Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier: RaEUQ/amM7gSzXjAs4o6Gd27j3zlOSFTBB4C5WGj1Gk=
Subject key identifier: DD:60:8F:82:0E:82:0B:A0:5E:DD:08:20:AA:E9:FC:E1:01:4B:C2:1B
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 019D382DD5FD7B0F13D96F902A50038E33C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number: 1735
Signing time: Sun 29 Mar 2026 06:00:20 +0000
Manifest this update: Sun 29 Mar 2026 06:00:20 +0000
Manifest next update: Mon 30 Mar 2026 06:00:20 +0000
Files and hashes: 1: 2e1cz0qQm98XsgOLRW_MtsZatHo.roa (hash: s7uLnF7oXLpb3y50Cb2KADpe3RUMwrdqTlQV52zh+8g=)
2: GyEClr1YQ4_DWaldbIWVGzirKrM.roa (hash: Hf1oKmBrTqtefmUDpN3mwcJ/zJ6TmhTAUewS81ncFOM=)
3: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: DcxwrbUs60S+dKkGjLS/Y0JLwgruviUP12lWeP4TSHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d5:fd:7b:0f:13:d9:6f:90:2a:50:03:8e:33:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Mar 29 06:00:20 2026 GMT
Not After : Mar 30 06:00:20 2026 GMT
Subject: CN=dd608f820e820ba05edd0820aae9fce1014bc21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:97:bc:d5:ec:83:f7:95:56:e5:46:a6:b2:
09:9d:5a:df:1f:35:89:58:0c:f7:c1:58:83:ec:ef:
a5:de:2f:70:d2:06:1b:54:bc:e7:16:62:96:fc:97:
42:e6:6f:74:e7:da:73:da:62:c7:ae:15:84:58:22:
7f:05:33:dd:d8:4b:6e:fd:3a:93:1a:8a:de:52:cf:
01:e5:e3:41:fd:ab:7b:e6:06:4b:e6:8d:67:0b:64:
e2:74:88:96:4e:ea:37:37:ef:c0:8f:58:f7:b7:2f:
55:dc:65:59:b5:86:92:66:8a:db:76:33:cd:a9:49:
83:df:bd:ae:a8:6f:f0:21:40:65:ed:21:b8:0a:5f:
30:ea:25:64:41:33:a5:0d:e3:d9:94:ff:e2:8c:ff:
ec:f9:67:47:2b:b0:9c:38:e0:ec:ae:4e:39:b3:79:
0e:89:8d:c1:e9:e3:6e:21:3b:74:a8:4b:32:d2:91:
01:d2:85:6e:ed:45:7c:13:c3:ef:63:4d:ea:f9:c5:
cd:5f:a7:ea:bf:af:1d:6b:6a:bb:b6:6b:cf:76:97:
23:9d:6a:cb:c6:81:f4:88:7c:69:33:cc:e5:3f:3f:
2d:fc:13:db:68:57:37:ed:73:de:d9:e7:6e:3e:12:
f9:d0:fe:39:32:e5:ea:84:b8:e9:e9:ee:4a:71:9c:
db:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:60:8F:82:0E:82:0B:A0:5E:DD:08:20:AA:E9:FC:E1:01:4B:C2:1B
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e3:68:73:92:03:5b:b5:ce:ec:34:c3:22:f7:40:cf:2d:bd:
fb:00:2d:1d:b0:97:2e:2f:f1:7b:7b:56:10:a1:b2:82:c8:fa:
64:40:09:7d:76:47:22:f3:36:32:68:94:59:ce:67:19:db:63:
e5:df:9a:e4:05:dc:b2:6e:61:6a:cc:75:ac:27:7c:ac:83:ee:
45:f3:ad:ec:c7:c5:f4:a8:d0:bd:3b:db:bb:f3:d7:85:9c:7d:
fb:01:b0:c1:0e:86:05:c3:cd:2c:ab:e5:1d:2f:1d:99:db:02:
33:4c:cb:3b:4a:70:b6:73:4a:90:cc:9c:fb:c0:ee:c2:d1:7c:
16:d0:db:2c:04:f7:e8:31:60:b0:4e:fd:a4:46:39:4a:6a:37:
14:21:a7:3f:eb:5f:92:a0:f8:58:3d:c5:8f:e0:b8:2f:85:23:
6f:52:3b:3c:1a:5a:b5:f2:e2:d6:b4:d1:ef:28:59:64:ba:c6:
64:cf:68:b8:a2:db:55:3d:a2:8b:89:3c:58:2f:cb:6c:f7:df:
7e:83:ae:21:31:de:bd:19:66:70:e2:b2:4d:09:17:c1:b8:14:
86:77:52:57:60:cb:89:4b:c6:ca:4c:f7:59:f9:ed:35:4f:ca:
bd:ef:fd:f8:99:89:49:45:c2:9b:14:5e:22:32:53:9b:2b:f1:
e2:ff:9c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:53 2026 by rpki-client