Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: xZOukzxjd55etWSeulp2O0dpWANlTtGA+8c4eAjtgkc=
Subject key identifier: 65:A0:9F:BD:5A:18:8A:A4:97:1D:0D:87:AF:62:39:0B:CF:F7:CC:8D
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 019F91A3D60DC70B73DB3B879CFECD15E257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 1623
Signing time: Fri 24 Jul 2026 01:01:01 +0000
Manifest this update: Fri 24 Jul 2026 01:01:01 +0000
Manifest next update: Sat 25 Jul 2026 01:01:01 +0000
Files and hashes: 1: BngoaXPmBES0lcWptUUTkZigcEg.roa (hash: Qe0QVZ+QGm2n+wH6gehbJlOWTxMGZjX9oLD1ObVldNI=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: ICXm03U4nOqKsKp3DA6o2Rbw1zUl2r72xYkZW4ZyJ14=)
3: xcw2R2YD0BpUNlrolf3aKOVApLA.roa (hash: 2wiyEKSnDgQYW+1aN/U9IvVMDBKDQ1GzIsfrU/OlUSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:d6:0d:c7:0b:73:db:3b:87:9c:fe:cd:15:e2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Jul 24 01:01:01 2026 GMT
Not After : Jul 25 01:01:01 2026 GMT
Subject: CN=65a09fbd5a188aa4971d0d87af62390bcff7cc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:30:fd:f2:ac:81:36:5d:95:3c:40:c1:9b:
fa:86:18:20:e3:04:c1:c4:54:54:44:ed:00:1a:87:
52:a4:53:7b:b4:f9:a1:77:ef:d4:66:f3:e9:8f:5e:
22:6e:9b:f9:66:62:6e:24:c0:4b:93:ae:54:81:ee:
d3:6b:ca:0c:fb:92:28:40:5f:54:65:d8:a6:92:a0:
53:b5:ba:a7:ca:c3:4c:86:65:54:22:0d:5b:57:74:
70:09:d4:54:8f:48:8e:d8:aa:e7:cd:ab:0c:6c:e7:
0a:85:fe:95:de:e9:ce:0a:ed:9f:81:78:d6:7f:46:
b7:71:89:f5:86:f9:e3:6a:a0:fe:e4:ef:4e:8c:c6:
ac:54:b6:b4:8f:70:72:bf:c1:fc:56:2f:89:07:60:
0f:b3:08:bc:92:18:fb:94:57:d4:bd:d6:df:da:ad:
2f:b6:9b:d5:5d:54:d6:fa:99:37:78:da:9f:a7:75:
6c:ab:d7:91:b2:a7:53:57:8d:04:1d:d7:a0:a5:be:
d1:a6:2a:d1:1a:35:ee:1b:92:e1:8d:12:9f:38:3f:
5a:76:83:e1:ab:6d:8e:3c:2e:84:61:ba:5b:9e:1d:
e2:c0:e9:77:e0:de:1e:59:53:d5:f5:c2:2a:94:ea:
3a:a3:e3:69:33:65:2d:7a:cd:ab:5a:4b:cf:08:c6:
4a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A0:9F:BD:5A:18:8A:A4:97:1D:0D:87:AF:62:39:0B:CF:F7:CC:8D
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1f:6f:ff:ce:71:80:5e:41:37:50:66:34:2e:6a:74:6a:4d:
fb:7b:0e:6f:8b:c2:94:07:0d:d9:36:5a:48:c6:0f:81:1b:0b:
9e:9a:94:9c:c5:cf:f0:cf:22:74:12:39:9e:e6:30:b6:94:51:
d1:40:a8:e2:98:a8:67:f2:98:83:7a:a8:fd:ff:e1:5a:27:2d:
93:77:a6:a7:11:ef:b9:00:ab:5c:c9:45:46:85:e7:aa:56:d9:
fe:e1:a1:f4:16:69:94:c6:90:74:68:93:db:52:99:86:ee:8e:
9d:c1:a0:8d:1d:66:4f:33:b1:1c:ec:df:47:9a:8e:e6:93:4b:
0c:88:30:cc:ed:94:14:bd:2a:38:eb:04:35:6b:84:54:32:ac:
a3:6b:d1:b0:be:ad:eb:ee:c8:42:a8:68:fe:b8:5a:8f:4b:f3:
6f:6e:81:4c:26:fa:42:e0:67:51:1b:ba:76:89:15:30:23:81:
4b:bb:44:88:ba:83:3e:0e:90:71:53:c0:7f:42:5b:16:19:20:
e1:67:35:35:b5:48:8e:d9:1f:ef:e6:1b:8e:bc:90:86:c0:af:
57:01:ac:ee:f7:05:1c:59:66:41:0d:35:16:0f:5a:4f:e9:23:
ee:00:39:73:a7:4f:ec:10:d7:60:1c:d8:26:8d:7d:18:6e:29:
03:8f:cc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:22:09 2026 by rpki-client