Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
File: vkjMNUiL2ebzErIPx2oQJy8M3to.mft (raw, json)
Hash identifier: 2/nOcGVUkcWfa5AbGKxVuGuY+tyT921+jaarbT4rHwA=
Subject key identifier: 0D:85:9B:5A:4D:98:90:DC:D4:2B:80:A0:08:70:57:B0:52:E1:60:31
Authority key identifier: BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
Certificate issuer: /CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Certificate serial: 01A16C11E90B11756A3942B23355FE34D55F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
Manifest number: 1ABF
Signing time: Sat 24 Oct 2026 04:01:15 +0000
Manifest this update: Sat 24 Oct 2026 04:01:15 +0000
Manifest next update: Sun 25 Oct 2026 04:01:15 +0000
Files and hashes: 1: 1-jVMWvCo1Ia8-NPvjqSraY5h6j8.roa (hash: UbgB51BsUdBtKMnN7GLkK8Ly1Wmd/yhJ431EUB3j0ds=)
2: vkjMNUiL2ebzErIPx2oQJy8M3to.crl (hash: yFeEEwx9YbwQIQLvBzHe/m3/TzvZYjBz9b69injIRhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:11:e9:0b:11:75:6a:39:42:b2:33:55:fe:34:d5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Validity
Not Before: Oct 24 04:01:15 2026 GMT
Not After : Oct 25 04:01:15 2026 GMT
Subject: CN=0d859b5a4d9890dcd42b80a0087057b052e16031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:a4:93:47:b4:05:47:47:ef:76:6b:f3:fe:
8b:3f:66:6b:34:c3:7b:c8:b4:fc:3e:1a:78:b4:d2:
6e:c6:82:de:00:e1:22:14:ce:db:75:5f:1b:de:d1:
74:46:4b:8c:bc:87:c8:60:36:ed:2c:a2:95:0a:b8:
14:e0:2c:9d:73:21:c4:27:e9:14:4c:ce:83:9a:7e:
11:78:ea:ee:b0:61:99:60:3b:b5:b6:a6:46:9b:79:
ee:bc:6f:4f:62:e7:ce:00:f7:15:2c:95:c8:5d:11:
74:20:c4:00:4f:f2:c3:b8:91:c1:48:48:07:57:ab:
bf:1c:d6:78:b7:a7:53:5e:3b:32:39:ca:37:b7:66:
6b:46:de:53:0a:8b:0e:30:e3:ee:16:35:cc:21:95:
71:4b:40:61:f1:c5:8b:20:e4:dd:2b:1e:17:ba:fd:
69:8f:04:ea:a0:20:21:53:ba:94:30:0c:b5:e9:75:
7c:fb:42:6f:10:4f:97:74:98:b2:1e:6a:a0:e9:df:
30:28:70:b8:61:46:e9:ac:a0:ee:ca:bc:d2:8f:f1:
97:f8:62:e7:a6:fc:68:3e:4b:83:17:52:c7:64:d1:
9f:8a:ae:93:3d:df:94:1f:b8:e9:c2:08:b3:b7:13:
f1:e8:e2:e5:15:e9:19:1e:ce:0e:9f:6c:8e:bc:5f:
a0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:85:9B:5A:4D:98:90:DC:D4:2B:80:A0:08:70:57:B0:52:E1:60:31
X509v3 Authority Key Identifier:
keyid:BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a2:2f:bc:26:ab:39:94:63:85:1c:3f:f9:a0:11:43:f8:4c:
cb:43:f5:8c:a1:37:79:13:5f:41:1c:f2:bf:78:61:db:83:96:
5a:d7:e7:ad:92:9c:45:dd:5d:65:ca:fe:ea:53:7b:1b:4c:42:
74:db:6d:db:eb:17:8a:8e:14:83:b4:c1:cc:62:7b:a5:dc:23:
55:cb:e2:80:0f:a3:70:5b:e3:7e:b2:a6:1c:2f:f0:4f:40:1b:
b0:e6:f6:08:77:1b:d4:74:de:db:ff:95:74:9e:34:a4:19:95:
c1:59:a7:49:3e:e5:66:72:60:33:f5:47:32:43:97:ce:16:a8:
1d:82:79:08:b4:3e:2e:c5:1e:68:5d:58:96:59:3d:25:48:56:
bf:da:c9:3a:0c:d3:50:d0:f0:6d:1c:45:56:6d:34:36:dd:44:
b8:50:49:cd:c2:c3:f9:63:93:fe:0f:28:a7:3a:7e:0a:16:3b:
4f:18:a7:c3:f9:4c:88:7a:68:42:66:04:ae:01:b7:bb:f7:be:
92:fa:8b:26:c0:69:bc:aa:a7:92:8c:e6:3e:36:81:66:a6:f3:
ae:1a:21:02:75:87:fd:c4:35:dc:2e:72:a7:99:ed:a2:1a:e3:
77:81:f5:47:3d:66:e9:d6:26:31:c5:1f:e4:61:59:43:c9:e2:
74:57:05:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 09:57:59 2026 by rpki-client