Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier: EpAyPjFfPXLivhRrLQqMzu/LXaLdPtNzprVdC7KLqJQ=
Subject key identifier: 10:B1:DA:86:87:5E:14:1E:D5:E2:4C:5D:F1:FC:E9:EC:63:57:39:A0
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 01A16044A6FA905171B078F6A029D33DDF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number: 195C
Signing time: Wed 21 Oct 2026 21:01:14 +0000
Manifest this update: Wed 21 Oct 2026 21:01:14 +0000
Manifest next update: Thu 22 Oct 2026 21:01:14 +0000
Files and hashes: 1: 2e1cz0qQm98XsgOLRW_MtsZatHo.roa (hash: s7uLnF7oXLpb3y50Cb2KADpe3RUMwrdqTlQV52zh+8g=)
2: GyEClr1YQ4_DWaldbIWVGzirKrM.roa (hash: Hf1oKmBrTqtefmUDpN3mwcJ/zJ6TmhTAUewS81ncFOM=)
3: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: 3L1ZkjEH0GNkqPePsbqceVF8QOKoIShOGaHB0xkpdno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:44:a6:fa:90:51:71:b0:78:f6:a0:29:d3:3d:df:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Oct 21 21:01:14 2026 GMT
Not After : Oct 22 21:01:14 2026 GMT
Subject: CN=10b1da86875e141ed5e24c5df1fce9ec635739a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:99:c2:de:55:c1:67:83:91:92:ce:5f:52:91:
f8:a6:95:67:ee:f7:4b:03:7d:d1:f0:c4:e5:25:c9:
b3:7d:86:dc:f0:c5:8e:26:71:4f:1e:06:c9:12:c6:
f3:c0:f1:5f:8b:02:74:70:40:3f:91:3b:25:1e:ad:
70:85:8b:5c:8d:b7:22:95:f2:cb:63:fd:a1:1f:cf:
e7:31:e9:1f:d8:ee:9e:d2:80:77:51:5d:fb:4c:af:
ef:09:79:78:f9:94:d8:4b:98:df:f8:c5:29:44:02:
41:e5:5f:e4:4c:c0:d1:ee:23:7d:47:ab:b0:bd:5a:
7f:62:b4:63:e0:b6:d5:d4:26:6b:7c:27:70:a6:cf:
ce:52:d7:a2:d4:93:1f:4d:5f:ce:1d:ab:87:11:27:
a8:1c:44:f9:54:0a:9c:ad:93:e6:e3:40:e5:61:45:
06:fe:f3:7a:d3:29:30:3b:0c:2c:64:b0:f3:43:7a:
4d:11:92:5f:e5:0e:5d:66:35:8a:4a:bb:37:59:72:
11:a6:65:a3:f3:4b:44:b9:db:ee:a6:67:e0:bf:b6:
9a:57:e6:95:5e:99:8f:9a:f6:aa:db:bf:9d:90:45:
34:fb:ca:38:92:21:17:39:c6:83:3b:38:88:ec:16:
1e:48:9c:28:ad:21:01:60:d0:6c:23:ab:d2:7e:df:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B1:DA:86:87:5E:14:1E:D5:E2:4C:5D:F1:FC:E9:EC:63:57:39:A0
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f4:fa:49:fa:2a:41:f1:0b:c6:2c:04:4a:64:de:f2:fc:9e:
5e:50:e5:48:e4:55:d8:07:2b:85:d6:e2:42:98:8a:6a:20:a9:
7f:81:7d:00:46:46:85:61:16:66:16:8d:4d:68:16:10:d4:64:
17:2f:0f:3c:2d:13:25:5a:25:9a:5d:31:1b:64:a1:26:47:aa:
29:d9:2b:79:98:26:73:33:72:a0:f6:d9:ba:07:9f:f3:47:6f:
1c:82:6c:5f:d9:59:cc:ae:07:93:03:0f:9c:79:25:c3:54:fd:
a3:98:16:51:d9:fc:1d:cc:33:19:e5:3c:c9:64:d8:0d:bb:ca:
d8:d3:d2:af:fb:70:7f:7e:0a:ba:22:fc:b7:93:30:01:55:fa:
f2:91:60:8f:bc:7e:d8:ad:3f:05:c4:44:37:a9:45:38:c2:2c:
ba:39:07:8c:ca:ec:40:d2:cd:67:f2:7e:aa:d4:a6:ff:cf:9b:
cb:49:e6:5d:bb:f1:1a:4c:82:21:4d:eb:e6:0e:c3:7d:62:81:
11:48:02:f1:00:32:4e:a5:a6:d3:4b:c2:cd:5f:d0:ad:58:f5:
21:e0:88:8b:b8:31:92:f0:0c:db:65:b5:03:a3:80:01:76:54:
3b:07:a8:f7:e2:bb:69:b7:59:d0:d1:f6:e9:44:cf:0b:88:63:
38:92:99:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFgRKb6kFFxsHj2oCnTPd8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTMxYWIwMzNjZmQyZGVlNjg1MmZhOWQ4YmY1YTRhMGUz
NTI0MTQwHhcNMjYxMDIxMjEwMTE0WhcNMjYxMDIyMjEwMTE0WjAzMTEwLwYDVQQD
EygxMGIxZGE4Njg3NWUxNDFlZDVlMjRjNWRmMWZjZTllYzYzNTczOWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pnC3lXBZ4ORks5fUpH4ppVn7vdL
A33R8MTlJcmzfYbc8MWOJnFPHgbJEsbzwPFfiwJ0cEA/kTslHq1whYtcjbcilfLL
Y/2hH8/nMekf2O6e0oB3UV37TK/vCXl4+ZTYS5jf+MUpRAJB5V/kTMDR7iN9R6uw
vVp/YrRj4LbV1CZrfCdwps/OUtei1JMfTV/OHauHESeoHET5VAqcrZPm40DlYUUG
/vN60ykwOwwsZLDzQ3pNEZJf5Q5dZjWKSrs3WXIRpmWj80tEudvupmfgv7aaV+aV
XpmPmvaq27+dkEU0+8o4kiEXOcaDOziI7BYeSJworSEBYNBsI6vSft8L1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCx2oaHXhQe1eJMXfH86exjVzmgMB8GA1UdIwQY
MBaAFFSjGrAzz9Le5oUvqdi/WkoONSQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGIt
NjE5YzI2MTk0MTY4LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGItNjE5YzI2MTk0MTY4
LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfT6Sfoq
QfELxiwESmTe8vyeXlDlSORV2AcrhdbiQpiKaiCpf4F9AEZGhWEWZhaNTWgWENRk
Fy8PPC0TJVolml0xG2ShJkeqKdkreZgmczNyoPbZugef80dvHIJsX9lZzK4HkwMP
nHklw1T9o5gWUdn8HcwzGeU8yWTYDbvK2NPSr/twf34KuiL8t5MwAVX68pFgj7x+
2K0/BcREN6lFOMIsujkHjMrsQNLNZ/J+qtSm/8+by0nmXbvxGkyCIU3r5g7DfWKB
EUgC8QAyTqWm00vCzV/QrVj1IeCIi7gxkvAM22W1A6OAAXZUOweo9+K7abdZ0NH2
6UTPC4hjOJKZBg==
-----END CERTIFICATE-----
Generated at Thu Oct 22 01:38:31 2026 by rpki-client