Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
File: VkRaDdykbWQ2d1kSUWqyHUizxhA.mft (raw, json)
Hash identifier: 8LUDLulmvsfjIrTq18U6I+jSGdLO5WGJx+Cx4yu1jmg=
Subject key identifier: 2E:3A:50:BB:18:B3:ED:0A:DC:B3:A3:E1:B4:71:77:C5:68:F8:D2:FC
Authority key identifier: 56:44:5A:0D:DC:A4:6D:64:36:77:59:12:51:6A:B2:1D:48:B3:C6:10
Certificate issuer: /CN=56445a0ddca46d6436775912516ab21d48b3c610
Certificate serial: 019F42403EB6F85F7B4C17E73EC728481E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkRaDdykbWQ2d1kSUWqyHUizxhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
Manifest number: 17
Signing time: Wed 08 Jul 2026 15:02:14 +0000
Manifest this update: Wed 08 Jul 2026 15:02:14 +0000
Manifest next update: Thu 09 Jul 2026 15:02:14 +0000
Files and hashes: 1: LICSZW6buSJYk1oARnAFrdmWuFU.roa (hash: TwqDawyRXh5YGrolYDCvMO93/W3FlxRPud+jOp0w8eM=)
2: Rxxwpcxvls8zs8535IZHXRKb8m0.roa (hash: yZE26IiqgT+xbjqM1qO6+eG13lkByw3rPwmmdAx3lE0=)
3: VkRaDdykbWQ2d1kSUWqyHUizxhA.crl (hash: HyCTpVG650tv8zYNldCMj5+X2pYFrU3TEvuvy2eigFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkRaDdykbWQ2d1kSUWqyHUizxhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:40:3e:b6:f8:5f:7b:4c:17:e7:3e:c7:28:48:1e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56445a0ddca46d6436775912516ab21d48b3c610
Validity
Not Before: Jul 8 15:02:14 2026 GMT
Not After : Jul 9 15:02:14 2026 GMT
Subject: CN=2e3a50bb18b3ed0adcb3a3e1b47177c568f8d2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dc:e3:66:a8:eb:ca:72:b5:d0:f2:b2:d7:86:
e4:d2:2d:47:ca:cf:ae:74:22:ca:33:c1:61:16:77:
1f:19:40:3c:bc:ff:01:55:e8:97:97:66:23:e2:ed:
60:84:93:90:d6:05:75:7d:78:6c:8a:ab:8c:29:d7:
fc:f0:aa:d4:c5:62:f9:a7:3a:bd:c7:81:6a:d1:5c:
74:6f:e8:79:d3:58:fc:67:24:08:da:30:a1:da:47:
12:9d:7d:f6:6f:81:7a:14:db:f2:d9:1c:c0:3b:19:
20:58:85:3e:ef:fe:88:c5:c0:e9:a2:57:32:3c:76:
da:38:4d:fc:c5:55:61:5d:3f:40:33:d2:fb:cc:62:
63:a6:ff:65:ce:1e:03:2a:8f:0f:6e:b1:41:df:62:
ff:5f:4c:e0:22:f6:b2:34:7e:85:3d:64:7b:6d:d4:
40:3e:81:bc:9c:d8:dd:3a:19:8a:67:a0:93:08:92:
24:6c:2d:fb:dd:ea:f4:75:9d:24:73:52:f3:25:60:
40:56:ca:fd:50:e9:4c:ce:60:8d:91:43:ad:64:bc:
de:29:1c:69:e9:21:ae:21:a3:40:cd:56:2f:b5:cd:
ac:28:33:2c:c1:2f:c4:9e:9a:d5:7c:6d:9e:24:d4:
fa:2c:d8:f0:cb:7e:32:7b:77:df:e4:9d:19:74:6d:
5e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3A:50:BB:18:B3:ED:0A:DC:B3:A3:E1:B4:71:77:C5:68:F8:D2:FC
X509v3 Authority Key Identifier:
keyid:56:44:5A:0D:DC:A4:6D:64:36:77:59:12:51:6A:B2:1D:48:B3:C6:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkRaDdykbWQ2d1kSUWqyHUizxhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4c:da:af:23:a9:88:ac:9a:e8:e1:84:5a:00:32:12:7f:ad:
c1:c5:fc:7a:5e:d3:6b:d2:1b:c2:f0:8e:65:34:9a:1e:fb:3a:
4e:cc:80:97:71:f2:f4:00:28:fa:8b:8b:fa:21:39:78:c4:c2:
9c:d7:1b:ee:52:4d:08:97:d0:87:e7:dd:7e:a6:a1:61:e0:0b:
c4:58:cf:f5:3a:0b:a6:0f:df:9b:52:04:13:11:57:f6:56:70:
d0:3e:53:ec:8d:32:bb:55:1d:99:ff:42:b0:9a:36:e1:22:e3:
db:e4:c1:c4:b5:00:cf:65:13:2a:4d:11:21:06:2f:b8:a2:cf:
85:2a:7a:d7:ac:00:ed:6c:6a:8e:87:36:e1:60:13:39:5f:8d:
21:ad:1d:0f:c7:44:a0:24:58:3d:32:0b:3c:d3:aa:4c:e0:30:
03:d3:fe:a2:5b:6f:73:cc:af:49:27:8c:41:7c:1c:72:4d:c5:
6b:23:71:db:a1:f2:5e:8c:97:eb:83:10:c5:69:ce:8d:96:1c:
42:69:74:67:8c:50:50:d5:43:62:d8:f2:08:75:86:81:c2:a3:
0d:af:b6:1e:42:95:31:1d:fb:8d:ed:9e:bb:64:bf:0c:3c:e2:
57:bd:fb:8c:e2:d1:95:18:ba:35:00:f5:22:17:1c:47:4d:ba:
8a:68:21:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:27:42 2026 by rpki-client