Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: 3IOKMiaMz+dR8QH2skBvIilvbj9T15KbjRF9yclR0cQ=
Subject key identifier: 2C:E6:E9:D6:B5:69:58:EA:DD:79:0C:9F:87:FE:8F:81:04:32:1F:9E
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 01A0D426DA156796F01A5597E51C7189A4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 16CA
Signing time: Thu 24 Sep 2026 16:01:50 +0000
Manifest this update: Thu 24 Sep 2026 16:01:50 +0000
Manifest next update: Fri 25 Sep 2026 16:01:50 +0000
Files and hashes: 1: BngoaXPmBES0lcWptUUTkZigcEg.roa (hash: Qe0QVZ+QGm2n+wH6gehbJlOWTxMGZjX9oLD1ObVldNI=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: vJdJCMZKAnY/1hECFO+jpUitVYVf9SOdSH8JETu2H9Q=)
3: xcw2R2YD0BpUNlrolf3aKOVApLA.roa (hash: 2wiyEKSnDgQYW+1aN/U9IvVMDBKDQ1GzIsfrU/OlUSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:da:15:67:96:f0:1a:55:97:e5:1c:71:89:a4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Sep 24 16:01:50 2026 GMT
Not After : Sep 25 16:01:50 2026 GMT
Subject: CN=2ce6e9d6b56958eadd790c9f87fe8f8104321f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:37:36:93:2b:5f:30:d3:a6:2d:c5:83:f4:9b:
c7:92:78:96:77:18:6e:a9:09:ce:9a:80:92:81:13:
20:e2:7b:4f:cc:1b:f4:c4:c9:dd:a1:73:fb:2e:70:
05:5a:ed:23:4c:fa:0e:9c:7d:e3:1b:3d:80:7d:b2:
d9:e8:12:0f:2d:cb:52:8f:30:8c:6a:83:50:bd:55:
09:23:ae:d8:61:bc:1e:70:ba:92:da:28:ee:2c:ff:
7d:d2:36:ab:54:48:7d:ac:8a:1a:ff:7a:e3:e1:ce:
d3:bf:ff:e5:bb:11:fe:72:cf:f5:25:77:8b:f7:39:
15:36:09:91:64:32:b1:c8:b1:0c:6b:d4:2f:e4:87:
d6:ec:d4:0e:9f:0f:cd:f1:93:c2:cf:f7:23:18:4b:
30:14:84:82:9d:fa:c1:3e:d2:f0:cd:a1:d9:1f:ba:
0e:0f:2c:69:f2:e4:7e:19:e5:17:4d:1d:d5:c0:43:
d3:99:e2:c6:d2:7e:48:3e:2a:8b:b0:8d:2d:6b:bb:
32:b2:f8:bd:9c:45:92:93:ed:d6:26:91:ca:60:1a:
e2:05:3c:6f:93:17:1e:4b:55:b8:4c:f5:e7:5e:47:
6b:3b:ad:35:b5:80:9f:45:e3:52:7a:d5:68:9e:b0:
85:98:62:dc:ce:68:1f:6c:d5:95:0e:2b:ec:2e:f2:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E6:E9:D6:B5:69:58:EA:DD:79:0C:9F:87:FE:8F:81:04:32:1F:9E
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d7:12:c2:aa:fe:0d:af:06:41:e1:c9:a9:6c:23:8b:fc:d3:
32:61:90:5f:e2:94:51:b5:9e:bc:2b:9c:4f:e5:64:da:76:33:
e6:1d:73:27:80:6a:84:4c:44:9c:77:a5:d5:d8:e3:03:bc:90:
09:83:90:ec:7c:c3:28:e4:44:de:79:69:bd:9e:1e:50:3b:aa:
b2:ca:dc:31:4c:44:23:cf:e6:eb:7c:92:d3:78:f2:2f:de:a5:
2d:5e:62:74:23:eb:e2:a8:5d:41:26:ed:1d:14:37:6f:d2:2f:
1e:b5:97:71:85:26:fb:26:0a:67:97:d1:29:12:4c:cf:57:7f:
18:26:fc:27:46:58:c9:a2:2b:65:2e:43:ac:7b:5f:ed:df:7c:
ae:b4:7e:bb:cd:6f:cc:6d:25:ce:be:bd:a6:4c:25:81:43:de:
7f:15:0c:63:9f:96:29:d4:31:90:e5:c3:09:4f:00:e9:0d:a0:
05:02:bc:78:14:4a:74:9b:16:aa:0b:1b:ce:da:df:bc:3d:60:
23:64:43:f5:6b:e9:d0:67:f7:f4:67:67:e2:a9:44:79:42:8d:
1e:ad:f6:9d:1e:61:d4:d5:0e:2f:dd:81:c9:08:df:e8:0b:d0:
a5:47:c6:f3:4a:0c:ec:fe:20:3c:20:d7:8f:93:c5:b4:c3:64:
f5:28:b8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:45:49 2026 by rpki-client