Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
File: VSV3WnBqwAyC-ikzniLkMQgJnnk.mft (raw, json)
Hash identifier: 3Q63vzRDDV6YGw6iWj1pxXSUbunuy7fNmzS6ajWep5g=
Subject key identifier: D5:59:27:E5:E2:D1:75:F3:DF:5F:4F:E8:60:17:02:0E:D9:1D:B8:4A
Authority key identifier: 55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
Certificate issuer: /CN=5525775a706ac00c82fa29339e22e43108099e79
Certificate serial: 01A12C8E2BBC8B9C0C7345FFC3CB19FCBCAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
Manifest number: 1571
Signing time: Sun 11 Oct 2026 20:01:17 +0000
Manifest this update: Sun 11 Oct 2026 20:01:17 +0000
Manifest next update: Mon 12 Oct 2026 20:01:17 +0000
Files and hashes: 1: IihrDiOMMogMysZiqLuZCTGW7ps.roa (hash: 27NO7W1ghNU5VtJT3vvPiTMqw3X03DbaQcQd4NemsmM=)
2: VSV3WnBqwAyC-ikzniLkMQgJnnk.crl (hash: VGyI2ni9dJRHFbLSsntQ6aZTkNc27LbqjC5/0NVqftY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:8e:2b:bc:8b:9c:0c:73:45:ff:c3:cb:19:fc:bc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5525775a706ac00c82fa29339e22e43108099e79
Validity
Not Before: Oct 11 20:01:17 2026 GMT
Not After : Oct 12 20:01:17 2026 GMT
Subject: CN=d55927e5e2d175f3df5f4fe86017020ed91db84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e4:a3:82:e1:30:56:b0:8b:8d:17:5c:29:e8:
4f:77:45:af:c3:9a:b9:93:44:f3:80:a7:47:86:d0:
69:b7:b5:6e:e8:f7:ff:2b:16:26:70:81:26:82:1b:
ed:1d:97:52:7a:8b:d1:4b:5c:87:31:c3:9a:e0:da:
7b:b2:d2:3a:6f:8b:de:07:3a:49:85:2e:bd:9f:9d:
45:9f:69:f5:e0:19:c7:54:88:d8:3c:80:33:e3:65:
4b:b4:16:cf:e2:b0:6b:0e:d4:3e:43:9a:18:9c:33:
a6:1c:fe:c4:f7:72:fa:29:e7:87:6f:3a:62:f2:f1:
48:03:d1:96:7f:4d:f4:9f:6b:c6:a1:ee:fe:b8:e2:
78:8b:b5:59:5f:55:84:68:22:e5:b6:16:fc:0f:ac:
73:f4:81:5b:79:49:50:b5:fa:76:b1:57:d5:a5:6e:
21:af:27:9f:dd:5f:c2:98:64:28:96:35:88:55:1f:
eb:bc:0e:ef:d2:c7:7c:db:49:a4:06:bb:58:b9:d3:
df:29:26:e8:6e:c9:60:83:58:39:49:59:d0:9e:f3:
b5:67:f6:52:d3:d4:56:3f:17:d7:e7:89:c8:24:d3:
ca:0f:36:68:01:13:ac:a8:64:61:55:f5:20:fb:10:
7e:f6:6d:83:91:87:82:99:7c:9c:58:c4:e3:68:69:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:59:27:E5:E2:D1:75:F3:DF:5F:4F:E8:60:17:02:0E:D9:1D:B8:4A
X509v3 Authority Key Identifier:
keyid:55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2b:49:9b:c1:40:53:ce:0d:12:bc:7f:3e:89:2a:ef:a9:7c:
3f:70:45:11:8c:19:4a:c0:bf:7b:79:a3:27:54:eb:5a:be:8f:
e8:a2:cf:cc:c0:ee:97:04:37:bf:9c:47:7e:84:b2:65:27:a5:
bd:6f:96:88:f9:82:a2:7f:8b:21:2b:f1:6a:e3:13:e7:45:cd:
c2:29:1e:fb:a7:53:a0:3c:bd:74:dd:98:db:97:1a:73:48:35:
1d:9f:37:e7:df:2c:b4:a9:46:4a:b8:b9:44:4b:a2:65:69:3f:
f4:00:de:ad:a6:b1:cd:d4:e0:d0:89:f7:03:7c:70:a1:f9:5d:
4f:6e:a1:63:c2:06:b2:eb:5e:14:10:c4:32:a1:09:7e:5b:df:
42:7e:b9:fc:59:6f:9c:46:88:7f:4c:d2:90:d7:96:98:90:8a:
49:60:2e:cd:3f:fa:22:28:bd:ce:d6:f0:07:b3:40:81:ea:31:
d4:1f:75:f0:db:97:91:31:e1:cf:ed:c6:f5:bd:a4:40:9a:ad:
e2:fd:f7:e9:6f:48:14:c0:39:ef:c1:3d:5e:ed:05:3a:22:20:
70:8c:96:9e:cf:cb:87:6a:34:2e:95:ac:25:16:ee:ef:ec:6b:
83:aa:26:13:79:bf:14:a7:27:c3:75:3d:56:63:3e:1b:da:50:
e9:2c:cc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:32:36 2026 by rpki-client