Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier: waiQxh7xYgrXEERmhXsfA53yqGGSA5HxGXkiwj5px5s=
Subject key identifier: 94:C4:5E:DD:18:3C:17:D7:83:33:9C:0B:3B:D5:6C:8F:36:B2:ED:48
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 019D28BB54752DE5C94E78B6E72649B25B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number: 172D
Signing time: Thu 26 Mar 2026 06:00:58 +0000
Manifest this update: Thu 26 Mar 2026 06:00:58 +0000
Manifest next update: Fri 27 Mar 2026 06:00:58 +0000
Files and hashes: 1: 2e1cz0qQm98XsgOLRW_MtsZatHo.roa (hash: s7uLnF7oXLpb3y50Cb2KADpe3RUMwrdqTlQV52zh+8g=)
2: GyEClr1YQ4_DWaldbIWVGzirKrM.roa (hash: Hf1oKmBrTqtefmUDpN3mwcJ/zJ6TmhTAUewS81ncFOM=)
3: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: nPguQI0nqMRV6b2KtSYDdjX1sfZEnoRVXA22rMzp30I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:54:75:2d:e5:c9:4e:78:b6:e7:26:49:b2:5b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Mar 26 06:00:58 2026 GMT
Not After : Mar 27 06:00:58 2026 GMT
Subject: CN=94c45edd183c17d783339c0b3bd56c8f36b2ed48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:cb:69:15:a1:64:62:c3:20:44:b3:e3:21:
a3:4d:4d:1a:5f:a6:a4:e6:81:b8:e7:f9:bc:64:58:
91:05:79:be:b8:a6:db:71:f0:e3:e3:5a:32:f7:67:
fd:7b:86:bc:34:74:21:90:28:c2:0f:73:34:4d:9b:
dd:be:f2:64:18:fd:26:cb:a4:06:3e:48:ce:f7:5a:
e2:e1:74:3d:25:65:5c:bc:fa:2a:c2:46:a8:0d:a5:
83:dd:57:99:9c:0e:77:82:11:89:91:87:aa:c4:47:
99:d0:24:1c:95:bc:53:c7:63:18:c0:ec:47:5f:20:
53:09:ef:cf:7f:f3:51:fa:46:b2:64:93:4f:67:3d:
64:6a:c3:f1:13:a0:b1:0c:77:7b:66:e8:f8:51:39:
c4:aa:a3:6a:bc:09:2c:b3:30:3a:a1:ea:7c:ce:0b:
41:8e:a8:02:7c:53:77:11:fc:df:89:ca:9e:21:c4:
c0:0a:e3:20:fa:85:89:95:7a:e0:12:c1:d6:d7:4b:
98:4b:29:f1:7c:c4:fb:1a:7f:8e:fd:96:0e:79:92:
2a:ed:ef:c6:c9:07:b4:15:b1:63:e6:33:29:50:ed:
91:aa:0a:3e:67:46:fa:ac:6b:4d:6c:df:79:35:1c:
3d:9a:85:28:75:41:34:07:d9:5a:ff:ff:90:e1:22:
de:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C4:5E:DD:18:3C:17:D7:83:33:9C:0B:3B:D5:6C:8F:36:B2:ED:48
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:fc:1e:7b:3c:38:92:38:04:bd:74:fb:a8:0e:dd:e1:b7:8e:
9f:75:1c:d0:08:7c:b1:0f:c4:91:30:bd:57:2b:6c:11:01:7f:
0d:8d:55:4d:a7:a9:e1:ec:b3:a2:5c:3c:5f:dc:87:93:df:e9:
f9:19:06:eb:7f:24:7d:c2:1b:a9:ce:91:3f:91:cd:f3:bb:21:
8f:62:bd:bb:ac:2d:3a:97:2f:22:40:91:d6:4f:06:31:2f:a5:
d2:8f:7f:63:43:d7:36:f7:f9:98:b9:de:42:92:d6:45:d4:af:
c0:8b:75:1f:fb:cf:19:12:2e:0e:77:dd:09:bb:5d:47:2c:1c:
d5:62:e4:6a:e2:ba:14:67:b4:e5:83:99:21:16:3b:c6:fc:84:
94:00:29:77:c0:b3:ef:c3:54:c3:bc:b9:f9:c3:cb:6c:62:7f:
e9:eb:25:55:0d:d1:8b:11:59:5d:21:7d:06:66:6c:85:a8:89:
b1:34:8b:bd:ae:e5:15:1f:6a:33:30:3b:38:e2:95:6b:d2:43:
73:ee:01:7c:c9:f6:b0:10:e3:60:ee:d2:ad:76:a1:3a:fc:10:
8e:37:9c:04:ce:35:c4:f4:3f:c7:23:f0:f1:e2:86:e0:d5:09:
4a:32:3e:04:d3:db:f0:1f:f5:20:37:50:25:d8:1e:33:76:6d:
90:2b:b4:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou1R1LeXJTni25yZJslsFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTMxYWIwMzNjZmQyZGVlNjg1MmZhOWQ4YmY1YTRhMGUz
NTI0MTQwHhcNMjYwMzI2MDYwMDU4WhcNMjYwMzI3MDYwMDU4WjAzMTEwLwYDVQQD
Eyg5NGM0NWVkZDE4M2MxN2Q3ODMzMzljMGIzYmQ1NmM4ZjM2YjJlZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP/LaRWhZGLDIESz4yGjTU0aX6ak
5oG45/m8ZFiRBXm+uKbbcfDj41oy92f9e4a8NHQhkCjCD3M0TZvdvvJkGP0my6QG
PkjO91ri4XQ9JWVcvPoqwkaoDaWD3VeZnA53ghGJkYeqxEeZ0CQclbxTx2MYwOxH
XyBTCe/Pf/NR+kayZJNPZz1kasPxE6CxDHd7Zuj4UTnEqqNqvAksszA6oep8zgtB
jqgCfFN3EfzficqeIcTACuMg+oWJlXrgEsHW10uYSynxfMT7Gn+O/ZYOeZIq7e/G
yQe0FbFj5jMpUO2Rqgo+Z0b6rGtNbN95NRw9moUodUE0B9la//+Q4SLeWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTEXt0YPBfXgzOcCzvVbI82su1IMB8GA1UdIwQY
MBaAFFSjGrAzz9Le5oUvqdi/WkoONSQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGIt
NjE5YzI2MTk0MTY4LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGItNjE5YzI2MTk0MTY4
LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvweezw4
kjgEvXT7qA7d4beOn3Uc0Ah8sQ/EkTC9VytsEQF/DY1VTaep4eyzolw8X9yHk9/p
+RkG638kfcIbqc6RP5HN87shj2K9u6wtOpcvIkCR1k8GMS+l0o9/Y0PXNvf5mLne
QpLWRdSvwIt1H/vPGRIuDnfdCbtdRywc1WLkauK6FGe05YOZIRY7xvyElAApd8Cz
78NUw7y5+cPLbGJ/6eslVQ3RixFZXSF9BmZshaiJsTSLva7lFR9qMzA7OOKVa9JD
c+4BfMn2sBDjYO7SrXahOvwQjjecBM41xPQ/xyPw8eKG4NUJSjI+BNPb8B/1IDdQ
JdgeM3ZtkCu0WQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:29 2026 by rpki-client