Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
File: vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft (raw, json)
Hash identifier: l6oPfO/vTA538xxV5xx9fJRe7ro4SKTjIkGNmjLY/bE=
Subject key identifier: F2:A4:0E:93:67:DF:54:33:15:58:A0:97:5E:3A:94:73:74:0E:BF:70
Authority key identifier: BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
Certificate issuer: /CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Certificate serial: 01A187888A2754EA1782CE32FEC4191B160B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
Manifest number: 0144
Signing time: Thu 29 Oct 2026 12:00:34 +0000
Manifest this update: Thu 29 Oct 2026 12:00:34 +0000
Manifest next update: Fri 30 Oct 2026 12:00:34 +0000
Files and hashes: 1: Dgm0yJxRGKkWzuCmtXAV_Sap5C4.roa (hash: iEzyR4D1PeG/2/gt5MrfspiuGu469FZd2g1heNAGkMA=)
2: GNjrvjIiN-OXUdCPEIpZchNO6Ys.roa (hash: isKT3r2eXooAKP6/3EQPs1CjALz2zfPJBsvBDqAhScY=)
3: vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl (hash: jyShkShScITemBx4BC/Ng7lVUvrZYJXE4M8+edHiv54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:88:8a:27:54:ea:17:82:ce:32:fe:c4:19:1b:16:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Validity
Not Before: Oct 29 12:00:34 2026 GMT
Not After : Oct 30 12:00:34 2026 GMT
Subject: CN=f2a40e9367df54331558a0975e3a9473740ebf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:ff:79:3c:e6:75:e5:e1:b2:62:27:15:44:
06:f7:49:16:97:2f:79:b5:bc:4e:00:47:41:dd:87:
76:50:d6:6d:d1:ee:21:82:e0:e3:60:4e:14:0f:5e:
de:f0:85:3c:52:42:33:83:19:98:ea:5c:6b:b0:96:
22:7a:7d:03:f1:98:d6:84:26:10:37:b8:cf:5a:45:
fd:81:bf:e3:3b:1a:52:56:dc:99:3a:25:ee:55:e2:
1b:1e:30:a7:ee:3c:a8:5d:a9:e2:53:ce:b6:b6:bb:
cb:37:aa:0a:90:cd:e5:b2:b8:e0:10:ab:e2:38:d6:
49:5f:e0:b4:17:84:55:ca:c8:71:08:ca:e3:14:27:
9a:a4:fc:97:63:8c:ba:dd:a9:8e:7e:af:e2:06:f0:
86:b2:8b:dc:2d:36:41:91:56:3e:39:5b:b5:e3:16:
0a:b4:a3:7f:df:d8:4b:48:c6:92:a0:f5:a4:c9:cb:
94:ed:d8:00:7d:7d:b0:c2:f6:0b:be:8a:a2:13:39:
20:75:a4:e0:4b:86:45:6d:3b:62:48:1a:52:3d:8b:
7a:e7:3d:67:f5:f4:58:9c:a2:4b:f8:14:f1:46:06:
78:1a:18:9c:8d:af:47:cc:28:ce:f8:7a:46:43:89:
02:4b:16:ce:74:81:24:c4:bf:33:4a:e7:94:24:93:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A4:0E:93:67:DF:54:33:15:58:A0:97:5E:3A:94:73:74:0E:BF:70
X509v3 Authority Key Identifier:
keyid:BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2d:2f:d5:b7:f8:cb:9c:bd:5f:79:f8:1b:19:eb:5b:56:24:
1d:74:b2:7d:d2:e8:2e:ff:5c:ad:63:f9:dd:be:60:5a:35:6b:
48:3f:23:38:3d:83:c1:7b:49:e1:ba:41:29:f1:76:54:60:59:
cc:9c:96:7b:cb:63:fa:66:99:d6:f0:2c:31:10:39:95:10:18:
3d:d0:ce:11:77:97:a9:1c:76:97:da:55:c9:61:5f:d4:ae:7f:
dd:8b:00:d8:a0:07:d3:05:b8:6f:3a:a8:03:cb:d9:1e:f2:c8:
12:c1:8c:87:b4:2a:69:db:ce:b1:08:2f:24:94:ef:cd:8b:b2:
f7:c9:3a:23:ef:bc:b3:b7:d0:40:85:a8:df:f0:60:ae:42:b5:
d2:25:69:9a:08:6a:aa:5c:5a:2e:04:8f:16:bb:0c:7d:9c:10:
59:d6:46:a4:5a:3a:a7:58:9e:a9:72:c9:78:3f:69:2d:41:5a:
0d:20:5b:15:5f:46:e4:2f:30:89:d3:04:5f:be:e0:f8:50:31:
04:4d:7d:57:ea:27:c8:c5:69:24:9d:30:b0:07:9e:ba:5c:d5:
f3:ed:c9:f3:15:7d:f9:e8:df:de:dd:31:90:5f:22:83:c8:f4:
4c:29:d4:f1:2b:25:96:f7:db:fc:96:e4:84:7f:a9:78:75:ae:
ef:59:78:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:18:26 2026 by rpki-client