Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
File: vklD9SA9Q0YKE61OqdfVuVDGE80.mft (raw, json)
Hash identifier: Xns1jda5O4ODqJ7KdIoJOfdWXg64HtoTQtoZ5PU/ndU=
Subject key identifier: 7D:DF:E5:09:74:C4:BA:8F:34:62:EE:DD:84:98:80:20:E2:08:6C:A0
Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
Certificate issuer: /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Certificate serial: 01A18006BB34F209AF6E0B03443F8168A667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
Manifest number: 19AF
Signing time: Wed 28 Oct 2026 01:01:26 +0000
Manifest this update: Wed 28 Oct 2026 01:01:26 +0000
Manifest next update: Thu 29 Oct 2026 01:01:26 +0000
Files and hashes: 1: SDu33Jeh8c7arCHbWi8vSsrtoRg.roa (hash: mOOpOXQQCP8piIIEBcEgAzeCzN5EN9HiWhAzdTUbVms=)
2: kOyZYgSX80CsRnrKhHMAejR73Kw.roa (hash: /AadyvBuTOLqb+dP0xaY/xt4sTbRJkvJBZZOyXanfbw=)
3: uJvNLpD6dtMEqdYrc_px_NEqMQ8.roa (hash: CBsbLdrVaypZACEbt1T3ZFuVXJD72NZ0sDkOD5W8y6Y=)
4: vklD9SA9Q0YKE61OqdfVuVDGE80.crl (hash: otOUXuAsB98KphitRo9ZscDNhneZvnwWi1DFvYkG7+M=)
5: wH_YLSDY4b5XgVUcKfrsKH4Px0s.roa (hash: KLtMxNZ5FPCN1sTLToHlbj9Dq8r/htuRuv+o2DrmCdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:bb:34:f2:09:af:6e:0b:03:44:3f:81:68:a6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Validity
Not Before: Oct 28 01:01:26 2026 GMT
Not After : Oct 29 01:01:26 2026 GMT
Subject: CN=7ddfe50974c4ba8f3462eedd84988020e2086ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:86:6a:19:d9:bf:e7:71:8c:89:f1:b7:7f:
22:f6:8d:39:66:72:ee:f4:ed:27:21:0b:0d:f3:6f:
1b:eb:fa:8f:9f:2c:f8:75:93:a7:3b:ba:cd:2a:32:
40:10:a3:47:3f:4f:cd:fe:5d:30:ba:1a:41:a9:19:
ed:80:c4:3b:a7:d9:b4:30:9e:30:b4:9d:0b:2d:07:
17:4c:dd:df:14:43:88:ff:3e:6f:f0:27:0a:99:b6:
23:6e:52:bd:1f:61:16:60:af:c1:3e:cb:a6:6e:f2:
66:da:78:6e:1b:fb:8f:76:61:80:03:e2:b5:2b:39:
7c:44:25:d8:f8:77:5c:d0:9c:51:8a:df:11:5d:30:
58:4c:2b:a9:0b:43:79:4d:f4:c4:93:80:68:b7:62:
ed:c3:c1:99:88:99:c4:e5:63:84:bc:e9:2a:7a:45:
f2:a1:72:ce:bc:d7:08:b6:38:e1:72:b2:dd:64:d5:
bc:16:52:19:08:87:33:b8:b8:d6:23:ac:b8:fd:14:
26:4a:02:f4:d2:31:02:f9:6c:ab:27:e1:03:9b:fa:
ba:0c:6e:e7:0e:44:93:61:de:3b:a8:a7:d6:b6:b9:
66:03:c9:85:ef:fb:b7:83:fd:a1:95:f5:e6:29:c3:
91:a6:0a:32:79:89:e0:3d:c6:97:13:0e:0e:04:15:
53:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DF:E5:09:74:C4:BA:8F:34:62:EE:DD:84:98:80:20:E2:08:6C:A0
X509v3 Authority Key Identifier:
keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e4:d9:e4:13:d0:cd:4e:1d:01:79:43:4c:7c:5e:be:0c:f6:
2d:1c:fc:19:b3:5d:16:ba:52:4d:82:3d:cb:71:98:48:b1:d7:
a8:34:54:8b:83:3f:94:7d:3b:06:a9:9a:76:0f:2c:52:f8:df:
39:c1:01:55:2d:31:e9:f7:85:c2:cb:81:9e:9f:b5:92:5f:da:
d3:a0:e3:5d:2b:7f:fb:ff:c6:06:a6:ba:a2:eb:19:61:80:9d:
36:88:e7:c1:10:73:68:d9:dc:8a:ae:b5:5f:5e:00:e1:96:07:
41:77:9e:04:c2:e5:6a:a9:b5:79:20:01:ab:79:4f:45:48:00:
1c:42:bd:77:d6:ca:0b:ae:49:ad:78:61:48:b1:f1:e0:d0:47:
b0:ed:07:5b:66:d5:df:85:88:93:56:0c:c2:7e:55:fc:bf:85:
95:b9:23:51:59:6c:f1:5f:7d:c2:81:a4:cb:72:73:ef:69:76:
e8:2d:9f:29:9d:13:a1:dc:f3:da:e6:ea:71:9c:91:2a:cb:81:
ff:dc:76:d3:8b:32:0a:16:e2:9a:eb:72:93:76:89:ad:6a:07:
37:5a:e9:f7:35:68:fd:2b:0d:fe:e4:74:08:60:8c:b1:a5:39:
d8:e2:3a:92:08:bf:94:9a:47:bc:4c:44:5f:e3:71:2b:af:d6:
c8:ac:18:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:25:40 2026 by rpki-client