Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier: nzfM0zNNFxItYsHV+GW7aCRn/6RCvZUrbTKlq+n/P0g=
Subject key identifier: 3D:6E:AC:20:F3:6B:1F:93:AD:58:08:46:72:3F:4B:2B:6C:7E:68:BB
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 01A08E6952F54F402F3D6D5FDEB1F9A3CC56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number: 141E
Signing time: Fri 11 Sep 2026 03:01:02 +0000
Manifest this update: Fri 11 Sep 2026 03:01:02 +0000
Manifest next update: Sat 12 Sep 2026 03:01:02 +0000
Files and hashes: 1: R1X-0N_qCuCvnv8CkB9Z_OSw2o4.roa (hash: D3kS568Iv2wmPNkEcgVaGHK64PzLTmFGbe9n3gWj/eM=)
2: YqVzzltVIPdeaSwCpyQY30xpr1w.asa (hash: WikOOkK+XwRTMCM7gYW5rQHy5y4vCTIDLGljHlXKP5E=)
3: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: Zwuo7HZ9HycqS29iiYwFbS59TNlUIaiCeVQvw+AkO8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:69:52:f5:4f:40:2f:3d:6d:5f:de:b1:f9:a3:cc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: Sep 11 03:01:02 2026 GMT
Not After : Sep 12 03:01:02 2026 GMT
Subject: CN=3d6eac20f36b1f93ad580846723f4b2b6c7e68bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:86:50:7e:62:10:d5:8a:27:02:63:68:da:
48:21:9a:cc:1b:2f:86:5b:3e:a6:b6:49:d4:1a:9f:
90:d3:41:9d:73:ec:84:bb:00:e2:56:8d:bb:3b:3e:
e2:fc:bf:79:97:f1:6a:2e:f3:05:b6:79:63:e9:99:
a7:90:4c:11:9c:a3:f7:1d:e8:9e:0e:9b:22:72:2d:
43:c3:62:fb:b8:60:17:6d:11:19:35:7c:d6:ad:7b:
85:7a:f3:9b:ef:a8:ee:de:4a:56:87:04:ed:b8:e6:
d2:09:43:d1:b0:ec:a0:0e:b8:9c:44:f0:3a:b6:c5:
24:c2:f4:8d:81:a0:d5:47:07:39:ee:29:14:d0:58:
94:37:b9:f1:76:8e:8b:b7:57:1f:ac:d9:79:e6:0f:
27:51:7b:17:8a:c9:08:a2:d3:30:e0:37:6a:e6:9b:
d4:76:c1:e6:bf:4f:5f:33:38:b5:88:54:64:a8:fb:
fb:07:a8:8e:c6:cf:30:a2:b5:78:40:e8:e7:34:ef:
7c:aa:6f:18:4d:b6:98:98:5f:b5:40:53:08:97:31:
e9:d9:54:d8:a9:5b:7b:9a:1c:b1:1f:01:5e:cb:ed:
6e:9e:bd:6b:2f:23:74:34:f7:e3:50:d7:74:e8:94:
0e:b9:5a:8c:d1:89:7b:55:fd:90:18:41:cf:45:e3:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6E:AC:20:F3:6B:1F:93:AD:58:08:46:72:3F:4B:2B:6C:7E:68:BB
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6f:37:73:35:d5:e4:e6:d1:48:dd:af:47:fc:0c:75:92:2c:
34:db:ec:86:a5:1a:72:f2:d7:16:2d:c3:9e:7d:8c:42:8e:87:
69:8c:46:3f:33:ad:d1:18:a9:ee:d7:82:35:23:cb:39:ed:9d:
65:e4:89:b4:ea:19:02:72:69:35:03:94:c0:19:23:53:ac:48:
04:d7:89:b0:c8:0c:bb:10:ae:4b:2b:ac:6d:e3:ed:8b:ab:d9:
6f:57:72:08:0d:ca:7e:d9:4e:1c:d2:5e:6c:df:5f:f6:cf:4f:
da:cc:07:94:0b:1f:0f:e8:b8:ab:d4:f8:68:08:ab:1e:97:10:
d1:80:3e:8d:09:3e:8d:ed:f8:43:78:8a:75:ad:74:70:57:b6:
72:93:78:78:0a:ff:bf:f3:c3:2a:c2:e7:d6:36:b1:4a:81:96:
22:48:83:4d:18:e5:7b:57:61:44:17:6c:c3:20:99:04:06:10:
f7:0e:21:e6:e0:20:5f:c8:5e:00:19:4b:34:38:34:9d:0a:32:
7d:45:8f:3a:e2:d5:6e:1a:27:2e:d0:f0:fa:f6:16:aa:99:ab:
6e:3c:c0:1c:e5:f0:12:88:f4:25:35:27:d8:f4:6c:27:95:ca:
53:60:59:a6:b0:9f:08:44:03:0d:5a:82:bf:00:e8:bf:00:bf:
4d:f8:f3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:05:57 2026 by rpki-client