Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier: jc2ItNlkKrClSTnscVlt3ITp8GuTgwxNTQnwOnRubJ8=
Subject key identifier: 70:8D:FF:EC:AB:32:59:59:45:4B:75:7E:F9:1D:98:7F:0C:25:B2:04
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 01A0D9BAA756868CE9934AE26516C143F8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number: 1445
Signing time: Fri 25 Sep 2026 18:01:23 +0000
Manifest this update: Fri 25 Sep 2026 18:01:23 +0000
Manifest next update: Sat 26 Sep 2026 18:01:23 +0000
Files and hashes: 1: R1X-0N_qCuCvnv8CkB9Z_OSw2o4.roa (hash: D3kS568Iv2wmPNkEcgVaGHK64PzLTmFGbe9n3gWj/eM=)
2: YqVzzltVIPdeaSwCpyQY30xpr1w.asa (hash: WikOOkK+XwRTMCM7gYW5rQHy5y4vCTIDLGljHlXKP5E=)
3: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: 8+Vzb3ihNeNEiXHZimNCPBtWX9iHDRow+tlp6Kq8uCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:a7:56:86:8c:e9:93:4a:e2:65:16:c1:43:f8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: Sep 25 18:01:23 2026 GMT
Not After : Sep 26 18:01:23 2026 GMT
Subject: CN=708dffecab325959454b757ef91d987f0c25b204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:f9:20:9b:af:0a:f1:cc:5b:99:c0:21:83:
37:93:0c:ce:1a:57:e9:8c:89:43:46:2b:7a:30:a7:
e8:a7:6c:ba:ef:c3:26:78:22:ce:ee:6a:d7:d6:df:
32:30:40:10:9c:0c:5f:c1:73:13:55:06:61:f6:46:
1d:4c:93:2a:5e:e2:c4:0c:dc:c2:63:58:07:3f:db:
9c:cb:f2:b5:b2:44:1a:31:5a:48:03:df:1b:41:50:
4c:ba:b7:41:b1:fb:79:27:08:fa:15:06:e4:51:7d:
25:b7:7a:d8:1e:61:97:92:79:19:75:8b:a6:4f:c9:
d7:44:24:20:e5:d6:17:4e:75:c2:00:b3:bf:06:dc:
c1:dd:69:be:22:28:a5:04:dd:cf:53:cc:ac:00:89:
b0:63:0c:6e:53:09:07:84:92:95:74:5f:17:61:1f:
ab:fb:cf:4c:40:23:2e:33:ae:69:40:fa:56:6f:4c:
8c:83:a2:e6:39:45:11:71:e1:a2:cc:7e:c3:ef:1d:
61:6e:8b:8a:0e:5d:a4:0b:1b:13:1b:f5:57:dc:ab:
c0:7a:0e:5c:80:1e:e1:f2:e4:e7:11:be:08:ec:ed:
ba:dd:8b:6a:a0:2d:87:a0:cd:ab:0e:44:7c:05:f8:
e4:7d:e2:e4:56:8c:dc:4b:0e:b4:f8:4a:73:a0:2f:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8D:FF:EC:AB:32:59:59:45:4B:75:7E:F9:1D:98:7F:0C:25:B2:04
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1e:ca:24:f1:6f:d8:28:fc:62:fc:bd:9b:b3:01:69:48:29:
77:13:79:72:46:48:25:98:b0:7f:db:a1:b8:55:c5:0b:16:14:
ab:95:f9:7b:25:c6:30:96:a3:26:2d:a3:78:5b:f1:56:d7:b8:
cd:32:01:9f:93:0a:1a:3a:88:c0:d9:93:c4:a3:59:65:52:c3:
e1:a9:59:46:00:1b:69:c3:5f:15:e2:53:e8:78:f6:0f:53:b6:
70:7f:95:03:6c:fd:e2:3f:5b:80:e4:37:b4:e9:a1:28:23:63:
cf:52:83:41:cd:46:cc:28:d8:23:a7:0f:7f:eb:4c:80:69:17:
f6:c1:5a:be:39:6a:01:59:33:2b:f4:4a:b4:f8:78:1f:81:75:
3f:a4:cb:af:5e:d7:88:54:b9:e0:b3:c6:02:fa:30:9f:ee:9e:
34:ca:92:8f:f1:90:e8:9c:e6:9a:e5:fb:5d:da:ee:e9:61:c2:
e6:fc:63:aa:02:f0:00:28:99:b5:e1:37:13:6b:f1:98:c5:7d:
5b:9f:4c:ad:9d:e7:ac:2d:8c:df:89:e6:1a:34:3b:18:5c:52:
96:09:6f:d0:99:42:1a:95:9e:54:d5:d9:57:bf:da:63:fa:57:
e6:80:69:d9:48:0b:62:6b:24:26:fb:1b:75:d4:cb:5a:9b:2b:
2f:36:b3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:51:44 2026 by rpki-client