Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
File: VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json)
Hash identifier: A4Q5dU76MN7tuQUZU1J2m9RPu66VqgHAXyKiIaAxE14=
Subject key identifier: 4C:2D:BD:6A:F1:7F:CB:81:33:55:92:1D:0C:6D:83:F9:0F:38:A7:49
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 019D371BE0B64C0AFFA262D05DBE4ECA9D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
Manifest number: 1362
Signing time: Sun 29 Mar 2026 01:01:07 +0000
Manifest this update: Sun 29 Mar 2026 01:01:07 +0000
Manifest next update: Mon 30 Mar 2026 01:01:07 +0000
Files and hashes: 1: 4-WbBaq98Oq9Hev6MWdBUYGPmH0.roa (hash: GNmnhi1gsX6X4qEuEkfyWsKzBAsClKRsbDlEB+HLZ4o=)
2: CjhmCMWptrEEhGP0rWZ3aS_GZCQ.roa (hash: xRBb5qX8Yz/3LKM505uXNjs7V3IJIMZmvB9mN9XYUV0=)
3: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: jF66d81tBe6FEz/XXOsNmWR9p4l5KvtbIloS3yTkZeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:e0:b6:4c:0a:ff:a2:62:d0:5d:be:4e:ca:9d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Mar 29 01:01:07 2026 GMT
Not After : Mar 30 01:01:07 2026 GMT
Subject: CN=4c2dbd6af17fcb813355921d0c6d83f90f38a749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6b:d5:85:be:53:4e:65:c8:f4:7f:0a:dc:86:
86:2a:95:df:88:90:9c:4a:fd:90:29:9e:63:8b:4e:
2e:ad:7d:ec:dc:03:5c:b5:20:e7:bb:ff:ca:51:a8:
e7:f1:dc:1a:f9:97:5e:28:c4:32:50:60:a7:12:7e:
cd:d7:f9:64:35:1c:6f:03:16:80:11:9f:a6:23:7b:
3b:bb:90:d6:c2:4a:05:bc:4e:ef:37:24:35:36:db:
f2:6b:e9:b4:ff:0f:37:9f:4a:19:29:0b:6e:7e:b2:
9e:8a:73:8c:2d:7c:54:3b:e5:37:91:3c:7b:26:12:
b2:ce:eb:95:3b:8a:2f:88:6c:9e:57:4e:a9:d3:01:
96:26:fc:a7:66:92:f2:e2:a7:b9:66:8e:d4:61:82:
c0:78:40:dd:92:6a:d0:c7:6a:1f:8e:2a:78:07:a1:
84:e9:c7:50:40:9d:df:52:d0:12:34:80:6b:60:8a:
d1:94:95:09:83:54:27:e0:e7:10:2d:cc:9c:8c:b2:
f1:d8:c0:81:b2:2a:9a:a4:2d:fa:c6:15:cb:f3:b1:
67:08:45:35:56:04:a9:08:45:db:16:f8:fa:fe:ff:
77:b6:08:3b:39:46:7c:09:93:42:27:eb:c7:06:e3:
ec:19:13:7d:d8:0a:0b:a4:d6:d3:02:e4:58:07:08:
df:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2D:BD:6A:F1:7F:CB:81:33:55:92:1D:0C:6D:83:F9:0F:38:A7:49
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:05:84:bc:41:d7:3d:39:65:67:a0:99:7b:c8:03:8f:e4:20:
6e:86:e7:1f:9c:02:29:8d:ea:1b:e5:1d:65:75:81:88:88:19:
f2:1f:54:b1:2c:1f:80:d9:40:90:c8:b5:85:b0:64:72:52:a0:
08:f2:f4:bc:73:3e:0a:c7:55:d1:4d:67:43:3a:c8:8f:d0:54:
64:13:1e:ca:d5:0b:79:d0:21:e5:e1:5c:d3:d4:9f:57:48:80:
fb:6a:3f:61:b1:3d:6e:c2:53:c8:a6:79:da:f7:e9:56:a9:c1:
2f:f8:9f:45:ac:26:35:2e:a4:da:2e:44:4e:31:9d:6c:ce:9f:
ad:d5:97:00:0c:cb:ed:4f:ce:3b:25:dc:c1:66:9c:21:67:c6:
94:0b:69:1f:8f:e4:50:79:2a:a3:37:ef:c4:b1:3e:e0:5e:3f:
41:89:39:29:6a:03:05:c4:ac:2e:43:46:4e:ec:f3:ea:25:d1:
01:b9:bc:2c:43:75:6a:bf:67:17:90:4a:76:3e:8f:6b:47:25:
f7:af:e5:91:c1:aa:2b:e2:69:7f:44:a9:6d:61:34:e5:15:88:
e9:51:d4:84:a9:40:58:48:86:fc:e2:ab:ab:1b:e2:e1:f8:e1:
a9:64:8d:03:5c:45:5a:89:6b:4a:cd:91:66:bf:b4:f1:fd:d0:
30:c6:42:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:01 2026 by rpki-client