Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
File: vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft (raw, json)
Hash identifier: ixet3TW7RjK7r/wC2AMSN7lsCr0S1EZzEQsapARpzeI=
Subject key identifier: 62:2E:95:55:4F:FA:E0:45:B1:2F:DD:EA:D4:73:8F:02:0A:A7:C5:97
Authority key identifier: BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
Certificate issuer: /CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Certificate serial: 01A18D540BB8B4792CD86D72B907A0338259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
Manifest number: 0147
Signing time: Fri 30 Oct 2026 15:00:57 +0000
Manifest this update: Fri 30 Oct 2026 15:00:57 +0000
Manifest next update: Sat 31 Oct 2026 15:00:57 +0000
Files and hashes: 1: Dgm0yJxRGKkWzuCmtXAV_Sap5C4.roa (hash: iEzyR4D1PeG/2/gt5MrfspiuGu469FZd2g1heNAGkMA=)
2: GNjrvjIiN-OXUdCPEIpZchNO6Ys.roa (hash: isKT3r2eXooAKP6/3EQPs1CjALz2zfPJBsvBDqAhScY=)
3: vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl (hash: /d62dDnWYEmZmuf+ABM9OZ+ZLu2hKDxQlFoPH9OyDPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:54:0b:b8:b4:79:2c:d8:6d:72:b9:07:a0:33:82:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Validity
Not Before: Oct 30 15:00:57 2026 GMT
Not After : Oct 31 15:00:57 2026 GMT
Subject: CN=622e95554ffae045b12fddead4738f020aa7c597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d6:16:68:76:dd:c0:d2:02:5e:21:14:2e:b1:
3f:e1:0e:49:6c:5a:06:9d:0c:b3:c9:b6:3c:56:ef:
8e:39:f5:a0:56:a5:cb:eb:cb:c1:74:8b:36:0c:cb:
40:6d:ed:28:50:a8:59:9c:05:79:5f:3d:5f:f0:3f:
2b:f2:02:fb:9b:df:5c:f9:cc:af:de:c3:5b:c2:c8:
af:98:69:e1:e6:fb:e3:ce:f9:8c:7f:da:6d:e6:55:
66:23:23:1f:cc:d8:15:9f:24:52:db:f6:0e:15:93:
c9:2f:37:5c:fd:1c:7d:9f:78:77:d0:69:24:0e:09:
a1:f9:0b:1e:36:0a:e4:be:47:cc:84:f7:d0:17:c1:
ec:d4:99:1f:45:a6:83:51:07:3a:d9:1c:13:84:2f:
55:ae:6b:7d:ee:81:1e:aa:f3:06:e6:a4:46:12:f2:
54:a1:b9:c1:89:8f:88:ee:e7:62:00:ee:5f:3f:78:
ae:bc:9f:ad:b8:fb:d6:3a:40:2b:7e:fb:d5:3d:7d:
cb:77:60:7e:76:b9:06:a5:04:59:17:ce:1d:30:61:
7b:9d:a4:f6:42:d4:1a:7a:7a:46:56:04:68:a8:47:
5c:ba:1b:97:ad:9b:85:e4:8d:7b:f1:26:7c:cf:8a:
40:4e:07:21:dc:c3:16:4c:8d:b2:f5:27:97:34:03:
d3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2E:95:55:4F:FA:E0:45:B1:2F:DD:EA:D4:73:8F:02:0A:A7:C5:97
X509v3 Authority Key Identifier:
keyid:BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b6:9f:8d:4d:4d:04:94:0e:83:05:8b:64:43:3a:4f:f5:23:
23:23:22:87:a5:ad:37:22:de:ae:5d:d6:50:b5:87:3f:c2:35:
42:02:3c:cd:25:83:dd:d1:81:b2:1d:1b:eb:7d:78:0b:b2:bd:
18:e4:6c:ff:dd:f3:55:71:eb:a8:b8:11:6e:ca:d6:bf:99:80:
0c:a0:39:a5:22:d2:5e:50:ea:15:2d:5d:06:fd:7b:55:4c:6b:
70:9b:b5:8f:78:15:b7:b9:a8:ad:6e:04:56:6a:b2:d2:20:44:
bc:05:a2:b4:59:8f:a9:61:fa:c2:30:c7:b0:1a:23:76:c4:b1:
2c:61:b4:32:6c:7e:72:fb:06:0c:1f:6a:d7:8e:33:1a:8b:56:
df:94:ac:7f:65:5e:ff:00:62:9d:96:8c:9d:34:0c:9c:f3:7b:
fc:aa:34:8f:34:0c:8c:00:03:89:b3:92:29:af:35:98:52:ed:
c6:b9:4d:95:89:c7:19:6a:d6:74:28:4e:0d:05:63:15:13:e1:
c8:58:04:7a:57:d7:3a:bb:c9:fd:7b:7b:15:ae:e9:46:eb:2f:
b2:41:67:f1:bf:b6:a9:5b:5b:88:c1:26:f9:be:24:42:48:0e:
bd:32:86:b5:1f:ee:8b:5b:6b:39:70:d6:e8:24:db:0d:c2:3c:
25:09:42:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:05:04 2026 by rpki-client