Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier: GRqOGmc5Ovbz/m75GcuUvHrYoIv5ZTnrZqt0goUIOuw=
Subject key identifier: 12:A6:25:56:6F:2F:7D:F4:91:0E:58:B1:45:E5:20:3D:55:B8:A5:36
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 019DD1D2190146785045589ACFB50C919A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number: 15B1
Signing time: Tue 28 Apr 2026 02:01:40 +0000
Manifest this update: Tue 28 Apr 2026 02:01:40 +0000
Manifest next update: Wed 29 Apr 2026 02:01:40 +0000
Files and hashes: 1: PD1WySNjlq_IY2uBIMnATsjVoRM.roa (hash: SZgZePDON35ElVyphahHJc8sNER6FBgFl6oM5awboYo=)
2: k8w0NUXD9JayBBvKF9ncDALdg78.roa (hash: lUbCLxx0DXi3nyWOu3iruTVHC0Q/jhFLMzT5toYmB6I=)
3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: e0p4xWgxI/AYtCvu2hb0SDd54rCpzVhzwvC7HGof4ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:d2:19:01:46:78:50:45:58:9a:cf:b5:0c:91:9a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: Apr 28 02:01:40 2026 GMT
Not After : Apr 29 02:01:40 2026 GMT
Subject: CN=12a625566f2f7df4910e58b145e5203d55b8a536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:20:38:08:f7:fa:58:e5:de:d2:3c:46:45:68:
17:b7:89:d3:89:07:05:80:74:de:01:d3:56:13:c9:
a4:a5:f4:08:75:33:f8:61:b1:f7:5d:47:2a:d8:eb:
db:38:ec:c6:f7:75:ad:ad:9b:b4:56:10:46:06:cf:
2f:24:bf:c9:af:11:90:36:08:c9:a3:a2:03:9f:aa:
a2:1f:51:cb:b1:79:95:f6:a3:06:86:4f:de:4a:fd:
f6:e1:b1:df:52:3c:63:7d:b6:18:d5:0f:46:ec:27:
14:f4:30:21:fc:4b:12:61:25:03:e3:4a:68:40:44:
5f:53:ee:4c:b2:70:92:73:07:3a:0a:78:69:fb:5d:
53:60:20:3d:1f:d5:29:2a:a4:02:c7:9d:f3:d1:de:
9f:d4:20:5f:4a:e8:24:ff:ba:88:a4:c6:e9:5a:60:
55:e5:1a:b8:2d:d5:12:5d:a6:5e:2c:6f:c6:b1:85:
2d:b4:a6:cb:1b:84:91:5e:de:35:b5:80:0a:0e:4b:
55:16:74:c7:44:25:07:fe:5b:3e:5e:fc:2b:d9:9c:
30:48:e2:d4:fd:3f:f2:73:1a:22:dd:44:6a:28:6a:
cf:fa:d5:8d:05:63:5c:86:91:cf:89:37:31:a0:45:
d0:ce:31:03:c4:ec:37:2d:72:41:8e:1a:ac:e8:e6:
7a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A6:25:56:6F:2F:7D:F4:91:0E:58:B1:45:E5:20:3D:55:B8:A5:36
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3b:ab:56:5e:5b:aa:7b:7d:12:a3:03:a3:75:6d:a1:ab:1c:
98:c0:19:1c:a8:55:ca:23:50:c3:65:29:60:70:b9:32:5f:ad:
b2:35:b4:2a:dd:5d:81:5c:24:9a:d5:b2:e0:dd:0c:b7:92:36:
34:7b:fe:80:b7:a8:09:9a:4d:68:f9:90:d9:5a:6c:c7:a4:62:
2b:43:a0:14:2a:ea:20:6b:ec:d3:5e:d6:0b:06:02:0b:33:73:
f2:8c:1b:59:cc:19:76:17:44:7d:32:ed:3a:d5:de:ec:2e:77:
75:35:41:7f:27:67:04:69:23:85:64:3a:b7:e4:8c:f5:b9:c7:
91:c7:c8:dd:b7:f0:d9:78:e5:13:39:24:2d:bf:67:bf:48:de:
79:84:cd:83:02:47:a3:de:1b:18:96:36:d8:11:77:ef:34:5b:
5e:9d:09:88:38:17:9c:0b:8f:63:4a:6c:04:b6:05:fe:e0:58:
87:6a:ca:02:32:35:36:c7:c2:ac:70:d5:11:03:d3:e2:4c:ec:
2f:07:93:35:6f:34:03:01:74:a5:82:4c:83:53:c7:5b:cd:dc:
b2:f5:e9:5f:3e:2e:9e:e5:33:c0:b0:d2:11:3b:4c:e6:f6:42:
a0:cd:e1:52:4f:a3:44:31:95:61:20:f7:08:3f:7b:8f:b3:27:
0c:c9:9d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 05:47:40 2026 by rpki-client