Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
File: VSV3WnBqwAyC-ikzniLkMQgJnnk.mft (raw, json)
Hash identifier: KmY91KMcwFjc6oRyH7TDnH4ffYbDyvIdW59rfuDCYuI=
Subject key identifier: C9:83:AD:62:A0:89:E9:60:F6:D8:BA:C7:F0:BE:80:B8:E8:F9:15:3D
Authority key identifier: 55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
Certificate issuer: /CN=5525775a706ac00c82fa29339e22e43108099e79
Certificate serial: 01A025E9360848DC66BF93FAE35BAAC9D4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
Manifest number: 14E9
Signing time: Fri 21 Aug 2026 20:00:35 +0000
Manifest this update: Fri 21 Aug 2026 20:00:35 +0000
Manifest next update: Sat 22 Aug 2026 20:00:35 +0000
Files and hashes: 1: IihrDiOMMogMysZiqLuZCTGW7ps.roa (hash: 27NO7W1ghNU5VtJT3vvPiTMqw3X03DbaQcQd4NemsmM=)
2: VSV3WnBqwAyC-ikzniLkMQgJnnk.crl (hash: 7/+JQSmSglkE/G9VWH9jA20Mg+Ob3qLe9DvE7QWhaao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:e9:36:08:48:dc:66:bf:93:fa:e3:5b:aa:c9:d4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5525775a706ac00c82fa29339e22e43108099e79
Validity
Not Before: Aug 21 20:00:35 2026 GMT
Not After : Aug 22 20:00:35 2026 GMT
Subject: CN=c983ad62a089e960f6d8bac7f0be80b8e8f9153d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:1b:bf:d5:d0:aa:42:2a:f5:a2:84:95:ea:
e4:ab:d4:4d:15:31:ee:30:7b:ea:96:80:a2:a8:b8:
58:1b:a7:5c:16:b4:23:77:32:3d:5e:06:fb:d6:71:
48:87:50:1b:64:3e:57:d2:38:96:f9:49:41:04:a0:
a8:c6:ca:0f:6c:31:c2:83:db:14:63:ef:04:bb:ea:
ac:c5:24:e2:9b:06:87:df:0a:1d:c1:c5:83:69:9f:
93:47:37:1a:5f:79:e4:3c:27:64:a9:2f:ec:0f:33:
8d:e7:c2:95:2a:8d:4c:6e:b4:1b:cf:98:20:c5:bf:
88:a1:01:74:0e:17:6d:6e:02:c5:72:64:a2:6e:72:
9e:28:c3:c2:6b:00:72:d1:df:e3:31:6a:11:cf:75:
f0:b6:07:c0:ce:e2:20:c6:f7:c7:6a:f8:27:4d:89:
90:16:bc:8f:e1:ec:8e:d4:a7:1a:86:ee:49:b7:20:
d1:59:d7:be:33:64:9a:68:ff:a5:68:aa:ed:97:5d:
06:f5:3f:e7:2e:ab:9f:2d:66:bb:d7:de:49:fb:1b:
79:b1:09:6e:ed:ce:7e:eb:e3:f2:ae:f8:d0:54:1d:
a8:c8:02:b4:48:c2:1f:24:5b:1e:a5:94:fc:77:c9:
b5:8f:fe:fd:a9:e1:6c:e5:96:63:3d:6f:66:dd:41:
68:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:83:AD:62:A0:89:E9:60:F6:D8:BA:C7:F0:BE:80:B8:E8:F9:15:3D
X509v3 Authority Key Identifier:
keyid:55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9b:74:14:b1:8e:53:f5:0e:4a:7d:ae:3e:11:c2:bb:fe:50:
55:17:d2:ba:21:e8:c4:1a:ef:e5:48:01:07:a9:a1:d2:40:7e:
b5:3c:10:6b:48:fb:77:85:e9:d5:d0:75:17:c2:7c:cd:8d:32:
02:53:8c:2e:ab:73:0c:d7:9a:fc:8d:44:f7:ab:e0:f9:02:50:
1e:ee:63:b1:b7:43:2f:54:a1:13:93:f3:d0:a4:4e:ec:bf:a6:
5e:e6:e9:2f:04:d0:6f:10:22:81:77:87:31:7f:bb:90:d7:49:
a7:cc:16:f5:b0:71:3c:a3:95:7b:10:ce:50:7e:32:16:7e:bc:
01:84:7e:ff:2e:73:43:ed:73:c4:c2:38:7c:9e:fe:61:37:40:
2c:34:b9:fe:0b:5a:e1:a9:09:e7:2e:31:7d:35:84:83:bc:f6:
f8:47:66:81:e9:af:45:7e:cc:f6:b3:ec:cd:f8:07:06:2a:76:
22:71:5d:15:a6:16:ad:17:0c:2f:11:bf:52:08:ed:5d:eb:48:
e3:3d:f5:54:a1:60:a3:06:16:e5:f1:31:93:34:29:6b:e4:7f:
8c:35:3c:33:f9:26:d3:72:5f:e8:74:c8:9e:89:1c:ce:8b:d1:
74:15:74:00:89:cc:6c:bd:f0:b6:0b:e2:66:0a:4f:9a:26:e6:
cf:c3:fd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:03:07 2026 by rpki-client