Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
File: vkjMNUiL2ebzErIPx2oQJy8M3to.mft (raw, json)
Hash identifier: oVbYKKp1R+NwhO5LSIDoLNu/V6Ze78rYa42w3bU6yfg=
Subject key identifier: DC:D8:29:52:E6:DE:18:8E:88:6E:B3:31:75:7D:B7:0F:56:C8:86:8D
Authority key identifier: BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
Certificate issuer: /CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Certificate serial: 01A06F1504C327A5BA67A8FEE3C52B78932E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
Manifest number: 1A3C
Signing time: Sat 05 Sep 2026 01:00:43 +0000
Manifest this update: Sat 05 Sep 2026 01:00:43 +0000
Manifest next update: Sun 06 Sep 2026 01:00:43 +0000
Files and hashes: 1: 1-jVMWvCo1Ia8-NPvjqSraY5h6j8.roa (hash: UbgB51BsUdBtKMnN7GLkK8Ly1Wmd/yhJ431EUB3j0ds=)
2: vkjMNUiL2ebzErIPx2oQJy8M3to.crl (hash: khl+7YnsnRTrGKBm52OYSqDbMuGuihjN0MtNK5r8XFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:15:04:c3:27:a5:ba:67:a8:fe:e3:c5:2b:78:93:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Validity
Not Before: Sep 5 01:00:43 2026 GMT
Not After : Sep 6 01:00:43 2026 GMT
Subject: CN=dcd82952e6de188e886eb331757db70f56c8868d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:bb:51:6c:3b:29:03:7c:3d:8c:6c:cc:44:
cc:6f:a4:b2:7a:a2:1b:e1:18:a7:8b:5f:8f:9b:d1:
e8:e1:ea:7c:69:44:25:44:e9:23:45:15:1b:e7:91:
42:2f:7c:17:06:93:8e:ad:3d:e3:34:72:bc:31:39:
17:cf:28:b7:15:32:cb:4f:33:24:f3:d5:8b:6e:ea:
af:e6:d2:6a:b7:77:2b:81:4a:83:5c:3b:e8:94:8b:
f4:50:05:84:02:85:16:09:c1:26:4b:cc:59:58:fd:
e8:0f:3f:30:3a:42:f9:99:ac:44:a7:52:10:4d:08:
4a:3c:bf:e8:d0:0e:cc:02:56:00:ce:dc:97:fe:8f:
f3:50:e7:04:a9:60:15:ed:25:c5:3c:25:23:f8:51:
7a:4c:f1:d1:b5:97:c2:b1:6e:d4:66:91:ca:33:ba:
fa:6b:01:a5:a9:f9:d8:41:bb:2a:c6:95:d2:29:02:
83:27:74:a9:92:ff:d2:38:f2:1e:86:cb:2a:df:12:
63:12:e7:85:91:91:7d:e1:37:ce:ba:19:f0:59:70:
d6:4b:97:4c:cd:8f:7b:29:3e:d9:5e:3b:0e:65:72:
7f:82:6e:56:5b:5d:11:52:ca:98:37:ba:d7:e8:9e:
e4:63:2e:f8:44:45:0d:27:20:a0:52:ca:4d:69:9b:
c6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D8:29:52:E6:DE:18:8E:88:6E:B3:31:75:7D:B7:0F:56:C8:86:8D
X509v3 Authority Key Identifier:
keyid:BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:06:ab:78:4d:ba:c2:96:7a:79:70:43:0a:7c:05:4d:60:12:
0c:1e:89:fa:e8:3d:1a:2d:49:bf:ab:ad:b1:11:ff:9b:63:55:
e8:18:bc:e1:4c:29:87:10:1d:90:f1:29:54:56:ac:f6:7d:e0:
5e:6a:52:99:d1:00:a6:ab:19:6a:ad:e6:5d:a4:af:39:d2:5d:
d6:08:69:f0:14:ee:40:61:34:66:1a:04:8b:ff:ac:df:24:8a:
65:e4:d8:85:45:d2:55:92:8e:f6:e9:03:7b:59:73:3b:cd:9f:
35:86:7b:0e:84:36:42:4b:19:59:59:64:0c:c5:4a:6d:24:a1:
61:4f:7b:49:19:28:21:fb:29:db:a3:ea:bd:a4:2b:b9:09:8c:
11:7b:40:71:eb:26:27:b3:ff:a4:98:02:0e:e3:b0:8b:bf:41:
18:2b:4d:e7:5d:d5:f9:7b:3c:f1:28:6b:bb:bf:c7:a2:36:3a:
70:6b:1e:e1:37:3f:7b:6c:a4:e0:04:5c:a0:64:a3:e8:42:1f:
f2:49:b1:2b:74:2f:07:8e:94:d3:60:9e:6d:5d:e4:c4:56:b5:
73:82:1a:0b:6f:13:be:a1:0e:0e:af:28:78:aa:96:b0:18:fc:
41:9f:d4:a8:be:f9:6b:1b:c1:8b:53:8c:30:80:69:8e:40:36:
de:e8:3d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:37:47 2026 by rpki-client