Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier: SmlEiW0Hnb4rK9e433wxJ+nZb5kA/JIUo/SuZcvkjCs=
Subject key identifier: DD:AD:CF:FF:35:7F:42:10:10:85:80:71:18:EA:75:E8:5F:28:7B:2B
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 01A0D538D23AC513B724070E3B6B67E2E340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number: 1914
Signing time: Thu 24 Sep 2026 21:01:05 +0000
Manifest this update: Thu 24 Sep 2026 21:01:05 +0000
Manifest next update: Fri 25 Sep 2026 21:01:05 +0000
Files and hashes: 1: 2e1cz0qQm98XsgOLRW_MtsZatHo.roa (hash: s7uLnF7oXLpb3y50Cb2KADpe3RUMwrdqTlQV52zh+8g=)
2: GyEClr1YQ4_DWaldbIWVGzirKrM.roa (hash: Hf1oKmBrTqtefmUDpN3mwcJ/zJ6TmhTAUewS81ncFOM=)
3: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: WaYSRaYTR31Ae3Vq3kG3F91XjiamCFcGQQdFLYT1K5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:d2:3a:c5:13:b7:24:07:0e:3b:6b:67:e2:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Sep 24 21:01:05 2026 GMT
Not After : Sep 25 21:01:05 2026 GMT
Subject: CN=ddadcfff357f42101085807118ea75e85f287b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:d0:a3:95:b5:33:01:48:91:ad:19:ff:db:
17:8a:ba:b2:bf:0f:c1:dd:f3:89:7c:cb:4b:57:cd:
20:5d:78:96:56:96:78:39:91:4d:5f:92:fc:cc:06:
3e:ca:8e:7e:64:80:3e:7f:c1:0d:75:a6:5c:85:56:
f3:46:97:b1:c8:25:32:d0:a2:d8:7b:80:fd:0e:82:
d9:59:27:24:4c:b2:c8:d2:35:39:79:aa:64:20:cf:
65:e6:57:a4:04:3f:47:6f:af:79:0f:ea:f9:d6:6d:
2c:4e:d9:33:cb:89:41:0f:d9:11:da:81:73:10:65:
ea:c2:94:be:55:1f:66:c1:61:2f:0b:90:de:f3:ee:
a3:c4:dd:0f:3f:d9:3a:de:1d:1e:61:48:bc:60:5c:
91:b0:5c:c1:d3:25:9c:56:4b:94:a4:53:29:71:39:
ec:de:53:b9:88:bd:e1:39:09:d3:53:95:7b:89:a0:
d8:a0:a3:2e:eb:0a:b5:86:5f:0b:48:13:b3:56:da:
c6:ad:fe:77:ff:fd:36:4c:c3:d7:4a:e8:86:d3:3c:
c3:53:36:76:62:23:25:a9:ed:58:b1:7b:7a:0b:93:
8d:30:a9:3b:ca:7f:d0:79:4e:08:44:df:df:0e:9d:
b0:d2:8a:fd:5b:52:6e:a1:32:06:d2:a2:89:8d:a2:
42:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AD:CF:FF:35:7F:42:10:10:85:80:71:18:EA:75:E8:5F:28:7B:2B
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e1:39:ba:3d:db:5e:02:1e:73:d3:41:a0:20:84:00:1d:60:
27:13:29:c9:f8:eb:f3:aa:de:e8:7d:10:01:4a:ce:b2:14:c8:
3a:50:54:f2:e9:93:13:36:b8:e7:fb:b9:fc:1d:8c:0e:89:5e:
ef:9f:fc:c7:eb:e0:b6:10:c1:8a:b0:5c:87:0c:2e:84:75:ac:
9d:69:a0:7d:d2:a7:ec:59:65:e1:7e:81:81:7b:5a:cd:9a:37:
02:71:31:95:c4:7d:98:f8:87:60:12:9b:68:03:47:b5:83:7b:
44:47:9b:be:5e:3e:6b:e8:53:df:ab:08:fe:3e:cd:06:f1:6a:
17:96:3b:83:62:b8:86:68:8e:2f:13:94:5d:4d:7a:69:b0:1c:
78:3b:e0:e3:31:7d:e5:0f:88:c4:47:c9:98:14:7b:bf:9a:21:
5a:57:70:89:ab:00:24:71:a2:9e:53:09:07:9b:99:94:70:cd:
c7:36:49:e8:67:c4:a1:f1:f2:5b:03:d1:78:07:89:f0:c1:f1:
5c:e7:3d:b6:5b:17:16:28:d2:e0:bf:21:66:7e:97:b3:c0:42:
6c:48:07:56:c8:5d:32:ae:90:44:27:58:e4:1c:2a:a7:75:54:
5a:fe:38:dc:dd:e3:80:4e:87:c5:d2:be:cf:ff:49:f0:81:bb:
0f:68:1c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:42:02 2026 by rpki-client