Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
File: vkjMNUiL2ebzErIPx2oQJy8M3to.mft (raw, json)
Hash identifier: Z9X4b0A389RiyRCKocbtXZ3jMau/byjiHwEpl0NsaoU=
Subject key identifier: 61:E6:B4:DB:2B:87:28:09:18:8E:CE:B4:4E:7E:56:AC:72:C6:A0:35
Authority key identifier: BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
Certificate issuer: /CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Certificate serial: 019E9214B5300E7E4D90B7E34DEA8566F50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
Manifest number: 1945
Signing time: Thu 04 Jun 2026 10:01:30 +0000
Manifest this update: Thu 04 Jun 2026 10:01:30 +0000
Manifest next update: Fri 05 Jun 2026 10:01:30 +0000
Files and hashes: 1: 1-jVMWvCo1Ia8-NPvjqSraY5h6j8.roa (hash: UbgB51BsUdBtKMnN7GLkK8Ly1Wmd/yhJ431EUB3j0ds=)
2: vkjMNUiL2ebzErIPx2oQJy8M3to.crl (hash: uPf936GipqsZbLo9UV2DZ4vqRIPtptjqeZ8zcsju/Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:14:b5:30:0e:7e:4d:90:b7:e3:4d:ea:85:66:f5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Validity
Not Before: Jun 4 10:01:30 2026 GMT
Not After : Jun 5 10:01:30 2026 GMT
Subject: CN=61e6b4db2b872809188eceb44e7e56ac72c6a035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:5b:b2:2c:6f:7d:7d:87:f9:aa:e8:94:80:
68:a8:b8:67:c5:e7:e4:25:1e:90:8d:1a:55:db:fe:
f3:f2:e6:69:b8:14:3e:d6:19:e1:7b:08:b1:b5:b7:
fd:cc:11:62:3c:37:55:12:0e:61:37:76:d8:3f:72:
f9:7f:58:af:ed:5f:12:fa:ab:82:7e:9b:9f:20:8d:
7b:f5:e0:74:5b:1c:a1:c5:d1:90:62:0f:7d:70:a2:
f2:63:33:3b:60:90:de:a7:a8:c9:a9:f8:e6:f4:f5:
3d:b5:19:80:bf:9f:dd:d3:bb:9b:79:e4:e5:87:3c:
28:e9:93:25:38:e9:83:f9:f4:d5:b1:f3:a5:63:d5:
a1:6b:b8:9b:22:92:c6:95:2d:00:e9:4b:1c:92:bd:
87:94:77:25:0e:8e:d1:78:d4:1a:94:84:37:1e:26:
58:97:8a:98:1f:96:d6:02:fa:03:81:d5:a2:8d:43:
e2:37:06:86:84:c8:32:91:ba:4c:a4:ba:7a:e9:66:
72:02:be:df:5b:54:50:70:f6:3b:25:70:a5:f0:f7:
f1:1a:f1:e5:b4:b2:2c:32:09:93:98:03:f7:12:87:
39:95:cb:bd:c4:f8:57:9e:9f:83:37:d1:36:85:5c:
92:af:4a:5e:68:f7:b3:de:a3:a9:0d:2e:f0:6a:47:
9d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E6:B4:DB:2B:87:28:09:18:8E:CE:B4:4E:7E:56:AC:72:C6:A0:35
X509v3 Authority Key Identifier:
keyid:BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d1:fd:9b:a4:33:82:e1:e1:77:72:49:34:eb:00:34:50:45:
ee:38:9d:3a:80:43:bf:b1:72:c6:56:e1:52:32:08:c6:60:9c:
0e:3d:93:cf:eb:fe:4d:57:59:b3:09:a9:33:ad:ae:d2:8a:34:
56:19:b1:c4:11:cf:7c:08:e1:e8:f2:8c:22:74:01:23:0a:f3:
97:86:83:88:97:00:df:1f:35:18:56:9c:0d:1f:c8:ce:91:4f:
58:e4:b0:7a:0b:32:bf:74:08:bf:83:a2:18:ab:5e:f0:e8:e0:
c5:44:14:df:f2:fb:4e:02:a2:fc:8d:22:5e:f4:39:14:b2:36:
fa:8c:63:b1:07:91:db:03:94:ed:d7:6f:d3:1a:b7:84:de:71:
c5:29:33:5a:3c:ab:b5:56:a9:ec:b8:0c:a1:87:e5:75:d2:a3:
2b:79:3b:fc:8f:3f:40:fb:1a:d7:01:9f:a1:92:b9:0a:37:f2:
fa:f2:85:d1:53:a9:24:5b:f4:7b:58:bb:06:db:0d:c2:bf:17:
a2:22:81:b3:04:20:1a:37:ba:98:7e:a7:5f:33:91:1f:a8:0e:
1d:bc:50:c4:25:0c:51:b5:ec:b5:02:34:35:34:de:1e:2b:dd:
98:31:51:2f:74:e0:3e:44:a4:42:23:8f:e9:75:3e:f7:71:4f:
ec:bb:c1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:22:46 2026 by rpki-client