Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
File: VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json)
Hash identifier: DrXJ2onodSYoQjz8oh1OGgk69Bc4DfL+8BysvyZHK2s=
Subject key identifier: C0:E7:70:B4:D4:85:AC:BE:05:54:67:4F:5B:3A:61:6B:89:2A:D4:3D
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Certificate issuer: /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial: 019E32CE812432148CC0FA2CB1674F55DECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
Manifest number: 0652
Signing time: Sat 16 May 2026 22:00:54 +0000
Manifest this update: Sat 16 May 2026 22:00:54 +0000
Manifest next update: Sun 17 May 2026 22:00:54 +0000
Files and hashes: 1: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: TbOFcs/TOoMzMoUcgUro9xvBOkIyQJjw7o/lKlBg/5k=)
2: r8T9kW8X8GtCFTRxWjnqQQkGt18.roa (hash: h3aumMGf0ToESbOzhSKHlEo8BiRIXKiUebFOoBpkJJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:ce:81:24:32:14:8c:c0:fa:2c:b1:67:4f:55:de:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
Validity
Not Before: May 16 22:00:54 2026 GMT
Not After : May 17 22:00:54 2026 GMT
Subject: CN=c0e770b4d485acbe0554674f5b3a616b892ad43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:61:35:86:3c:68:1f:ac:13:f5:de:73:4a:
53:d0:81:ab:21:ba:dc:06:ec:62:f1:16:0e:0b:3c:
7c:b4:c8:28:2d:70:5f:6d:40:d1:4f:99:82:bf:a5:
50:35:f2:01:15:26:1d:07:14:95:bd:78:30:ce:83:
bb:2e:08:9b:49:fd:22:dc:c3:5f:6c:c7:20:2b:f0:
5d:5b:55:ed:26:8e:7f:50:3a:1b:3b:a9:e2:27:30:
c3:f5:6e:ac:ac:19:5c:83:f3:cd:a4:1d:9d:e0:73:
73:c6:db:46:12:85:b5:ea:05:34:c0:6a:fd:18:5f:
e1:96:d1:8c:bd:dc:15:76:74:c2:c5:d1:a4:a0:c3:
41:92:97:bb:27:16:1b:4f:84:c4:e5:14:38:a9:c1:
31:ca:73:f2:4d:a3:cd:df:24:81:35:75:3e:29:54:
d2:ad:5a:6f:60:e5:99:3c:41:2e:6d:f6:a9:d7:da:
d1:47:b4:64:93:cb:ec:b9:17:c3:3c:14:43:d9:18:
5c:e5:ef:ad:ac:4e:16:3e:8a:cd:c3:6c:12:75:a6:
2d:ef:c2:bc:3b:6b:d0:19:3c:58:72:44:33:ac:c5:
6d:72:ae:e0:81:1d:51:a0:4c:b5:0f:d1:c4:6a:53:
a2:d7:f8:2d:a6:53:f2:42:7e:75:22:cc:81:0b:fb:
be:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E7:70:B4:D4:85:AC:BE:05:54:67:4F:5B:3A:61:6B:89:2A:D4:3D
X509v3 Authority Key Identifier:
keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7c:af:b3:5e:ef:8e:07:69:9a:67:3a:3b:c0:44:b3:bd:8b:
1e:22:6a:c4:21:38:69:ef:05:d6:b5:53:94:c6:15:97:1b:51:
9b:fd:e0:2d:c4:68:92:d1:2c:e8:c1:d5:9d:db:fc:4b:7d:af:
2f:a7:ee:df:b9:ec:2b:ba:26:52:ea:d4:e9:3b:fa:a5:f7:df:
dd:44:a0:0c:4f:3f:39:82:54:ee:ff:db:32:93:94:00:17:65:
3d:b8:82:3f:11:bb:a4:dd:72:7c:46:bb:75:e4:fc:bd:37:1c:
19:ea:99:64:e8:bd:dc:4f:31:d4:64:1f:d0:2f:3a:cf:f2:b1:
ae:d8:a5:06:b6:11:f6:52:a7:c4:67:8b:ab:35:85:31:9b:c4:
f2:1b:ff:5f:c4:29:11:9d:58:b9:c1:a7:f6:38:54:0d:ad:3e:
55:8b:f9:77:37:b8:d3:8e:36:fb:87:2d:03:82:b7:e0:7a:6c:
b3:e2:1d:fb:e7:c5:9d:80:7e:7b:48:0a:87:6b:4e:33:c3:06:
31:2b:9c:d4:52:8c:29:74:82:a4:a8:5c:80:18:b3:8c:d5:47:
03:33:e2:c7:87:ec:a0:ce:1e:9a:8c:7a:4b:56:69:46:72:ae:
e1:f7:22:86:bb:21:67:c0:f5:b1:f9:39:f4:43:35:87:87:59:
f1:ce:6f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 02:06:23 2026 by rpki-client