Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier: kOfEWgkSXLzGZ/hxp+NJq7tKoB9nyIInMtCKd/py36Q=
Subject key identifier: 25:CE:B1:F5:E0:1D:B2:BF:C1:75:64:CC:60:57:40:46:9F:13:B8:2B
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 019E91DCE303875C9BD9D07BD109AFA86728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number: 17E8
Signing time: Thu 04 Jun 2026 09:00:32 +0000
Manifest this update: Thu 04 Jun 2026 09:00:32 +0000
Manifest next update: Fri 05 Jun 2026 09:00:32 +0000
Files and hashes: 1: 2e1cz0qQm98XsgOLRW_MtsZatHo.roa (hash: s7uLnF7oXLpb3y50Cb2KADpe3RUMwrdqTlQV52zh+8g=)
2: GyEClr1YQ4_DWaldbIWVGzirKrM.roa (hash: Hf1oKmBrTqtefmUDpN3mwcJ/zJ6TmhTAUewS81ncFOM=)
3: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: a9AWihNMuJrfDXhbBHJTZ4fV8HRNSr++KNrneYXzLu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:dc:e3:03:87:5c:9b:d9:d0:7b:d1:09:af:a8:67:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Jun 4 09:00:32 2026 GMT
Not After : Jun 5 09:00:32 2026 GMT
Subject: CN=25ceb1f5e01db2bfc17564cc605740469f13b82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:b0:e7:9b:a3:f4:de:a2:f7:41:bf:c0:46:
04:e7:72:21:95:33:df:a9:af:2b:20:e3:a2:6c:05:
49:78:3d:2b:8c:ac:28:4a:94:15:7c:03:d5:fe:39:
3f:32:12:c9:a6:7e:ac:b7:57:ff:bf:e7:7d:c6:f1:
9b:f3:12:3a:71:b6:0e:1f:42:96:3a:42:fe:44:c2:
d9:41:cf:0b:33:95:3d:36:a0:98:53:6f:f5:69:c1:
93:df:73:67:5c:ef:6f:0f:5b:59:4a:03:ba:a7:50:
f9:75:39:fc:e8:09:40:53:dc:86:fc:d5:e5:de:1d:
b0:0f:85:9d:b3:9c:8b:e5:d4:28:65:65:41:93:7f:
f9:f4:f4:16:85:5b:2b:5c:10:3f:e3:2c:63:1a:74:
d7:8a:7f:8e:8f:cd:f1:bb:3c:16:74:a2:ee:71:51:
c9:17:10:18:43:e9:ec:2d:3e:09:38:15:ea:41:53:
08:48:b8:19:e3:6c:a0:14:65:76:a0:a9:0e:28:09:
d1:cc:e3:ac:07:76:e0:ab:c4:4b:69:6c:1d:5d:95:
0b:8f:cf:33:f6:1f:ac:7f:31:0c:9f:8b:ef:65:f1:
eb:b8:fb:6b:90:2d:90:02:ba:42:46:8b:c9:ad:56:
12:55:79:7d:78:0d:1f:91:8a:50:6d:2a:68:48:56:
9c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CE:B1:F5:E0:1D:B2:BF:C1:75:64:CC:60:57:40:46:9F:13:B8:2B
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e6:ef:7f:99:ff:4f:45:17:89:7d:f7:51:2a:69:45:b0:8c:
68:4e:5a:b0:9b:6a:0f:5c:b4:7b:4e:2a:3d:30:4d:2f:b2:e6:
77:ce:d7:17:bd:fc:5c:2b:a2:62:32:b0:5a:e8:73:e5:76:f7:
1a:57:ea:52:e9:92:25:06:5f:45:40:d5:5d:b0:64:ae:cb:fd:
61:e8:07:6b:11:25:fd:96:7b:bf:5f:06:81:b1:5e:4c:25:95:
96:06:47:60:e2:65:22:6b:86:de:1a:82:90:46:18:c7:81:00:
ac:8a:57:9c:49:c4:a7:94:23:32:48:c0:75:b8:6a:7a:95:4e:
7a:76:22:74:fc:13:e9:63:d8:e5:6d:78:ed:a8:0d:80:cb:70:
7b:9d:b6:45:79:88:d5:31:56:8a:ef:6e:a9:dd:d2:89:5d:cd:
fc:51:d7:c0:53:43:d9:f5:b3:09:88:bc:00:18:2c:12:eb:00:
5b:5b:8f:e4:1e:67:b6:c2:bf:94:b0:55:97:00:95:d7:77:a0:
a9:0f:62:13:88:8b:9c:f3:58:e1:ea:d3:59:6d:69:25:ac:03:
62:ec:95:2e:2f:45:2a:e7:da:ed:c0:bf:a1:cd:07:09:01:92:
5a:b1:8a:b3:2d:f0:2d:5d:5d:c6:15:53:5a:dd:04:3d:8e:2a:
ba:a3:2a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:25:17 2026 by rpki-client