Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier: 4zOxuQO0aZpXrqiQkoo2D09j2usFBJvMaLubr45aH9o=
Subject key identifier: 5A:53:F5:54:07:CE:34:DD:93:42:85:2C:BE:58:8D:18:42:95:60:2F
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 019D265ED55A3FD439DAD0F87649C5D62B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number: 125A
Signing time: Wed 25 Mar 2026 19:00:42 +0000
Manifest this update: Wed 25 Mar 2026 19:00:42 +0000
Manifest next update: Thu 26 Mar 2026 19:00:42 +0000
Files and hashes: 1: R1X-0N_qCuCvnv8CkB9Z_OSw2o4.roa (hash: D3kS568Iv2wmPNkEcgVaGHK64PzLTmFGbe9n3gWj/eM=)
2: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: DUGJsxR+QGKRdTBXRwlIFGtEVzDWmiyhDt8XPlwVFH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:d5:5a:3f:d4:39:da:d0:f8:76:49:c5:d6:2b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: Mar 25 19:00:42 2026 GMT
Not After : Mar 26 19:00:42 2026 GMT
Subject: CN=5a53f55407ce34dd9342852cbe588d184295602f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:14:a0:ae:80:d4:6f:d6:ce:30:38:00:96:6b:
02:f6:f0:56:34:38:db:1e:8d:04:07:45:da:b3:05:
50:21:bc:01:f6:f8:bc:53:e6:d2:aa:c7:c6:f9:0e:
aa:dd:01:a0:91:d9:7f:66:2a:f4:bf:33:60:68:18:
c5:6f:f4:c5:a0:a1:4d:bf:15:fa:f6:51:8e:31:c8:
f5:97:51:29:e9:80:13:a0:f1:6a:f0:66:84:db:22:
cc:c6:da:f3:a6:7c:c0:28:c2:83:af:b3:8c:97:82:
00:e9:b0:75:74:49:bd:e4:ab:2d:99:d8:db:48:60:
ea:61:39:99:f2:8f:db:d7:f7:7b:63:fb:21:49:80:
c0:f3:bc:a0:d5:e3:9e:ca:63:17:f0:c8:ff:3a:02:
7a:5b:26:15:6c:bd:95:38:e4:46:7a:b3:78:42:e0:
59:d4:e5:8a:5e:bd:e5:c2:a0:92:bd:19:b1:67:5c:
08:06:94:fe:9c:9c:46:f5:fc:92:17:91:79:e1:96:
72:50:79:6f:cd:0c:f0:f1:ab:9a:48:18:25:45:ca:
dd:a5:bc:d1:31:e5:11:17:c1:f8:36:8a:c6:92:1f:
81:12:1b:46:79:45:66:d5:91:ca:4c:34:a6:f4:29:
2e:51:b6:fb:77:ef:cf:f1:d5:82:f3:be:c4:24:98:
bd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:53:F5:54:07:CE:34:DD:93:42:85:2C:BE:58:8D:18:42:95:60:2F
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:da:df:a6:06:41:c5:aa:3d:2b:20:6c:e0:bc:7e:b9:d8:5c:
6a:c6:1d:80:75:5f:f6:63:93:2e:30:0c:ad:95:a5:e3:9d:0a:
31:70:73:67:bb:58:ae:04:d9:16:7b:8e:0c:17:38:27:9f:79:
4b:15:13:b8:c7:8a:e4:1a:62:88:94:dd:f0:51:0c:f4:55:7a:
78:f6:26:2a:d6:b9:14:b5:cd:1b:21:2c:f5:f8:aa:98:3a:7a:
f7:4c:d7:47:32:ad:4e:08:2b:1c:39:0b:1a:21:54:2a:bd:96:
04:5b:f8:e5:1b:40:d4:64:84:f3:f1:db:e3:dc:99:a0:41:67:
83:76:eb:42:d7:b5:59:55:29:c1:2a:19:64:07:2d:0a:3c:d4:
40:25:a1:0a:57:c1:54:b1:39:c4:e9:a5:99:35:c3:4d:d1:9c:
1c:34:06:f0:ca:e3:ff:63:7c:79:e8:b1:56:be:a1:7c:80:a4:
d0:1a:37:54:9f:a5:d1:73:21:2c:47:1a:c9:86:6e:71:fe:8e:
cb:b3:bb:1d:5f:e3:38:b4:3c:b2:85:16:10:9d:fb:02:0e:e9:
68:bf:98:01:90:39:15:49:f9:f1:7a:29:58:26:a2:6e:ea:73:
a0:7d:6a:5e:65:87:ae:d4:5b:14:7b:d8:09:b1:2c:6e:37:f1:
27:55:85:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:52 2026 by rpki-client