Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier: b4Tio837XtIpCKAELncZCefOmnLnt7ibfuyWkGcpvOY=
Subject key identifier: 86:B2:51:71:C2:D6:18:FE:37:C5:B5:DC:C1:2F:F7:F7:1D:67:05:1D
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 01A126C27E1E3EDC14976BF7D698AD0592B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number: 1867
Signing time: Sat 10 Oct 2026 17:00:42 +0000
Manifest this update: Sat 10 Oct 2026 17:00:42 +0000
Manifest next update: Sun 11 Oct 2026 17:00:42 +0000
Files and hashes: 1: FxlVSI3Pzk5LMHhEN368eliO1Zk.roa (hash: gF++G6xQjDJflZ/Ja5HPf6B0qWFfzOW2mYFsfoVk7H8=)
2: tPyBEO-2bgQWRhIbSkeHYfcbCJ4.roa (hash: 7oVVhFstrQvcK+boD9No6AXtqD2sR6u8SatBlTCoiFg=)
3: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: dx5l9fnRrxo5AEuadiZulPMhpb6qcXY+wdq5uEhYOj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:c2:7e:1e:3e:dc:14:97:6b:f7:d6:98:ad:05:92:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Oct 10 17:00:42 2026 GMT
Not After : Oct 11 17:00:42 2026 GMT
Subject: CN=86b25171c2d618fe37c5b5dcc12ff7f71d67051d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:47:2c:73:b8:83:a2:76:8b:e6:7f:67:b2:67:
6d:4e:2a:70:5a:29:54:23:2d:11:b4:4e:6c:3b:60:
18:e4:0c:2f:33:d0:24:4b:0a:bd:4d:72:38:f8:9f:
e1:72:d8:48:23:23:83:ba:31:1e:ed:f7:0d:3c:a3:
d9:db:e1:f0:04:e0:b3:d1:8a:df:7c:24:37:f6:af:
1f:ae:d0:ca:0c:3b:ca:51:15:1a:25:ea:bc:dc:57:
3c:d5:ed:bc:dd:48:d9:94:c2:92:49:1a:ba:fc:42:
96:04:b2:6b:9b:1f:d9:67:e8:bf:06:f8:39:57:4f:
3f:92:b7:05:1f:e1:32:28:00:9d:77:94:c5:e7:98:
4f:16:dd:d9:f3:e8:ef:c0:3d:46:df:54:8e:29:7f:
9b:f7:80:9c:bc:b2:b7:24:cc:6a:f7:1b:1a:39:79:
c1:f7:3b:b3:f7:21:1f:91:dd:32:43:c1:0b:6d:44:
83:0c:43:46:26:b0:47:6a:12:df:4c:89:d1:d2:3f:
56:15:ee:54:42:11:21:b8:6a:ca:ad:f5:d6:93:4f:
7e:51:6c:b1:c5:57:22:f7:93:53:8f:e8:11:30:4a:
09:0d:87:02:ef:6f:d5:bc:e9:aa:26:9c:f8:ca:2a:
d1:65:ef:29:93:38:48:53:f3:35:67:f2:84:9b:29:
5b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B2:51:71:C2:D6:18:FE:37:C5:B5:DC:C1:2F:F7:F7:1D:67:05:1D
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b1:80:a6:5f:d7:74:47:76:d2:ca:92:dc:85:df:4d:b4:2b:
8f:3f:e6:1b:41:f0:f2:9f:9b:f9:c6:5a:19:89:83:52:e6:4b:
3f:22:13:1a:8f:02:2c:11:00:41:be:e6:c1:fb:94:70:ce:04:
b8:1e:c7:97:d5:aa:fc:ac:07:92:48:7b:88:15:c9:8a:e5:88:
f1:c8:99:e8:e3:e8:f3:a2:1f:e5:0f:4f:c4:51:20:6b:4f:c7:
85:08:05:f4:0e:b9:12:3f:41:af:c0:b7:38:eb:d7:f9:c7:a7:
49:e6:78:20:3f:10:de:28:d3:6c:51:be:b2:44:c2:08:c2:f7:
1b:1b:d1:fd:58:f8:e5:10:8e:a3:f3:1e:c3:37:14:af:e6:d7:
11:89:84:55:95:f9:db:7c:7e:ce:42:d7:2c:64:3b:70:e4:d0:
df:27:8e:84:a1:5c:ab:53:06:d8:64:27:f2:7b:cf:bc:75:fe:
db:bd:b9:06:eb:8f:8d:62:b5:b8:65:4c:49:07:72:c4:6c:37:
f2:ab:95:25:f2:14:a1:66:8e:18:2e:74:02:7b:57:4b:ed:12:
c4:e6:b2:b4:1a:86:ad:be:f1:8b:f7:df:09:c8:c4:5a:64:ab:
7c:7c:05:aa:12:18:76:5e:16:4e:e3:8b:2f:d0:dd:82:48:fa:
68:4b:1a:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEmwn4ePtwUl2v31pitBZKyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDM5OTUyODliNmE1Y2E5NzJjNGI4N2I1ZTMxNDljMzJj
YjQ0MzAwHhcNMjYxMDEwMTcwMDQyWhcNMjYxMDExMTcwMDQyWjAzMTEwLwYDVQQD
Eyg4NmIyNTE3MWMyZDYxOGZlMzdjNWI1ZGNjMTJmZjdmNzFkNjcwNTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ecsc7iDonaL5n9nsmdtTipwWilU
Iy0RtE5sO2AY5AwvM9AkSwq9TXI4+J/hcthIIyODujEe7fcNPKPZ2+HwBOCz0Yrf
fCQ39q8frtDKDDvKURUaJeq83Fc81e283UjZlMKSSRq6/EKWBLJrmx/ZZ+i/Bvg5
V08/krcFH+EyKACdd5TF55hPFt3Z8+jvwD1G31SOKX+b94CcvLK3JMxq9xsaOXnB
9zuz9yEfkd0yQ8ELbUSDDENGJrBHahLfTInR0j9WFe5UQhEhuGrKrfXWk09+UWyx
xVci95NTj+gRMEoJDYcC72/VvOmqJpz4yirRZe8pkzhIU/M1Z/KEmylb+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIayUXHC1hj+N8W13MEv9/cdZwUdMB8GA1UdIwQY
MBaAFL5DmVKJtqXKlyxLh7XjFJwyy0QwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTIt
MzA2MDQ1ZWZjZDY4LzEvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTItMzA2MDQ1ZWZjZDY4
LzEvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbGApl/X
dEd20sqS3IXfTbQrjz/mG0Hw8p+b+cZaGYmDUuZLPyITGo8CLBEAQb7mwfuUcM4E
uB7Hl9Wq/KwHkkh7iBXJiuWI8ciZ6OPo86If5Q9PxFEga0/HhQgF9A65Ej9Br8C3
OOvX+cenSeZ4ID8Q3ijTbFG+skTCCML3GxvR/Vj45RCOo/MewzcUr+bXEYmEVZX5
23x+zkLXLGQ7cOTQ3yeOhKFcq1MG2GQn8nvPvHX+2725BuuPjWK1uGVMSQdyxGw3
8quVJfIUoWaOGC50AntXS+0SxOaytBqGrb7xi/ffCcjEWmSrfHwFqhIYdl4WTuOL
L9Ddgkj6aEsaFw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 03:32:40 2026 by rpki-client