Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier: rf+/juYkr9ILvqVMB/ytAzlN6uCjS41FD44M+IulvOg=
Subject key identifier: 38:3B:66:37:EC:3C:47:4C:3E:24:CF:DE:3A:36:CA:D8:C2:90:2F:42
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 019CE8258AC7C86411F6B0CF36FF3D796BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number: 1538
Signing time: Fri 13 Mar 2026 17:01:40 +0000
Manifest this update: Fri 13 Mar 2026 17:01:40 +0000
Manifest next update: Sat 14 Mar 2026 17:01:40 +0000
Files and hashes: 1: PD1WySNjlq_IY2uBIMnATsjVoRM.roa (hash: SZgZePDON35ElVyphahHJc8sNER6FBgFl6oM5awboYo=)
2: k8w0NUXD9JayBBvKF9ncDALdg78.roa (hash: lUbCLxx0DXi3nyWOu3iruTVHC0Q/jhFLMzT5toYmB6I=)
3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: 43t8Km0zc8KCOiP2djxUvoaKLEPB/e5or19nhEXKsBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 17:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:25:8a:c7:c8:64:11:f6:b0:cf:36:ff:3d:79:6b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: Mar 13 17:01:40 2026 GMT
Not After : Mar 14 17:01:40 2026 GMT
Subject: CN=383b6637ec3c474c3e24cfde3a36cad8c2902f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4f:c1:e6:d5:0f:62:e7:71:59:ec:73:d9:fb:
74:c9:fd:99:22:38:36:70:b3:98:06:86:8d:ef:86:
af:b0:ff:79:7f:9c:2a:25:ff:df:64:5d:12:a0:45:
e3:a9:59:f4:9e:5b:29:c9:75:c2:f1:56:e2:1b:18:
d8:77:b5:15:b1:ba:b8:97:d8:2d:f2:8b:0e:72:4c:
79:17:4a:be:79:df:a1:1a:e6:75:e8:70:8f:e4:72:
2f:85:ff:3d:2b:8b:64:5c:d0:1b:91:8f:ce:f4:b2:
f1:e7:5a:cf:32:3c:ac:81:bb:e4:42:2b:a9:3a:23:
7b:d9:1c:6c:49:ec:4a:82:dd:29:9d:77:71:c0:31:
c0:c4:11:21:2d:18:3c:ca:bb:c2:86:de:4b:c4:c5:
76:41:c3:1b:b3:73:0e:81:35:3b:11:3a:5c:1c:b5:
54:97:0d:4f:fc:1c:28:22:ac:6b:91:8f:73:29:4c:
30:13:9d:7d:95:21:28:d2:0e:f4:09:3c:e6:d7:8f:
36:34:cd:96:89:1b:97:a8:6d:7e:db:b6:42:b4:37:
9c:b3:17:a4:02:db:e9:fb:73:04:e0:b7:5a:c6:56:
ea:32:63:bf:74:fa:33:a5:1b:66:68:6a:b5:35:4a:
91:4f:04:e1:60:4e:66:5a:76:be:9f:2c:3e:0b:b7:
d3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3B:66:37:EC:3C:47:4C:3E:24:CF:DE:3A:36:CA:D8:C2:90:2F:42
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:79:59:33:26:dd:51:cb:6e:9f:4a:be:69:1d:8b:63:0e:d4:
8d:e3:e0:85:91:8e:a9:6c:f3:9b:a9:ea:df:42:4f:45:2d:cb:
81:7f:ee:43:0d:a4:2a:b4:cd:47:34:76:37:b4:85:bb:0a:e6:
e9:3d:da:27:d6:ab:91:77:3c:19:77:68:9d:47:44:ee:82:fb:
57:c0:43:4c:67:b8:de:e4:e6:d1:be:76:02:41:1c:c8:6e:0f:
7b:f6:36:93:a1:c5:7f:29:f5:63:49:17:94:52:77:b5:63:80:
55:b0:b8:a7:4f:b2:18:5b:7f:89:06:1d:99:22:90:d4:53:a5:
d6:c9:9c:87:ca:d1:2a:e4:a5:90:b3:7d:41:a8:6d:59:4a:f8:
98:a4:7c:31:3e:e6:ed:e1:cd:99:d2:4f:c2:84:f7:62:91:50:
86:01:f3:49:f1:78:84:41:5a:86:84:ee:b7:da:65:6a:4d:1a:
e5:b8:7d:05:c5:32:da:96:f3:2d:09:a8:5d:34:36:49:cc:0a:
80:75:62:d2:8b:f7:74:cf:c0:0a:88:f3:4e:b9:32:77:47:ad:
ed:53:f3:7e:b3:7a:5a:9f:95:40:7f:ba:36:b7:69:e7:bd:3c:
2e:26:4b:36:e0:ec:19:8d:a4:a4:40:51:96:25:46:23:3a:80:
de:d5:d6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:34:58 2026 by rpki-client