Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: YfK8evIDcbUuPRjfB1UUjJu8DQSGPaH97KIcD+BYCZA=
Subject key identifier: 89:07:23:65:D8:44:13:E1:96:B6:45:2F:81:78:39:92:35:9A:C3:D6
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 019D27A92DAE06849FA3402E73FB2A1F84B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 14E3
Signing time: Thu 26 Mar 2026 01:01:31 +0000
Manifest this update: Thu 26 Mar 2026 01:01:31 +0000
Manifest next update: Fri 27 Mar 2026 01:01:31 +0000
Files and hashes: 1: BngoaXPmBES0lcWptUUTkZigcEg.roa (hash: Qe0QVZ+QGm2n+wH6gehbJlOWTxMGZjX9oLD1ObVldNI=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: 32uM4mJt9Arw3eDPARYYYa2Qv2M+GG8BMGSdQSv/fIA=)
3: xcw2R2YD0BpUNlrolf3aKOVApLA.roa (hash: 2wiyEKSnDgQYW+1aN/U9IvVMDBKDQ1GzIsfrU/OlUSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:2d:ae:06:84:9f:a3:40:2e:73:fb:2a:1f:84:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Mar 26 01:01:31 2026 GMT
Not After : Mar 27 01:01:31 2026 GMT
Subject: CN=89072365d84413e196b6452f81783992359ac3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:2c:fa:3e:73:dd:53:fe:b7:5a:e6:cd:44:
2e:96:aa:e3:31:a4:fa:68:a6:1d:9b:55:85:72:46:
f1:21:86:31:8e:42:b0:5f:cc:55:50:46:91:1d:e6:
4e:0e:a8:dd:d5:e2:28:29:00:d3:1e:f4:fa:ae:94:
6d:4b:12:2d:f6:a6:5f:c1:94:c6:79:34:ec:2b:af:
fc:2b:5d:d2:ec:64:09:68:0c:b5:4e:c6:1b:44:d0:
88:9b:e7:54:93:64:c1:78:78:7e:4c:10:aa:3e:52:
6e:49:af:a7:df:a1:7a:1d:8c:2d:e2:16:7b:c8:20:
99:4e:a4:09:8e:b7:75:aa:a6:b6:72:e9:57:67:a2:
21:50:fa:a9:2a:9f:0b:c5:1b:93:1a:1e:f9:c6:05:
9f:8f:09:75:79:47:23:50:52:c7:ea:ce:5a:34:fd:
d8:4b:6c:8c:18:9a:da:05:57:c4:28:eb:44:af:40:
d0:b5:bd:d9:b7:39:b7:c3:65:bf:1f:ed:7f:ad:fb:
e9:4a:bd:96:d0:e5:f3:be:52:70:df:8e:da:31:fe:
d7:db:bc:23:4b:70:70:cc:ae:db:46:c8:bb:88:32:
5f:7e:fb:bf:3a:b2:f1:59:ea:11:28:6f:76:34:0d:
62:9b:55:a2:cb:01:13:9e:59:f1:be:cf:fe:63:0a:
4f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:07:23:65:D8:44:13:E1:96:B6:45:2F:81:78:39:92:35:9A:C3:D6
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fc:fa:f9:c4:6a:7a:27:0e:47:39:0d:ce:e2:0e:1f:05:f6:
04:84:bc:50:39:52:02:53:93:12:44:d5:6e:84:d6:8b:6b:16:
b7:8c:88:a8:26:71:ef:bd:a9:67:df:3e:eb:18:61:6e:a1:49:
0b:8b:89:48:c7:82:2a:ac:01:eb:f5:3a:92:ad:55:f0:c1:a5:
5d:78:57:18:fa:9b:58:87:cc:54:34:58:d7:2e:6b:69:11:04:
11:28:22:79:96:ac:80:13:18:25:c2:3f:2a:5e:38:3f:88:d6:
4c:e6:ac:e5:6f:38:4d:72:a7:5d:4e:55:37:c0:40:4a:f1:2e:
94:41:4f:70:58:bf:e6:01:8e:f9:b7:c1:02:4c:5f:f5:1e:f5:
f6:22:99:2e:9e:a4:18:e0:22:b1:54:2a:83:29:4b:7f:15:6a:
59:f3:6b:7a:d8:c2:0e:f4:db:3f:0b:3b:fe:35:66:5b:1a:fe:
9e:1d:d0:9a:fc:7b:58:af:6e:15:c9:7d:ba:a1:4c:b2:9a:96:
09:8b:78:4c:03:63:d1:cf:25:af:cb:82:a6:06:11:37:d2:23:
0a:f8:b6:85:01:1a:d8:4f:dc:1d:3b:fa:4c:9e:01:bd:21:61:
7f:33:ea:6d:1c:bc:3f:b1:3c:a9:35:1a:2c:17:eb:86:93:24:
35:52:2f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:32:06 2026 by rpki-client