Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier: D8XX7ZP8Uk3qP82MzlV472rgpQXIu5ijGh3DzxM3Tno=
Subject key identifier: 86:E0:A0:F4:B1:C4:BE:0F:8C:5A:0C:AB:9A:1F:8C:9A:13:D8:C6:8C
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 019E1DFDF994185FF64D5D6AB435896CD3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number: 17AC
Signing time: Tue 12 May 2026 21:00:44 +0000
Manifest this update: Tue 12 May 2026 21:00:44 +0000
Manifest next update: Wed 13 May 2026 21:00:44 +0000
Files and hashes: 1: 2e1cz0qQm98XsgOLRW_MtsZatHo.roa (hash: s7uLnF7oXLpb3y50Cb2KADpe3RUMwrdqTlQV52zh+8g=)
2: GyEClr1YQ4_DWaldbIWVGzirKrM.roa (hash: Hf1oKmBrTqtefmUDpN3mwcJ/zJ6TmhTAUewS81ncFOM=)
3: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: vZFXQkg+oioDd35MgfyTUg2RYM3C7yGecoBaAO22Sk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:f9:94:18:5f:f6:4d:5d:6a:b4:35:89:6c:d3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: May 12 21:00:44 2026 GMT
Not After : May 13 21:00:44 2026 GMT
Subject: CN=86e0a0f4b1c4be0f8c5a0cab9a1f8c9a13d8c68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:ec:15:99:2c:7b:27:de:c1:a0:45:0d:37:
a3:31:8a:92:79:88:d1:06:8d:7b:14:c0:df:05:53:
fc:c2:91:b8:91:db:be:94:55:08:b5:94:fe:c7:6f:
71:8b:99:d0:fa:d4:70:ef:90:d3:db:ed:3c:13:ef:
a1:d9:7e:fa:6c:32:45:ef:b3:ef:81:35:81:b4:e3:
ef:77:7b:a7:d3:99:b8:67:b9:3a:06:89:2e:3b:10:
0a:85:a0:a3:39:3e:e7:8d:0b:2c:0a:31:69:5c:67:
c7:26:e0:ca:ec:76:f2:69:0d:d9:d5:2c:52:37:f2:
02:a3:28:d9:41:5d:4b:5e:68:c9:2e:b6:6e:f7:56:
08:7b:3d:f6:a0:65:fd:ce:70:9a:bd:9c:b3:ad:11:
e2:63:32:0c:63:e6:11:46:53:92:58:68:58:02:00:
8c:df:08:5a:52:c1:b1:cd:c2:4d:15:ea:84:22:04:
88:26:41:16:32:61:a6:0a:b7:14:eb:b6:d2:49:d2:
b7:37:bd:59:70:8c:69:12:47:c7:2a:75:c7:01:de:
1b:36:95:e5:5d:55:0f:51:5c:39:39:af:5f:bf:7b:
69:88:85:60:b2:2a:11:6a:1a:41:c1:ad:0d:69:a4:
a4:05:70:a9:91:71:65:a4:90:18:55:6c:54:54:95:
4c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E0:A0:F4:B1:C4:BE:0F:8C:5A:0C:AB:9A:1F:8C:9A:13:D8:C6:8C
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fc:16:98:c0:5f:74:91:dc:a5:5d:5f:f4:25:fa:4a:00:67:
cc:96:d4:dc:33:83:6a:e5:82:1e:82:ee:b3:b4:97:3b:a2:53:
31:d8:5b:80:7c:b1:f0:5e:38:96:e6:3f:5e:4b:d0:19:df:43:
80:dd:71:ac:26:f2:91:f7:cf:4d:3f:b0:82:86:3d:1d:9b:50:
78:46:6e:b6:de:19:4f:78:ef:77:8d:91:70:37:e1:40:de:f3:
56:7c:9c:02:61:58:8d:43:2f:1e:ce:57:f9:01:a3:a3:13:ce:
ee:94:7d:da:ee:ea:65:61:5a:35:d9:ec:d1:35:fb:46:2b:63:
b2:a5:3e:e5:6e:34:4e:05:35:ca:fe:53:e5:3f:e6:be:2e:03:
3a:fd:a0:e2:27:75:59:81:75:79:f9:95:3c:57:11:0b:14:ab:
61:c2:2d:f2:01:67:2c:48:0b:37:7b:ba:03:91:88:27:e9:7f:
46:18:b2:40:56:33:3e:0b:7a:d2:1b:ba:b6:5c:f5:9f:00:84:
e8:80:1c:2c:28:dc:40:b9:62:92:3d:b1:1a:4c:8e:24:ef:da:
37:5f:7b:77:b8:43:f0:6b:ef:9d:e9:f9:df:7a:f5:d1:7e:22:
02:52:e6:84:7c:bb:9f:9e:67:70:ec:53:13:6d:47:d6:cd:b0:
ce:69:c4:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/fmUGF/2TV1qtDWJbNPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTMxYWIwMzNjZmQyZGVlNjg1MmZhOWQ4YmY1YTRhMGUz
NTI0MTQwHhcNMjYwNTEyMjEwMDQ0WhcNMjYwNTEzMjEwMDQ0WjAzMTEwLwYDVQQD
Eyg4NmUwYTBmNGIxYzRiZTBmOGM1YTBjYWI5YTFmOGM5YTEzZDhjNjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcfsFZkseyfewaBFDTejMYqSeYjR
Bo17FMDfBVP8wpG4kdu+lFUItZT+x29xi5nQ+tRw75DT2+08E++h2X76bDJF77Pv
gTWBtOPvd3un05m4Z7k6BokuOxAKhaCjOT7njQssCjFpXGfHJuDK7HbyaQ3Z1SxS
N/ICoyjZQV1LXmjJLrZu91YIez32oGX9znCavZyzrRHiYzIMY+YRRlOSWGhYAgCM
3whaUsGxzcJNFeqEIgSIJkEWMmGmCrcU67bSSdK3N71ZcIxpEkfHKnXHAd4bNpXl
XVUPUVw5Oa9fv3tpiIVgsioRahpBwa0NaaSkBXCpkXFlpJAYVWxUVJVMHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbgoPSxxL4PjFoMq5ofjJoT2MaMMB8GA1UdIwQY
MBaAFFSjGrAzz9Le5oUvqdi/WkoONSQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGIt
NjE5YzI2MTk0MTY4LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGItNjE5YzI2MTk0MTY4
LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvwWmMBf
dJHcpV1f9CX6SgBnzJbU3DODauWCHoLus7SXO6JTMdhbgHyx8F44luY/XkvQGd9D
gN1xrCbykffPTT+wgoY9HZtQeEZutt4ZT3jvd42RcDfhQN7zVnycAmFYjUMvHs5X
+QGjoxPO7pR92u7qZWFaNdns0TX7RitjsqU+5W40TgU1yv5T5T/mvi4DOv2g4id1
WYF1efmVPFcRCxSrYcIt8gFnLEgLN3u6A5GIJ+l/RhiyQFYzPgt60hu6tlz1nwCE
6IAcLCjcQLlikj2xGkyOJO/aN197d7hD8Gvvnen533r10X4iAlLmhHy7n55ncOxT
E21H1s2wzmnEMQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:27:53 2026 by rpki-client