Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
File: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft (raw, json)
Hash identifier: 60gLfAeHJ7lYb5IL2AfVK8lrCgDyiXo4RgMNVPnTOV4=
Subject key identifier: 82:15:F2:65:24:20:87:93:E7:2B:DE:AF:62:33:62:FA:D3:C3:EE:13
Authority key identifier: BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
Certificate issuer: /CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Certificate serial: 019D389C5E920BFB3B53ECADF2F7558092C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
Manifest number: 0E81
Signing time: Sun 29 Mar 2026 08:01:05 +0000
Manifest this update: Sun 29 Mar 2026 08:01:05 +0000
Manifest next update: Mon 30 Mar 2026 08:01:05 +0000
Files and hashes: 1: hGGn56Yo_VSmgrsGFDnJfZjli00.roa (hash: IdVlpuGxDlB7X5s4S8Mv8+g/EUJ+VGMrKs3BCA2moLY=)
2: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl (hash: vZj0k/5vhK60/1u6WbpXHz7dQUUURL4rkjCAnexic7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5e:92:0b:fb:3b:53:ec:ad:f2:f7:55:80:92:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Validity
Not Before: Mar 29 08:01:05 2026 GMT
Not After : Mar 30 08:01:05 2026 GMT
Subject: CN=8215f26524208793e72bdeaf623362fad3c3ee13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0d:2c:45:de:98:f7:1a:9c:6a:37:f8:42:82:
30:9d:9c:35:d6:ef:42:6a:7f:e3:77:27:65:52:67:
d2:a9:a5:07:40:fb:d2:7c:58:4a:37:bf:65:2f:b9:
2c:b2:26:f5:0a:92:0c:d1:9b:39:4f:c8:df:ef:65:
91:dd:ae:3e:b1:41:0e:3d:e7:05:d9:d3:46:ef:c4:
a0:4b:83:98:de:97:f5:c7:ee:c8:18:8e:bd:dd:5b:
3e:d8:00:74:aa:9b:b2:bc:db:a3:bd:25:51:81:30:
d0:13:f5:e8:ee:fa:09:04:65:19:32:4c:a4:31:fb:
f8:e1:28:5f:1d:51:09:b0:11:27:86:8a:f0:02:59:
fb:fe:ad:fe:4c:a5:7b:59:49:26:d1:38:c6:b1:53:
6a:fc:c7:98:c7:7a:ff:d4:d3:a7:a6:0d:a1:19:b1:
b6:c7:87:c1:1c:fd:22:da:fa:c2:1f:82:f4:3c:6a:
29:cf:16:40:6b:ad:ee:fb:83:69:7e:d7:15:c3:9f:
51:ed:05:12:7f:0f:7e:c6:d2:82:34:78:37:9e:42:
56:e0:5e:35:1b:4b:18:55:2a:f9:3c:e5:d2:aa:a7:
85:02:1a:2d:93:e9:4e:a5:e5:60:98:3b:79:a8:7a:
cd:f9:c5:2f:af:32:b7:3c:b1:29:e9:f9:f4:49:fb:
8c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:15:F2:65:24:20:87:93:E7:2B:DE:AF:62:33:62:FA:D3:C3:EE:13
X509v3 Authority Key Identifier:
keyid:BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3f:ae:bc:b9:f0:a1:bf:d9:3a:f9:5e:53:ea:ad:09:82:c7:
e4:bb:ad:42:cc:46:04:f2:69:45:de:0e:8d:7e:33:db:1d:b8:
e6:89:4f:61:1b:fd:7b:b4:94:d6:24:ca:07:ba:c4:c5:eb:4c:
b2:fc:57:8c:c3:bd:9e:07:1f:09:12:bf:c4:4e:bb:4e:ca:0a:
66:12:6e:27:37:c4:94:ad:7c:7a:d3:07:93:65:cb:87:6e:33:
ed:76:de:97:07:52:47:26:b9:44:bf:f8:41:76:56:2b:e1:7a:
f9:5d:ba:9b:c7:38:1d:90:3b:5a:22:5c:92:7a:46:70:80:18:
5d:c3:80:a4:1a:cf:89:61:f5:d2:e5:a9:82:06:7c:6f:67:1a:
7a:a6:27:e1:4f:91:7a:ac:27:ff:ed:0d:6c:fe:d9:db:60:c6:
c2:f7:3e:7d:4d:e8:c2:02:82:f7:4e:8f:29:1c:3b:6e:9f:68:
fd:cf:1e:11:3c:59:de:de:b4:ad:e6:b9:ea:03:a8:3e:4d:a3:
b3:4f:99:9d:c0:ea:d5:db:15:9a:fc:a6:41:3a:27:0a:04:bc:
53:14:a7:ae:bd:6f:e5:ff:23:eb:62:7b:13:ac:7f:95:0d:9e:
38:61:ae:26:a0:ae:6c:73:de:85:e2:51:b8:ad:45:fc:c5:f6:
1e:5b:9c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:13 2026 by rpki-client