Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: wQS315Z1OJP12wetBwKcN1zcZJJKglsZHoe7+Mv65m0=
Subject key identifier: 5A:E0:39:B4:4C:4D:80:ED:06:36:F7:34:CF:A8:85:82:3A:2D:9D:B4
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 019F9F960D7A43DD699B919EFC670A1991FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 102B
Signing time: Sun 26 Jul 2026 18:00:38 +0000
Manifest this update: Sun 26 Jul 2026 18:00:38 +0000
Manifest next update: Mon 27 Jul 2026 18:00:38 +0000
Files and hashes: 1: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: uL0L929m+pccGny7HKDt0r7xnrCiCamdeR96xs9lqxs=)
2: ZDnCXrs2VTXwnUeyEGxx3aj0GCo.roa (hash: lCX2OIWetakZH0BDXor6ZmMOPfPeK+kN4Jw1mCD9ZF0=)
3: zMQYa_z0ETouvgoP-hRFa3Ez7Ms.roa (hash: eLkLQOUvRvhD6ZfGFzHN4nd/jJr/zq6oP4KeFHqbKSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:96:0d:7a:43:dd:69:9b:91:9e:fc:67:0a:19:91:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: Jul 26 18:00:38 2026 GMT
Not After : Jul 27 18:00:38 2026 GMT
Subject: CN=5ae039b44c4d80ed0636f734cfa885823a2d9db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:58:d9:3b:6a:d0:00:7b:0d:41:26:1e:a7:
32:a4:3c:3a:d7:94:64:08:f3:41:f9:e2:17:54:40:
a3:b1:ab:b1:2c:2b:38:d7:1f:1d:bf:16:f0:c9:c5:
f0:6e:09:0e:ac:4f:96:2f:45:33:23:7b:ce:9e:f5:
9c:dc:ac:31:53:8b:88:9e:24:c7:ba:fe:5e:9b:ec:
a9:f9:03:ef:43:b6:40:79:c0:14:6f:c6:b3:cd:c1:
05:fc:49:62:ab:3b:05:5d:94:24:96:ca:64:ee:0b:
d2:bc:df:60:f2:b8:e0:db:65:79:a7:2a:6c:84:77:
0a:98:81:87:81:47:ee:3e:5f:ce:7b:fb:c8:98:af:
7a:1a:ce:93:0e:00:78:f0:c8:e7:17:a1:71:4d:61:
bf:df:84:74:ef:b4:3c:ff:6a:56:91:49:27:56:ee:
6d:71:be:23:fc:25:e5:e2:d6:37:cf:de:93:8c:2b:
c3:79:f2:5c:11:55:da:2c:b1:32:11:71:60:bf:c0:
67:56:6f:06:bd:aa:ce:8e:2a:c9:b1:ae:ad:38:a4:
75:f3:df:92:e5:f9:8a:f1:db:13:3b:e1:3c:a9:ef:
f6:fb:e5:f3:89:5c:de:31:ce:f6:86:e5:e9:8d:6d:
85:36:52:87:12:84:e0:c2:80:1a:66:51:d5:b3:82:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E0:39:B4:4C:4D:80:ED:06:36:F7:34:CF:A8:85:82:3A:2D:9D:B4
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d5:4d:8f:7c:9e:00:8f:b7:3d:a4:c3:d4:31:11:13:07:ac:
f7:b3:e5:96:0c:ea:10:f7:f8:74:ab:0c:94:af:4e:4f:a1:53:
d1:93:04:a2:63:69:0b:80:0b:17:b8:25:fd:f8:98:d3:a6:c9:
f1:15:97:65:39:f2:6a:00:72:bd:23:ac:51:2e:f4:3e:dd:eb:
2d:88:7d:ce:d7:2b:06:66:20:dd:e0:74:00:2e:e1:e5:61:cf:
a7:07:f5:44:a9:44:80:9d:25:8c:22:65:e7:45:41:f3:ea:7a:
71:8a:c5:38:cf:93:4b:95:3c:0f:04:7e:da:c1:e4:ee:48:d0:
e1:5d:d8:00:a6:77:eb:e7:88:5d:2c:3a:60:62:de:99:b3:82:
52:8e:85:8e:d1:51:9e:5e:f4:01:bd:cc:18:76:14:33:ac:9c:
ef:78:9f:77:a9:2e:b1:a6:15:1e:17:81:d9:49:29:e0:de:2f:
14:53:9e:90:a5:94:db:02:85:fd:80:40:21:44:59:50:a0:8f:
c3:d1:34:02:38:b7:f3:e0:57:ef:16:70:7f:75:e7:08:06:a6:
ad:10:83:9f:9b:1d:3f:73:4e:97:ac:1c:31:5d:3a:ba:55:61:
fb:21:c2:78:f9:85:3b:10:a3:1b:11:d4:8e:a2:22:1b:23:c1:
e4:9e:69:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:20:47 2026 by rpki-client