfnKPnzMo538aTN8lY/7iD9ptgxjVuRYVVW2K
Z9J8TYtd+MCnMTqnQXzpw/EjP/COft3ofWyNUSVKYbp7ij2Qgul+q8GF08SPzbfV
RQ3UpnBiwIDEA1dfm8NAsTV1BdBiamAanjzE2G4zj6w3aZ4jHwkk6IGMGEbS8/yE
007u4n1IfbLQKestQjYQ9SctE24YbVJjhrh+rve0uDB53y9J2h+hEOJViRXswmIn
n9RTKLo/O1AC5g==
-----END CERTIFICATE-----
Generated at Wed Nov 4 20:37:28 2026 by rpki-client