Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier: RIDgAPm70/pk9P51kPvlI1vIfc6E2tEL9AzI0x2xuO0=
Subject key identifier: EB:59:1B:B2:55:72:2F:40:39:5A:6A:01:6F:CB:85:C4:C8:B4:52:2C
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 01A08ED77E14E6544E4D6E7F5A3FD99C93B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number: 171C
Signing time: Fri 11 Sep 2026 05:01:22 +0000
Manifest this update: Fri 11 Sep 2026 05:01:22 +0000
Manifest next update: Sat 12 Sep 2026 05:01:22 +0000
Files and hashes: 1: PD1WySNjlq_IY2uBIMnATsjVoRM.roa (hash: SZgZePDON35ElVyphahHJc8sNER6FBgFl6oM5awboYo=)
2: k8w0NUXD9JayBBvKF9ncDALdg78.roa (hash: lUbCLxx0DXi3nyWOu3iruTVHC0Q/jhFLMzT5toYmB6I=)
3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: nX2kUzOi1NU63wHY+RAFM5s7630bKpHWF4zuhtD/gsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:d7:7e:14:e6:54:4e:4d:6e:7f:5a:3f:d9:9c:93:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: Sep 11 05:01:22 2026 GMT
Not After : Sep 12 05:01:22 2026 GMT
Subject: CN=eb591bb255722f40395a6a016fcb85c4c8b4522c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:54:01:dc:dc:4d:5b:e1:97:5a:16:41:dc:
53:30:86:bf:d5:bc:15:19:dd:0b:cd:ed:8b:c2:88:
c1:37:48:e9:71:b4:d7:54:56:e5:36:f1:10:4f:62:
46:d1:de:99:db:5d:dd:1b:3c:92:27:2e:ea:14:bc:
7c:cd:71:88:ac:7e:99:1e:12:a5:33:24:31:e9:b8:
3b:23:84:a7:4b:55:50:de:f6:90:53:78:34:72:f1:
8a:15:bf:a5:1d:23:c1:e9:75:0b:83:9c:5f:25:78:
f4:60:1c:92:a5:c3:22:57:0e:18:52:28:ab:c0:2e:
82:90:9c:28:65:a4:65:e8:0d:4c:85:13:57:b5:f3:
70:f0:98:ac:c2:e7:f3:c3:c0:ae:2a:ec:68:54:20:
f2:33:1d:8a:45:69:8f:71:c1:e2:c2:17:46:6f:3b:
f5:37:78:17:a9:d1:d9:13:bd:51:1e:4d:23:1f:eb:
3e:66:83:3f:3d:01:4c:ce:1f:19:b3:37:c1:b1:b3:
13:76:b5:71:55:c0:a6:e3:94:a4:a7:98:c8:e1:2b:
8c:d1:61:7e:81:6a:38:b7:9a:74:73:4d:f0:1d:de:
5a:f7:a1:02:a2:4a:d0:3d:b8:65:0d:76:12:78:82:
4c:be:30:12:89:f2:af:fc:df:a7:ad:74:4d:f1:72:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:59:1B:B2:55:72:2F:40:39:5A:6A:01:6F:CB:85:C4:C8:B4:52:2C
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c8:a4:dc:ff:3b:b6:24:99:48:f0:b7:d0:8b:53:bb:90:e9:
08:aa:c1:69:c4:31:2a:8a:28:65:5b:2f:08:98:f4:76:0f:b1:
f4:2a:16:cb:41:ec:51:f3:09:21:a8:2b:31:81:66:bd:c4:be:
64:b0:83:fa:12:ba:d7:1d:d6:94:27:f0:7b:fa:77:85:53:0a:
89:f3:3d:08:15:14:a8:10:ea:b3:de:b8:59:57:4a:5d:d8:39:
84:80:af:94:1d:d8:33:fc:5d:11:88:64:76:09:5a:f1:2b:fa:
cb:dc:fb:cb:61:fc:b3:34:31:dc:5c:75:68:e9:ee:d4:78:0d:
94:9f:d1:d0:8b:41:82:f1:c5:9a:96:9c:2b:ae:db:be:78:e3:
a8:5f:e3:83:d5:86:c5:5d:ba:78:1a:20:23:18:22:19:f0:fa:
3c:79:a9:df:7e:fb:f5:8b:8f:87:0d:1a:4f:89:e6:e4:a5:57:
98:db:ce:a4:45:4d:5b:e9:45:23:ce:a6:ab:60:5f:7c:b8:e9:
e9:3a:dc:72:39:4a:95:15:79:9e:01:25:85:e7:f5:68:37:51:
c7:52:06:33:68:7d:77:9c:81:d7:c3:1f:d7:45:34:64:39:22:
2a:f1:4b:fe:61:8a:d4:bf:22:71:f0:e3:67:3e:9c:80:a2:d6:
8c:ac:97:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:07:06 2026 by rpki-client