Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
File: VkRaDdykbWQ2d1kSUWqyHUizxhA.mft (raw, json)
Hash identifier: uIoNSuSs031voGH7Bil8JRp6OAxmkm/snR8EMmuFFXo=
Subject key identifier: 28:2F:CB:34:D9:59:6B:6F:9B:0B:40:6F:16:7C:12:B0:59:A7:85:7C
Authority key identifier: 56:44:5A:0D:DC:A4:6D:64:36:77:59:12:51:6A:B2:1D:48:B3:C6:10
Certificate issuer: /CN=56445a0ddca46d6436775912516ab21d48b3c610
Certificate serial: 019F8F7F00204AB6843DEDC1F2031115DB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkRaDdykbWQ2d1kSUWqyHUizxhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:32 +0000
Manifest this update: Thu 23 Jul 2026 15:01:32 +0000
Manifest next update: Fri 24 Jul 2026 15:01:32 +0000
Files and hashes: 1: LICSZW6buSJYk1oARnAFrdmWuFU.roa (hash: TwqDawyRXh5YGrolYDCvMO93/W3FlxRPud+jOp0w8eM=)
2: Rxxwpcxvls8zs8535IZHXRKb8m0.roa (hash: yZE26IiqgT+xbjqM1qO6+eG13lkByw3rPwmmdAx3lE0=)
3: VkRaDdykbWQ2d1kSUWqyHUizxhA.crl (hash: 5Qbr/9pc8+vwHtCNZzaWr+BMHAT76wy3F0Wv1x9k+eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkRaDdykbWQ2d1kSUWqyHUizxhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:00:20:4a:b6:84:3d:ed:c1:f2:03:11:15:db:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56445a0ddca46d6436775912516ab21d48b3c610
Validity
Not Before: Jul 23 15:01:32 2026 GMT
Not After : Jul 24 15:01:32 2026 GMT
Subject: CN=282fcb34d9596b6f9b0b406f167c12b059a7857c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:2e:94:81:24:f4:84:52:4a:3d:92:13:15:
76:3d:4d:38:a5:f7:3a:14:3a:07:aa:95:d7:b6:6e:
ca:a8:8b:ba:78:d1:91:ed:6b:2f:e8:2a:70:97:04:
89:0f:3b:45:1f:ff:8b:89:33:e0:ee:5d:3b:9d:2c:
c6:42:96:b2:7e:58:59:57:5f:09:92:4c:48:b2:2c:
89:ba:4e:51:3a:2f:35:ea:7a:a7:7f:52:86:d2:a3:
45:ba:8c:54:7a:7a:23:a1:cd:79:81:82:e3:cf:6a:
bb:64:02:e4:49:df:8c:20:78:85:c1:df:27:c9:a7:
c8:35:e4:fb:24:d3:76:85:60:b7:42:ee:e3:c8:51:
f5:07:68:37:77:6f:48:ca:77:34:d9:b5:92:d9:b7:
12:3f:9a:a4:61:df:f6:13:e6:84:bc:c1:d6:1c:c3:
d4:60:9c:02:be:c9:ef:2a:6f:13:56:09:59:a9:f5:
94:98:32:17:d8:18:aa:60:6d:ea:fe:b3:ea:7a:8e:
7d:fd:a1:6a:f1:40:f3:e8:ca:8e:ff:48:ac:7a:92:
23:ec:cd:f1:41:65:1c:d0:8b:a6:a9:68:18:b0:59:
b5:e9:b5:81:0b:0b:7c:ed:ad:88:5a:6e:2b:f8:cf:
3e:37:4f:5f:b9:89:10:1f:d5:9e:4a:d0:57:5c:e2:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2F:CB:34:D9:59:6B:6F:9B:0B:40:6F:16:7C:12:B0:59:A7:85:7C
X509v3 Authority Key Identifier:
keyid:56:44:5A:0D:DC:A4:6D:64:36:77:59:12:51:6A:B2:1D:48:B3:C6:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkRaDdykbWQ2d1kSUWqyHUizxhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bf:95:c8:99:54:47:fd:3d:8d:de:11:1b:db:a4:31:6f:14:
bf:3e:33:4a:1f:1e:78:c2:90:b7:67:90:ae:d6:2b:fa:9e:10:
d5:ce:f9:18:b5:7a:99:08:0e:24:c2:de:74:80:b6:2d:dd:6c:
6b:c7:0a:b0:63:e0:1d:b9:58:47:8e:64:2b:25:9c:28:19:db:
7b:4f:7d:34:fb:c2:ed:17:c5:4b:52:33:38:75:ac:12:05:46:
5f:22:05:02:de:d9:6b:38:cd:37:b4:c2:7f:d3:b7:11:f7:16:
88:02:9a:b2:e8:d8:93:6d:dd:75:36:dc:3e:87:4f:82:01:6f:
fa:1f:55:b5:53:71:c3:bd:1f:cb:da:9a:f2:e1:bb:6b:cc:d9:
59:e0:1f:f3:56:44:37:b2:ac:8b:36:63:c0:88:c9:38:4c:17:
0f:7f:d2:da:72:ab:eb:42:45:6a:1e:10:a8:a7:f2:20:24:d2:
9a:88:95:72:a4:90:5b:22:83:1c:db:77:58:02:05:9c:12:8f:
d4:a1:fc:c3:f6:d1:72:f4:28:01:5d:1e:23:f6:0d:e2:c8:57:
22:09:c7:78:1b:c5:e1:70:dc:0d:fb:13:60:de:b9:ac:92:37:
b9:7a:93:bf:be:ae:56:ce:67:79:c3:8c:a2:9c:4f:14:9d:4a:
f9:ac:db:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:55:32 2026 by rpki-client