Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: 2UR5gUhGRhjAqcqVyMioBdtzq3lXgt0gFYstJ2f4O8w=
Subject key identifier: 43:EC:FC:30:35:04:80:AC:6D:C2:04:F1:05:53:D3:6D:C9:09:C4:8A
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 01A08754221679A9745909075BFCEE4B08B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 10A3
Signing time: Wed 09 Sep 2026 18:00:32 +0000
Manifest this update: Wed 09 Sep 2026 18:00:32 +0000
Manifest next update: Thu 10 Sep 2026 18:00:32 +0000
Files and hashes: 1: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: q6/PHKzHgDlSdLBeOXJ4Qjo6q5O7VvJkKsTgFxPomLA=)
2: ZDnCXrs2VTXwnUeyEGxx3aj0GCo.roa (hash: lCX2OIWetakZH0BDXor6ZmMOPfPeK+kN4Jw1mCD9ZF0=)
3: zMQYa_z0ETouvgoP-hRFa3Ez7Ms.roa (hash: eLkLQOUvRvhD6ZfGFzHN4nd/jJr/zq6oP4KeFHqbKSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:54:22:16:79:a9:74:59:09:07:5b:fc:ee:4b:08:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: Sep 9 18:00:32 2026 GMT
Not After : Sep 10 18:00:32 2026 GMT
Subject: CN=43ecfc30350480ac6dc204f10553d36dc909c48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:49:4d:47:6f:b2:b0:eb:24:64:ba:81:53:
41:b1:28:3b:19:50:2d:6d:78:9a:4b:69:72:24:66:
57:38:74:07:00:dc:63:4c:44:9c:a2:79:dc:23:35:
d5:eb:d7:de:33:cc:6f:cf:c7:4a:38:a5:a7:ff:1c:
15:30:86:5d:b8:fc:e3:26:7e:63:23:5f:7f:b0:0e:
ab:67:0a:08:53:f1:6c:69:79:e8:e8:fe:22:75:55:
cc:7c:49:57:8c:64:ac:45:2f:55:7b:8e:c1:83:af:
56:ca:78:74:c4:6d:41:35:67:6b:74:ef:46:40:bc:
45:bd:2d:46:9a:01:9a:15:11:db:2e:6e:4a:68:a1:
9b:d3:b0:1a:d5:0c:cd:b7:8f:cf:1d:79:24:9f:84:
20:4e:80:f7:e6:1b:70:03:9b:08:3c:eb:64:65:0e:
d4:b3:c8:42:e0:43:a0:82:28:53:18:77:40:aa:4f:
ff:90:b1:c0:37:e0:1e:42:49:4d:a1:37:bd:e1:4f:
44:3a:ef:40:46:8f:5b:0f:b2:c7:62:3a:82:c1:f5:
fc:84:49:d8:28:e2:3c:5c:6f:5d:2c:c3:b5:01:96:
f2:43:38:5d:e1:8f:a4:23:41:7e:cc:5c:84:de:7f:
05:e8:5c:5e:58:80:50:d4:e0:c0:d7:ea:fb:57:df:
20:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EC:FC:30:35:04:80:AC:6D:C2:04:F1:05:53:D3:6D:C9:09:C4:8A
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:95:51:2e:21:95:79:0c:50:80:51:ba:b4:1f:3f:e6:ee:f9:
43:46:52:5f:67:93:bf:10:09:d3:8b:8b:b3:aa:66:57:c3:91:
8a:fd:c3:a1:c2:3d:dd:11:32:da:9b:ad:ae:bf:94:34:11:b3:
1f:d5:f0:c5:1b:26:05:03:34:97:d3:cd:04:9b:f1:93:ea:47:
1b:35:70:97:a1:f8:01:37:bb:4e:65:b2:cb:57:da:9e:1f:7b:
00:1a:65:5e:65:8f:b2:9d:10:17:22:22:e7:46:fb:2f:61:4a:
6b:02:67:9f:99:b6:e0:09:20:e8:d7:81:69:18:71:11:f3:95:
49:28:66:21:92:01:7c:b2:10:cd:18:8c:67:4b:62:8e:90:be:
f0:ad:6e:32:db:70:6a:71:08:d6:80:a0:af:e2:e0:aa:8e:30:
78:2d:30:7f:59:b3:b0:82:af:32:e1:7f:58:d6:1a:14:ee:ab:
08:b7:e8:fe:7f:9b:58:70:f1:a0:73:fb:7a:b7:d9:38:6b:b0:
f0:f8:dc:52:5d:a4:40:f8:26:e0:fd:05:6e:33:38:e9:82:55:
f4:54:3a:6f:8e:54:f5:cc:8b:d9:32:80:99:de:b7:c0:dd:79:
c0:b9:7e:4a:06:4f:91:30:3c:30:53:8b:6f:c6:2c:66:35:98:
82:65:32:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 22:22:58 2026 by rpki-client