Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
File: vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft (raw, json)
Hash identifier: P8KKB79j8NEdkamEVVvFv3h0LkxnaN/rTpMrJJ8lJ0Y=
Subject key identifier: 96:6C:0F:91:EC:4F:80:FB:12:DB:5F:9C:F6:48:E7:94:CA:29:B4:01
Authority key identifier: BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
Certificate issuer: /CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Certificate serial: 01A1DC82C1BF9EA19BDEC10982743C0280CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
Manifest number: 0170
Signing time: Sun 15 Nov 2026 00:01:59 +0000
Manifest this update: Sun 15 Nov 2026 00:01:59 +0000
Manifest next update: Mon 16 Nov 2026 00:01:59 +0000
Files and hashes: 1: Dgm0yJxRGKkWzuCmtXAV_Sap5C4.roa (hash: iEzyR4D1PeG/2/gt5MrfspiuGu469FZd2g1heNAGkMA=)
2: GNjrvjIiN-OXUdCPEIpZchNO6Ys.roa (hash: isKT3r2eXooAKP6/3EQPs1CjALz2zfPJBsvBDqAhScY=)
3: vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl (hash: hgt1qF36OHNhq975YGsRr+nuLHiizMilOxoD/BcIoI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:82:c1:bf:9e:a1:9b:de:c1:09:82:74:3c:02:80:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Validity
Not Before: Nov 15 00:01:59 2026 GMT
Not After : Nov 16 00:01:59 2026 GMT
Subject: CN=966c0f91ec4f80fb12db5f9cf648e794ca29b401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:d6:37:c9:e5:74:d0:94:d2:c3:38:41:1d:
9a:d4:c9:10:86:9c:05:36:e5:5c:30:8c:33:b7:d8:
86:6c:3f:b0:c5:96:2a:87:5b:1a:fb:0f:c3:1b:d8:
11:46:23:fd:74:b5:94:33:82:ed:68:e6:3f:8e:0d:
4f:f3:e4:f6:b1:47:f2:12:61:8d:f7:d7:ca:da:3f:
24:a4:fe:a4:ee:81:e0:a4:49:7a:ec:c0:b4:df:bb:
fe:63:13:af:13:84:ac:d2:87:78:ec:93:03:7f:d3:
6c:67:85:93:67:ff:6d:ac:c4:84:eb:a7:c8:6e:e3:
3d:75:b1:ff:e8:c0:b0:57:3a:7b:a5:d9:15:c4:7b:
35:cd:ef:f0:e0:b3:54:01:97:7b:89:5e:6e:06:fe:
7d:44:04:b6:1f:71:53:c7:99:71:f1:1b:a8:5c:ad:
6e:ab:d5:ec:18:d7:dd:ae:5e:5f:0f:00:9f:e3:1b:
0b:be:74:e6:7e:a4:64:0c:dc:2b:f0:89:72:20:0f:
e6:04:71:c1:77:2e:fa:8b:5e:03:87:72:11:6e:e8:
af:10:06:87:bb:5b:71:a9:9e:b3:2f:61:b8:e9:7e:
59:7f:63:53:03:65:30:25:76:e5:a9:34:d3:e7:33:
67:7e:c4:fc:2a:e7:e8:dc:d7:59:a9:99:50:39:c7:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6C:0F:91:EC:4F:80:FB:12:DB:5F:9C:F6:48:E7:94:CA:29:B4:01
X509v3 Authority Key Identifier:
keyid:BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d0:85:46:cd:a8:83:1c:3b:79:7c:b7:8e:9c:81:59:8e:a1:
14:48:c9:9c:f1:56:58:4e:2f:7a:60:79:2c:1d:10:4a:b0:3e:
fb:85:a3:6a:62:8c:c3:62:df:69:7a:be:bd:95:46:ae:d0:70:
f2:d6:42:14:da:11:19:3c:15:a1:1c:7f:a6:f8:78:82:10:6c:
1b:6a:a0:c9:86:b3:50:06:16:3d:07:a3:5f:82:e7:43:f6:57:
e3:62:cc:cf:76:eb:e8:ca:d8:1f:06:c6:26:6b:b5:2b:d0:f6:
6a:f4:96:5d:89:3d:ba:dc:80:58:de:29:0c:0c:ba:28:e3:d6:
e4:e3:c6:ff:42:44:9c:fe:ad:19:09:10:c3:9f:78:81:0d:dd:
d1:9e:b7:78:38:a7:20:de:bc:21:fb:1f:4d:cb:4e:b3:12:9b:
e4:b4:72:b6:49:68:e8:b1:87:01:36:d4:7a:b5:82:62:53:c5:
09:1e:b7:f6:a1:a1:83:63:f2:3a:8e:4d:b5:c1:55:19:be:cc:
69:09:7b:4f:f6:0f:7a:0e:7a:5a:bd:4a:a5:ca:80:a0:c4:81:
ab:6a:d4:6b:65:36:9a:3f:70:4c:64:c3:a8:7e:00:af:c2:b9:
07:be:9a:e5:3f:49:b2:32:25:c5:14:0f:60:2f:81:15:96:02:
8b:39:18:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:26:35 2026 by rpki-client