Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
File: VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json)
Hash identifier: l6pzdokuhHgrDqYyVtK2HvNVV1c1KIzCsxp44XrgazA=
Subject key identifier: C0:6D:0E:09:19:4D:92:2B:34:F4:E2:58:BB:15:3E:87:42:1C:F1:1D
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 019F8230BED83C1EAB60561D1DBE02FA27EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
Manifest number: 1492
Signing time: Tue 21 Jul 2026 01:01:00 +0000
Manifest this update: Tue 21 Jul 2026 01:01:00 +0000
Manifest next update: Wed 22 Jul 2026 01:01:00 +0000
Files and hashes: 1: 4-WbBaq98Oq9Hev6MWdBUYGPmH0.roa (hash: GNmnhi1gsX6X4qEuEkfyWsKzBAsClKRsbDlEB+HLZ4o=)
2: CjhmCMWptrEEhGP0rWZ3aS_GZCQ.roa (hash: xRBb5qX8Yz/3LKM505uXNjs7V3IJIMZmvB9mN9XYUV0=)
3: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: ZhvY8I3Vol4noz2/0BojBR4egyJBC7mVBPmBmIWD7tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:30:be:d8:3c:1e:ab:60:56:1d:1d:be:02:fa:27:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Jul 21 01:01:00 2026 GMT
Not After : Jul 22 01:01:00 2026 GMT
Subject: CN=c06d0e09194d922b34f4e258bb153e87421cf11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:2d:42:07:e0:a3:4a:f6:bd:fe:29:bd:91:
6a:ca:f5:e5:23:a0:5f:bf:7a:1d:08:dd:91:72:0f:
f7:c7:e7:10:c3:4a:9b:74:68:8d:a1:0d:d5:a4:7e:
cf:c6:db:99:5c:f6:31:cb:e1:51:c9:48:fd:2d:fd:
9f:80:4c:ab:2f:d2:b9:b2:0b:2e:25:01:82:77:e8:
0e:92:ea:8d:f9:16:91:53:33:85:ea:5a:15:d5:13:
44:69:a0:fe:f2:45:b9:b2:91:fb:33:65:99:29:d7:
d7:56:f1:de:28:55:e9:c4:9e:44:f0:b7:38:26:d8:
66:fd:1e:ed:32:a0:ee:89:71:54:71:84:18:70:d7:
51:a2:67:f3:10:d8:07:2d:48:b5:05:43:e8:d0:5b:
05:c7:e3:42:d6:07:92:e9:6f:d2:c5:2d:6d:83:c7:
35:57:5d:2d:de:80:e5:49:b8:ae:80:39:67:23:1f:
2b:10:e8:ed:a6:3b:16:ef:a9:2d:05:57:d6:7b:15:
3b:10:34:27:5a:2e:d6:87:24:2a:f4:11:c0:16:d3:
4a:e8:8c:8a:f4:9b:3f:c3:33:4f:75:f2:cc:dc:57:
46:a4:bb:0b:33:50:07:1c:f4:ad:ea:02:05:8e:b6:
2e:45:ac:53:cd:34:c1:f0:50:81:92:25:25:40:67:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6D:0E:09:19:4D:92:2B:34:F4:E2:58:BB:15:3E:87:42:1C:F1:1D
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:94:0b:02:8f:23:e6:0c:27:6e:69:a7:48:40:65:17:79:17:
af:a9:c1:68:e7:aa:e0:37:a8:21:1b:fe:7a:f1:35:6e:ef:b3:
48:5c:8d:18:15:5e:38:a2:5f:ba:4c:05:af:99:1b:b0:30:00:
5d:ad:e9:e7:97:77:71:97:b1:04:86:35:62:11:77:b0:33:18:
b4:3e:c2:c7:54:21:a5:2e:8c:d1:8d:90:49:b8:d7:30:3a:4d:
52:5d:08:a7:37:49:0e:32:4f:36:8f:dd:1c:ed:51:e7:c8:76:
1b:bd:b3:b2:0a:39:e9:bc:c6:64:f0:c2:47:6d:d6:19:4e:9e:
e2:33:d0:d1:de:a9:79:e9:39:ed:84:aa:70:64:db:4c:20:4d:
83:e8:b1:eb:de:05:c2:22:0c:e3:ec:c3:32:7b:9c:e5:08:dd:
a5:bb:d9:bd:39:37:18:e1:8d:07:4c:2c:f2:87:3f:11:46:a7:
a4:f7:d7:76:46:82:7e:53:91:f8:f0:fe:33:05:2a:30:6a:e0:
ae:41:ff:54:04:50:73:53:88:f3:9a:8d:7d:a8:e7:2d:f6:a2:
94:45:de:ed:94:ad:95:38:2c:8f:d6:78:1b:cd:f0:7c:6c:69:
5c:cc:13:97:39:a9:cd:a1:c3:7d:69:1c:81:81:33:1a:1d:c4:
2f:1b:cd:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+CML7YPB6rYFYdHb4C+ifrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1M2NhN2IyZTZjMWUxN2Y1ZjNlZGJlMzc1ZTE5ZWNlMzk1
MzM5MTAwHhcNMjYwNzIxMDEwMTAwWhcNMjYwNzIyMDEwMTAwWjAzMTEwLwYDVQQD
EyhjMDZkMGUwOTE5NGQ5MjJiMzRmNGUyNThiYjE1M2U4NzQyMWNmMTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurMtQgfgo0r2vf4pvZFqyvXlI6Bf
v3odCN2Rcg/3x+cQw0qbdGiNoQ3VpH7PxtuZXPYxy+FRyUj9Lf2fgEyrL9K5sgsu
JQGCd+gOkuqN+RaRUzOF6loV1RNEaaD+8kW5spH7M2WZKdfXVvHeKFXpxJ5E8Lc4
Jthm/R7tMqDuiXFUcYQYcNdRomfzENgHLUi1BUPo0FsFx+NC1geS6W/SxS1tg8c1
V10t3oDlSbiugDlnIx8rEOjtpjsW76ktBVfWexU7EDQnWi7WhyQq9BHAFtNK6IyK
9Js/wzNPdfLM3FdGpLsLM1AHHPSt6gIFjrYuRaxTzTTB8FCBkiUlQGdH+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBtDgkZTZIrNPTiWLsVPodCHPEdMB8GA1UdIwQY
MBaAFFU8p7LmweF/Xz7b43Xhns45UzkQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kNTcyYzMtMzUwZi00NzliLWE3YjMt
MTUzZTkxODJhZjQxLzEvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kNTcyYzMtMzUwZi00NzliLWE3YjMtMTUzZTkxODJhZjQx
LzEvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJQLAo8j
5gwnbmmnSEBlF3kXr6nBaOeq4DeoIRv+evE1bu+zSFyNGBVeOKJfukwFr5kbsDAA
Xa3p55d3cZexBIY1YhF3sDMYtD7Cx1QhpS6M0Y2QSbjXMDpNUl0IpzdJDjJPNo/d
HO1R58h2G72zsgo56bzGZPDCR23WGU6e4jPQ0d6peek57YSqcGTbTCBNg+ix694F
wiIM4+zDMnuc5QjdpbvZvTk3GOGNB0ws8oc/EUanpPfXdkaCflOR+PD+MwUqMGrg
rkH/VARQc1OI85qNfajnLfailEXe7ZStlTgsj9Z4G83wfGxpXMwTlzmpzaHDfWkc
gYEzGh3ELxvN4g==
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:59:08 2026 by rpki-client