Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier: a+vRMynHT+vlN9MNQJVDMMR5TLKLg1uG/uVU3x37o3o=
Subject key identifier: 30:83:2A:89:DF:A0:06:E1:D8:A3:62:B0:7A:0E:99:AF:F7:B5:14:B1
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 01A0E13D010FCD54003D02D9187C045D918A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number: 1843
Signing time: Sun 27 Sep 2026 05:01:06 +0000
Manifest this update: Sun 27 Sep 2026 05:01:06 +0000
Manifest next update: Mon 28 Sep 2026 05:01:06 +0000
Files and hashes: 1: FxlVSI3Pzk5LMHhEN368eliO1Zk.roa (hash: gF++G6xQjDJflZ/Ja5HPf6B0qWFfzOW2mYFsfoVk7H8=)
2: tPyBEO-2bgQWRhIbSkeHYfcbCJ4.roa (hash: 7oVVhFstrQvcK+boD9No6AXtqD2sR6u8SatBlTCoiFg=)
3: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: soYRIt8lpt9EOFMx1WWZcR/p0Ahs6W8I5zyZFNhqQ08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:01:0f:cd:54:00:3d:02:d9:18:7c:04:5d:91:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Sep 27 05:01:06 2026 GMT
Not After : Sep 28 05:01:06 2026 GMT
Subject: CN=30832a89dfa006e1d8a362b07a0e99aff7b514b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:04:b2:1b:b5:ef:34:41:25:96:28:cd:e5:
66:de:1e:f9:33:95:4b:bd:4b:48:1b:c4:4f:b0:bc:
19:cb:90:79:4a:83:4a:8f:a2:48:fc:cd:5e:17:61:
8d:42:b6:67:56:81:53:2e:1c:79:f4:04:6b:e3:1d:
44:46:7e:c1:54:18:a7:56:59:b0:69:9e:c7:25:d7:
8f:26:b1:e6:d6:7b:fd:fe:96:2c:2e:de:ef:63:94:
1d:ac:2e:a4:44:8d:b8:32:38:32:06:ed:b9:0b:5d:
f3:c2:e7:25:a3:d1:9a:d1:10:1e:08:e7:2e:a0:1c:
5f:6c:57:96:52:c9:b3:4b:f0:02:09:8c:00:39:ad:
60:73:7d:d7:32:0a:21:05:6d:1c:66:86:10:d8:e6:
b1:05:ec:d1:2b:ce:cc:cf:ad:15:b7:ae:42:6d:2b:
ae:c8:10:b8:61:ba:13:c0:1d:6f:be:60:ac:52:6b:
6d:a4:d6:38:8f:16:8b:f8:d8:01:36:21:db:5d:50:
c1:77:e5:8a:90:e8:0b:82:96:8d:33:2d:53:69:05:
e2:25:e1:d8:06:a5:44:49:b3:d9:1a:b2:b1:87:f6:
b2:da:c3:e3:09:76:54:0a:b5:9a:8c:c0:51:39:ef:
0e:96:7f:7e:db:5b:c8:e7:6e:a0:17:c4:78:01:b8:
3f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:83:2A:89:DF:A0:06:E1:D8:A3:62:B0:7A:0E:99:AF:F7:B5:14:B1
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:a3:6a:b1:0c:6b:e7:85:af:55:b2:c9:99:4a:76:5a:55:59:
a3:37:80:2e:43:6d:b3:6a:80:c1:89:c5:1f:7b:f6:6e:6f:02:
1c:13:56:69:69:1a:15:a8:23:54:41:bd:84:ca:61:6d:d7:cb:
65:29:6e:55:ef:4f:fb:ea:78:57:58:62:20:10:9c:ed:5e:69:
fd:62:77:22:75:1c:26:70:fb:2c:8e:2d:4e:c2:90:0f:47:80:
cc:f7:af:1a:0b:e4:67:93:ae:d0:3d:9d:fe:59:4b:c5:1d:eb:
93:49:2f:8b:49:04:84:3f:33:72:0b:e9:21:1a:81:15:ad:f3:
3c:f0:b3:39:b0:1f:6c:d9:90:b6:e7:6e:f3:c6:89:00:4a:65:
a8:ee:8c:8a:c9:05:3f:11:84:18:8a:c2:c2:e7:a7:09:98:b2:
81:52:e6:14:69:15:04:93:e5:3c:6d:a5:da:37:2e:b6:d4:2c:
3b:f5:cc:82:ad:e3:89:ca:1c:ef:99:79:8a:17:11:79:d3:9c:
1f:19:b0:9d:03:09:06:4f:70:ec:e4:84:fa:20:a8:fc:fd:58:
ec:c5:3f:ed:3e:63:39:00:70:94:db:18:e9:f0:9a:1a:e7:c3:
fa:e8:f2:6f:ad:61:94:53:de:26:58:3b:fa:41:e6:97:aa:78:
e0:a1:b4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:40:12 2026 by rpki-client