Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier: Tu+euzi5sHNLdIqaLM6Vz1qJmUldbdBeoiaMSgAG2RE=
Subject key identifier: 2B:D7:42:13:73:CA:10:FB:11:E4:20:35:34:D7:D5:06:B1:AF:8C:DF
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 019F9248D08A566330973B85C6F6CEC18457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number: 1795
Signing time: Fri 24 Jul 2026 04:01:13 +0000
Manifest this update: Fri 24 Jul 2026 04:01:13 +0000
Manifest next update: Sat 25 Jul 2026 04:01:13 +0000
Files and hashes: 1: 0RRbgUYbY47EzL3vocqK6zrfYdk.roa (hash: IF6XV0R5dhbBLV5xLicL36fWPzjrJS+64OX5boNdTPo=)
2: FxlVSI3Pzk5LMHhEN368eliO1Zk.roa (hash: gF++G6xQjDJflZ/Ja5HPf6B0qWFfzOW2mYFsfoVk7H8=)
3: tPyBEO-2bgQWRhIbSkeHYfcbCJ4.roa (hash: 7oVVhFstrQvcK+boD9No6AXtqD2sR6u8SatBlTCoiFg=)
4: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: nfSvzIKg6+m2Z+XMcIkAhfZiDElLYm5SxiEiqCJ2qUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:d0:8a:56:63:30:97:3b:85:c6:f6:ce:c1:84:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Jul 24 04:01:13 2026 GMT
Not After : Jul 25 04:01:13 2026 GMT
Subject: CN=2bd7421373ca10fb11e4203534d7d506b1af8cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:d2:37:28:36:1c:7c:cf:34:26:50:35:cd:
46:fa:af:9e:a0:7e:cb:49:1a:57:a3:2b:73:f7:ad:
6b:fc:03:93:53:ac:ef:a4:8b:94:3f:46:17:0c:ea:
d6:b7:12:ee:6b:3f:fe:b2:7e:45:f9:5c:af:a5:06:
f4:ce:b7:fd:ca:96:96:e2:f7:8e:13:72:14:c4:11:
e9:4f:81:3c:b1:bf:a4:c7:36:45:60:c5:0c:ba:e6:
93:14:75:b5:0a:50:c6:11:5e:38:fa:74:54:e7:93:
b0:81:c0:09:bc:0b:8d:65:79:42:ca:1b:d6:8b:00:
e8:25:5f:a8:64:dd:75:45:49:35:a1:5b:d7:11:a2:
a6:e2:f2:5c:53:d6:82:d0:f1:bf:19:65:30:ca:90:
ec:0b:3b:d7:11:95:fb:fc:28:a5:1d:d9:2f:cf:32:
58:7b:ee:e8:2a:a4:a7:2c:21:2e:82:3c:8d:a0:27:
5a:57:26:b2:34:da:c5:f3:0a:26:e9:38:10:52:f4:
63:7e:bf:80:00:fb:c3:bd:9c:91:a4:95:14:44:c5:
44:c4:fa:56:c9:0d:92:fe:34:27:47:6b:b7:72:90:
17:1b:63:f1:f8:27:8c:e5:7d:f7:76:cd:45:b8:d1:
86:e0:ee:8b:7f:fc:db:58:69:e3:3a:4d:43:05:08:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D7:42:13:73:CA:10:FB:11:E4:20:35:34:D7:D5:06:B1:AF:8C:DF
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b7:d5:92:b1:0b:37:66:a6:59:c5:a6:70:d3:d4:f8:1e:ed:
92:32:d3:c3:77:af:aa:bc:ca:23:3a:33:90:f1:ff:aa:ce:29:
0b:df:38:1a:51:f3:b5:e7:d7:a3:19:df:0f:8f:55:dd:d3:af:
1b:fc:ee:a6:7e:57:2d:2c:2a:9f:38:d8:50:ac:6e:1f:9d:4b:
4c:03:56:c1:e5:ef:56:b7:67:be:c2:3f:ab:39:7a:3a:56:94:
ba:55:d8:b7:90:27:bf:1d:7c:c1:03:69:12:f2:5a:73:89:74:
ec:6d:91:9c:cd:33:e0:98:3e:ba:ae:0b:4b:72:d8:6e:f7:30:
66:f6:c4:36:35:f6:60:4e:de:0c:a4:8d:a8:17:c7:0b:04:74:
dc:12:3f:af:10:16:d0:49:53:5e:3b:f9:ee:52:45:9e:1b:6c:
c7:f1:fe:38:60:8c:98:3a:fa:4e:d4:43:4c:23:6c:c8:54:9b:
fa:93:e0:8f:59:70:39:ec:b8:4e:97:df:6f:c8:d1:36:dd:11:
5e:4f:ed:a9:6d:e9:ee:2e:58:7b:19:f6:19:c6:ff:29:52:43:
a0:92:5b:69:01:80:33:26:19:85:0a:8d:3b:3f:19:1d:77:96:
b9:34:d1:f8:12:20:37:a2:da:53:e1:2b:bc:71:a1:ad:10:80:
35:ba:24:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:16:53 2026 by rpki-client