Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
File: VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft (raw, json)
Hash identifier: juXiDYqT65pkjPW6zvHH8W24r87rxh2o2qcrg+w8A30=
Subject key identifier: A3:9A:10:FE:1F:01:6C:FE:A2:FD:D4:53:3F:9E:62:0C:45:E6:D5:13
Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
Certificate issuer: /CN=5643415c22e141972c0d7e76c24e88b22427b024
Certificate serial: 019D33758FCCA210EEBA634F3351B80922D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 08:00:35 +0000
Manifest this update: Sat 28 Mar 2026 08:00:35 +0000
Manifest next update: Sun 29 Mar 2026 08:00:35 +0000
Files and hashes: 1: E9XmR3-Bi9_XHIyVFPe__9RBWrE.asa (hash: ObdWbxrxyYN88ZVvVzbAmIbulsDo3X2Gi1Jf4mXfLOY=)
2: TgRImO7QCLoIe--xkdVlgWa3wjM.roa (hash: ZBNDhLKYbt3L/BOlUHPdJXGaOnbVt4RZzzrFkmwYfqo=)
3: VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl (hash: Qoq5GyLuIEAh7oG53aIR8Jp3zgffTASTQ02LRz0YBhI=)
4: qwMC2NCtYrZV2QDu2Av1DyMlIXE.roa (hash: pG2SeA0IgC+0M3Ig05IRMC7RLGL2RBI+OUUaT62RBBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:8f:cc:a2:10:ee:ba:63:4f:33:51:b8:09:22:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024
Validity
Not Before: Mar 28 08:00:35 2026 GMT
Not After : Mar 29 08:00:35 2026 GMT
Subject: CN=a39a10fe1f016cfea2fdd4533f9e620c45e6d513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:b2:c2:2f:6c:f4:d1:25:ba:c2:e4:2e:b2:
5a:67:38:ab:cc:a2:42:83:dd:e5:ac:99:04:e3:6b:
49:79:ba:b8:a3:e9:4a:a5:2d:cc:3d:bb:0c:b0:d9:
9e:af:12:76:d5:57:7a:4c:ab:7d:da:84:c2:5e:da:
dc:fd:b1:07:ec:fe:ff:a6:0a:da:9d:2e:32:85:29:
48:68:3a:11:a2:e2:d9:06:58:e0:7b:5a:31:ac:d9:
23:26:7f:64:dd:83:89:f8:f6:98:55:2b:fb:b0:a0:
a7:9e:fa:f2:e3:fd:22:2c:79:ca:37:ee:8a:13:8a:
a5:2e:b9:b0:24:bb:3e:89:1c:98:1f:de:d8:46:e3:
3e:6a:b9:33:cc:4f:61:0e:1a:ab:d5:07:ee:67:72:
bf:54:2d:3b:6d:8c:6b:8a:09:02:ba:39:67:c7:18:
c2:e9:b2:d3:bc:cd:1f:9f:a6:b7:2e:b7:5d:20:f1:
90:5d:2e:0c:6d:c5:dc:a3:66:32:7d:96:be:16:18:
5a:66:c8:29:44:33:ed:cd:29:9e:5e:c7:e6:2d:6e:
1c:d6:13:44:70:68:81:d8:06:0a:f7:e0:ad:67:b8:
64:43:b2:1e:dd:d2:d5:03:24:02:8f:ad:df:05:dd:
03:c7:e8:3e:9e:e1:34:19:01:82:04:b9:8d:97:17:
f1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9A:10:FE:1F:01:6C:FE:A2:FD:D4:53:3F:9E:62:0C:45:E6:D5:13
X509v3 Authority Key Identifier:
keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:68:f9:93:b3:54:15:d0:2f:98:6f:c2:92:87:b4:fd:31:17:
99:45:b1:e2:f4:90:63:d3:7c:0d:1a:52:8a:3a:f0:b3:ac:b2:
7a:e0:4a:6c:43:e8:18:4b:43:cd:a4:7e:86:c2:08:e9:35:b9:
b4:23:23:77:8c:9e:f5:68:1b:19:77:b3:a4:e5:25:92:b7:86:
1b:db:47:ad:11:97:4c:0b:5f:6f:b3:22:5f:61:0f:ee:81:24:
87:e4:c1:b4:b7:e3:c9:71:26:07:08:12:7f:bc:58:e8:64:3b:
55:c6:e4:41:4e:1a:4f:f8:92:0b:71:fa:7f:ee:97:72:e4:eb:
66:89:23:f8:7f:2c:30:b4:97:0d:d7:75:c1:ff:93:ad:81:96:
0d:6f:d2:62:19:10:64:8a:78:2e:8a:48:71:28:18:38:16:a8:
27:7f:e9:d0:49:ad:99:af:e5:ec:78:d6:86:68:23:38:fe:07:
9e:cd:53:cc:02:42:01:14:aa:54:1c:e9:39:09:30:bf:c2:d0:
e8:6e:b5:70:cc:25:05:f8:7a:3f:ec:d8:30:97:3c:d1:18:22:
a4:7c:71:f3:fc:39:0d:1f:d8:04:5c:66:e5:2b:3d:15:3b:78:
7e:43:68:38:38:69:f3:df:ad:ab:d9:4a:f6:df:a2:2c:01:fc:
7a:04:fb:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zdY/MohDuumNPM1G4CSLQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NDM0MTVjMjJlMTQxOTcyYzBkN2U3NmMyNGU4OGIyMjQy
N2IwMjQwHhcNMjYwMzI4MDgwMDM1WhcNMjYwMzI5MDgwMDM1WjAzMTEwLwYDVQQD
EyhhMzlhMTBmZTFmMDE2Y2ZlYTJmZGQ0NTMzZjllNjIwYzQ1ZTZkNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaqywi9s9NElusLkLrJaZzirzKJC
g93lrJkE42tJebq4o+lKpS3MPbsMsNmerxJ21Vd6TKt92oTCXtrc/bEH7P7/pgra
nS4yhSlIaDoRouLZBljge1oxrNkjJn9k3YOJ+PaYVSv7sKCnnvry4/0iLHnKN+6K
E4qlLrmwJLs+iRyYH97YRuM+arkzzE9hDhqr1QfuZ3K/VC07bYxrigkCujlnxxjC
6bLTvM0fn6a3LrddIPGQXS4MbcXco2YyfZa+FhhaZsgpRDPtzSmeXsfmLW4c1hNE
cGiB2AYK9+CtZ7hkQ7Ie3dLVAyQCj63fBd0Dx+g+nuE0GQGCBLmNlxfxQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOaEP4fAWz+ov3UUz+eYgxF5tUTMB8GA1UdIwQY
MBaAFFZDQVwi4UGXLA1+dsJOiLIkJ7AkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmtOQlhDTGhRWmNzRFg1MndrNklzaVFuc0NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNGM3NGEtZTNiMi00ZTA5LTg2N2Mt
Zjk5NjdjM2FkM2U0LzEvVmtOQlhDTGhRWmNzRFg1MndrNklzaVFuc0NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNGM3NGEtZTNiMi00ZTA5LTg2N2MtZjk5NjdjM2FkM2U0
LzEvVmtOQlhDTGhRWmNzRFg1MndrNklzaVFuc0NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2j5k7NU
FdAvmG/Ckoe0/TEXmUWx4vSQY9N8DRpSijrws6yyeuBKbEPoGEtDzaR+hsII6TW5
tCMjd4ye9WgbGXezpOUlkreGG9tHrRGXTAtfb7MiX2EP7oEkh+TBtLfjyXEmBwgS
f7xY6GQ7VcbkQU4aT/iSC3H6f+6XcuTrZokj+H8sMLSXDdd1wf+TrYGWDW/SYhkQ
ZIp4LopIcSgYOBaoJ3/p0Emtma/l7HjWhmgjOP4Hns1TzAJCARSqVBzpOQkwv8LQ
6G61cMwlBfh6P+zYMJc80RgipHxx8/w5DR/YBFxm5Ss9FTt4fkNoODhp89+tq9lK
9t+iLAH8egT7tg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:40:41 2026 by rpki-client