Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
File: VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json)
Hash identifier: asGoVsnxyBpGqqm+OcO7pZ2M3yY0wfJqnAo0bqQgs+g=
Subject key identifier: F8:CB:85:3F:A6:97:9B:BC:41:1A:B2:FB:E6:42:9A:5E:A3:5C:A7:67
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Certificate issuer: /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial: 01A180AB91423B80F735CAB5719C766D81E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
Manifest number: 1A58
Signing time: Wed 28 Oct 2026 04:01:29 +0000
Manifest this update: Wed 28 Oct 2026 04:01:29 +0000
Manifest next update: Thu 29 Oct 2026 04:01:29 +0000
Files and hashes: 1: 6X4Jk6qo75EQY5AqZ7LyaMmPOj4.roa (hash: mTjThBJAOSa8qyri48cjOYYkA9lZErxqgqTP6n0jrYU=)
2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: Yjf0AcRafBT33tqVFxzDbIyXNBFURFD3MQFEqX7QcqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:91:42:3b:80:f7:35:ca:b5:71:9c:76:6d:81:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Validity
Not Before: Oct 28 04:01:29 2026 GMT
Not After : Oct 29 04:01:29 2026 GMT
Subject: CN=f8cb853fa6979bbc411ab2fbe6429a5ea35ca767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:01:5b:5b:48:77:d2:4c:7a:0f:93:de:0d:3b:
e6:3c:ce:cb:52:9d:60:7e:25:6e:7d:7e:e2:98:16:
0e:0a:91:a1:17:28:95:15:af:59:6c:69:d8:5f:42:
d4:0b:64:98:74:b6:73:c6:97:7d:6d:1c:c4:2e:5c:
ea:e7:59:be:86:f9:20:25:4e:d0:13:35:d2:7a:ec:
5f:c4:c2:ea:72:31:c0:f8:0e:fd:82:3b:63:8c:25:
e6:13:97:fe:62:6f:1d:10:a9:84:0b:66:9c:e5:f2:
e5:58:fc:18:25:cc:af:77:79:c9:ec:e3:5c:c2:f8:
04:94:35:ae:fe:53:49:68:b4:29:a9:d3:9c:61:43:
c2:fe:6d:4f:07:41:3e:69:35:ad:d2:8e:95:b7:c5:
3f:7b:62:07:98:41:c4:c5:09:80:7c:27:47:ae:d0:
b8:3e:88:64:5b:e9:8b:bf:d2:84:8f:b9:50:7c:03:
86:72:4f:02:ca:cb:a3:cb:48:a3:0f:49:cc:bf:a0:
49:75:40:a2:b6:dc:b2:24:18:dd:a8:0d:a0:1b:79:
11:ce:84:fb:33:0b:8d:d8:c7:82:d2:1f:31:b2:41:
09:58:83:81:c7:97:63:a4:30:66:05:9f:2f:aa:24:
2f:08:b0:fa:2e:33:ef:0f:25:7f:90:e7:1e:28:c7:
83:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CB:85:3F:A6:97:9B:BC:41:1A:B2:FB:E6:42:9A:5E:A3:5C:A7:67
X509v3 Authority Key Identifier:
keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:39:7b:74:34:10:e5:7a:e0:8e:ed:d0:9c:e6:2f:c3:1b:c3:
64:7c:17:c4:2b:9d:0f:71:51:30:e4:75:f2:48:cb:eb:b8:3c:
90:20:3d:c2:01:36:c9:c1:68:d5:79:c2:4f:b2:e3:2c:29:90:
d8:28:8b:ec:66:33:49:19:c3:5c:bd:60:80:7a:88:1e:e3:50:
a0:df:b1:6d:c5:80:eb:bb:a5:c5:ea:93:f7:79:e6:2f:b9:a2:
7a:3c:e9:f3:58:2e:77:e3:01:67:9e:1d:1e:82:b2:e1:dc:65:
16:2a:f3:bf:1f:69:1b:d0:78:77:27:4a:09:f2:c7:42:dc:b4:
35:8a:90:c4:70:e1:f6:dc:da:ca:67:0a:77:72:d1:23:a3:05:
2d:1a:52:b8:f3:f0:b7:61:31:6c:98:3b:b1:f0:84:e4:fb:63:
1a:c6:96:58:60:6a:87:78:41:47:3d:da:13:c3:df:a9:77:f8:
34:2b:a1:2c:65:55:8c:3a:5f:40:20:a5:e9:65:90:a9:31:e9:
a5:18:86:57:74:60:a7:89:3b:04:ec:50:02:9c:90:54:a5:4a:
44:fe:c8:b8:50:40:25:4d:ff:88:84:d2:e5:f4:f6:fa:ae:04:
9b:7f:e7:fd:4b:59:0e:b0:c9:80:e8:25:cd:05:98:a0:79:ea:
e4:a5:63:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:18:49 2026 by rpki-client