Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier: hUON+YXfu7ZkMQGQoj2hGST58Regxs+9lCdIDpWzNGQ=
Subject key identifier: D7:41:AB:72:3A:3B:4F:51:BD:41:54:6C:79:6B:F5:F6:20:59:14:23
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 01A128B0E4634446A70CD5CFBB806C97A800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number: 1868
Signing time: Sun 11 Oct 2026 02:00:43 +0000
Manifest this update: Sun 11 Oct 2026 02:00:43 +0000
Manifest next update: Mon 12 Oct 2026 02:00:43 +0000
Files and hashes: 1: FxlVSI3Pzk5LMHhEN368eliO1Zk.roa (hash: gF++G6xQjDJflZ/Ja5HPf6B0qWFfzOW2mYFsfoVk7H8=)
2: tPyBEO-2bgQWRhIbSkeHYfcbCJ4.roa (hash: 7oVVhFstrQvcK+boD9No6AXtqD2sR6u8SatBlTCoiFg=)
3: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: D5/bJMCWDpmeEO7nyzW3W+PyHl5IVQigMBY5FRNtqgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:b0:e4:63:44:46:a7:0c:d5:cf:bb:80:6c:97:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Oct 11 02:00:43 2026 GMT
Not After : Oct 12 02:00:43 2026 GMT
Subject: CN=d741ab723a3b4f51bd41546c796bf5f620591423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:b6:64:3a:7e:28:85:25:a8:ca:01:a0:f1:
08:3c:db:7e:29:31:04:fd:36:30:8e:2e:13:1b:e9:
b4:a4:03:c5:15:47:0f:8f:32:45:d4:a0:55:0e:19:
e7:55:f1:77:bc:c4:0e:f9:1e:97:2c:66:95:b9:e1:
f4:32:b9:d5:58:36:6a:c0:ad:fa:e9:de:14:79:39:
4d:7d:a4:67:e4:56:74:09:91:15:f3:64:c2:9d:e8:
fb:be:8e:c0:62:ef:fd:6e:70:11:ae:16:65:72:a3:
31:34:6b:16:56:e5:ba:aa:2f:3b:8d:0d:72:ac:0c:
37:b8:f9:ae:b2:f0:1a:8f:ba:b6:cb:41:20:cc:11:
9a:56:62:92:f9:71:4a:87:4c:68:36:0b:1e:23:d2:
30:3b:97:21:e7:14:b1:ef:0c:91:96:a6:fc:1e:e5:
51:49:ba:e6:26:a1:07:d7:44:65:c9:8b:16:74:3b:
a9:a3:7c:e4:78:a2:ac:5a:98:a4:2a:27:e8:3c:5d:
13:4c:b3:46:fb:64:60:26:53:24:ab:9f:0b:4f:df:
ef:63:1e:5e:76:0f:f8:ef:3f:fb:91:05:b8:25:38:
7c:c4:c9:02:f8:ca:f5:ca:8c:d1:9c:80:d5:4a:9d:
51:d8:d3:53:bf:40:51:8d:31:d7:87:97:d6:55:31:
7c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:41:AB:72:3A:3B:4F:51:BD:41:54:6C:79:6B:F5:F6:20:59:14:23
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:12:0f:ac:38:9f:97:4c:1d:1d:87:8e:2a:8e:b9:9d:f2:6c:
7c:09:43:b9:6c:6e:45:6e:7f:fb:d8:2c:84:05:0d:8e:11:50:
90:52:15:a1:70:a5:20:20:5c:17:16:a5:ee:7b:a2:91:3c:68:
a2:16:b7:fd:a4:a6:b7:ef:b4:6a:73:71:d4:16:ee:c0:fb:42:
98:ce:71:92:f6:0f:49:b3:7c:1f:93:4f:87:fe:c4:72:23:2e:
23:a5:d1:84:5d:0b:b4:8c:f0:f1:da:98:1b:ba:cd:db:f7:97:
84:7d:4f:82:ce:32:72:0b:ef:05:6d:21:44:1e:07:95:71:d3:
67:cb:7a:c3:87:d6:f8:7c:fc:2c:22:38:4c:d1:ee:f5:a7:a9:
a4:14:0a:c4:a6:1b:9c:41:66:14:e2:76:66:be:b2:eb:9e:02:
d3:cc:a8:a8:18:ee:01:eb:38:4e:9f:0a:3e:86:26:c4:de:00:
52:8f:ea:0b:9d:50:8f:76:96:69:7e:3a:1e:7f:b7:7e:cd:25:
37:d4:46:7d:5f:8a:e9:13:7a:8b:98:e7:f1:18:c5:28:a4:d7:
97:53:af:cc:72:e4:05:29:fe:77:d0:8c:6b:2f:55:a7:a0:e4:
7c:2a:f1:31:c2:b6:37:3a:10:03:7e:6f:d9:82:d8:0a:2d:a8:
7d:2e:1d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:19:27 2026 by rpki-client