Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
File: VkRaDdykbWQ2d1kSUWqyHUizxhA.mft (raw, json)
Hash identifier: NyGaVrvLedAMqkPtA7FafvszbcnLC4I0IV2wuPuRdvc=
Subject key identifier: 63:D1:71:68:69:86:01:A6:AB:A3:62:AF:63:45:3B:DC:06:37:8C:FB
Authority key identifier: 56:44:5A:0D:DC:A4:6D:64:36:77:59:12:51:6A:B2:1D:48:B3:C6:10
Certificate issuer: /CN=56445a0ddca46d6436775912516ab21d48b3c610
Certificate serial: 01A029FE03B8E0913B70E1DC7C00B12ABEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkRaDdykbWQ2d1kSUWqyHUizxhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
Manifest number: 8F
Signing time: Sat 22 Aug 2026 15:01:47 +0000
Manifest this update: Sat 22 Aug 2026 15:01:47 +0000
Manifest next update: Sun 23 Aug 2026 15:01:47 +0000
Files and hashes: 1: LICSZW6buSJYk1oARnAFrdmWuFU.roa (hash: TwqDawyRXh5YGrolYDCvMO93/W3FlxRPud+jOp0w8eM=)
2: Rxxwpcxvls8zs8535IZHXRKb8m0.roa (hash: yZE26IiqgT+xbjqM1qO6+eG13lkByw3rPwmmdAx3lE0=)
3: VkRaDdykbWQ2d1kSUWqyHUizxhA.crl (hash: XQycQwMmB4djeXq6rqzzu62G1qk7hdA2K3zGWb0RXkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkRaDdykbWQ2d1kSUWqyHUizxhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:fe:03:b8:e0:91:3b:70:e1:dc:7c:00:b1:2a:be:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56445a0ddca46d6436775912516ab21d48b3c610
Validity
Not Before: Aug 22 15:01:47 2026 GMT
Not After : Aug 23 15:01:47 2026 GMT
Subject: CN=63d17168698601a6aba362af63453bdc06378cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:0e:1e:46:8b:ff:32:e8:46:bc:8e:59:29:
59:4e:e5:c9:7b:97:44:f6:c5:66:9f:ed:2f:ab:cc:
2d:3b:b4:c9:cc:cf:8a:0a:71:f0:3a:40:55:28:f1:
29:eb:58:3b:8c:c2:7f:89:2a:86:ac:ba:fa:f1:d4:
11:31:c2:56:38:97:58:9e:60:0b:a7:66:b5:72:f9:
ce:50:df:04:52:5b:ad:b8:8c:f4:94:2c:44:51:8d:
7c:e0:7c:43:8f:92:4b:0f:14:71:cb:bb:7e:0d:da:
57:46:8a:07:4f:34:2a:79:59:11:52:7b:87:24:15:
da:de:04:e3:41:28:0a:15:f1:b3:82:81:e4:e0:a1:
23:0a:a9:d4:9f:96:15:0a:63:d2:33:e4:36:df:c1:
a3:75:8f:81:46:9a:80:1b:ee:c0:83:c6:59:ee:46:
8c:b7:7e:b7:1d:36:31:1a:0b:6b:57:c1:f5:ff:f0:
69:a7:41:9b:10:a3:a2:90:b5:4a:30:7b:f6:fc:e6:
19:49:8e:86:36:3a:5a:63:ab:52:d1:94:a6:1d:82:
c4:84:7a:d4:dc:13:51:4e:35:36:bd:9a:08:ab:a4:
7e:b0:fe:55:6f:e1:4c:b7:c8:e9:1e:91:f0:f3:9b:
5c:3c:03:44:80:fc:77:0b:2c:5e:be:5a:72:4d:a3:
fb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D1:71:68:69:86:01:A6:AB:A3:62:AF:63:45:3B:DC:06:37:8C:FB
X509v3 Authority Key Identifier:
keyid:56:44:5A:0D:DC:A4:6D:64:36:77:59:12:51:6A:B2:1D:48:B3:C6:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkRaDdykbWQ2d1kSUWqyHUizxhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1b:1e:78:fc:98:4d:4d:fd:c6:63:da:25:98:a4:6c:42:78:
56:ff:5a:5a:16:e0:63:1d:c4:73:54:71:06:54:f1:c6:15:e1:
12:3f:97:87:11:57:b0:cb:96:b7:4b:eb:af:84:02:ba:44:2d:
b1:ae:92:cf:b7:64:f7:b5:3b:2c:ab:65:0f:ea:ee:a5:31:8a:
d3:38:82:d3:57:69:21:59:d6:3b:55:ab:31:b4:d5:3e:34:7f:
4e:cf:a5:88:8f:71:4d:f8:e8:5b:81:c8:c0:40:66:01:1d:16:
55:5e:76:08:e6:05:9b:96:e8:11:1b:74:2f:32:c6:40:0d:97:
11:eb:c6:7b:cc:1c:79:2b:be:b2:ce:78:71:de:da:71:a8:ee:
60:41:73:33:99:08:ba:be:86:9e:74:94:5b:db:9c:cf:c0:33:
7e:ef:c0:f4:77:a0:bc:b8:18:ba:49:b1:df:68:5c:66:bb:08:
db:b0:b3:a3:02:9a:a2:4b:e2:74:59:0f:e4:bb:74:3f:ad:27:
e8:be:01:28:ea:18:3d:34:68:88:4c:64:9f:fd:b7:7d:2c:86:
3c:80:d0:64:1b:4a:cd:0d:b1:d0:cd:06:81:c3:40:ef:63:c9:
59:70:65:d5:ad:e6:e1:e0:3b:dc:66:10:26:8e:62:e4:10:b8:
e0:67:1a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:48:37 2026 by rpki-client