Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File: VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier: IdEKs5VU9h66GVxfQzt+QK0VOLRdhuK6vJAALXCSoKg=
Subject key identifier: F3:FF:53:47:A5:1E:89:C9:02:EB:70:E3:E7:E4:65:F1:E4:85:10:5A
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 019FFA918F477F77BF9CA64DCF4B2A985BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number: 1A38
Signing time: Thu 13 Aug 2026 10:01:11 +0000
Manifest this update: Thu 13 Aug 2026 10:01:11 +0000
Manifest next update: Fri 14 Aug 2026 10:01:11 +0000
Files and hashes: 1: 7NGoj5cGztX58pAtipUcpmb4aIM.roa (hash: vlOULZs24F/kcnILYjizoe3IHDjDEgukRjmyfRx6nIw=)
2: V2ZzzbVPUiKvWiZZCU89cR5PNd0.roa (hash: A3URN1enAjnCkB6UzDkrO/J0z/XkaxyVPZWO9Xu4fHc=)
3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: BSLDwzJfo77Ko8tuj36zlZdNq7k1pnHoI/dvd6nVjMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:91:8f:47:7f:77:bf:9c:a6:4d:cf:4b:2a:98:5b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: Aug 13 10:01:11 2026 GMT
Not After : Aug 14 10:01:11 2026 GMT
Subject: CN=f3ff5347a51e89c902eb70e3e7e465f1e485105a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:5d:6d:55:fa:94:14:98:b1:38:aa:d8:5f:
69:2a:b2:ff:d2:fb:d9:ae:fb:9b:65:54:79:b5:9a:
2b:ec:1f:c6:3a:9f:a6:e4:a3:05:61:d0:83:fd:87:
84:f0:3e:5e:4c:37:5a:ed:9b:84:74:2f:a4:84:bd:
70:ac:17:8c:d5:c0:ad:42:78:b1:a9:52:25:e4:76:
b7:b7:cb:65:c6:9f:ab:ec:a8:18:27:5f:28:69:ce:
2b:14:8a:e1:63:21:10:67:63:c7:cf:9d:9f:5d:b5:
6e:4b:b1:0a:4c:9f:96:6c:7b:40:98:a3:4c:bf:ee:
e1:63:d6:bc:11:9c:16:e7:7c:38:d1:03:fd:90:4c:
4f:b5:97:c5:6a:ff:19:0b:6c:92:ec:97:60:62:5d:
9d:54:5e:b0:20:36:b6:e5:f6:bc:c2:63:43:7d:27:
3a:25:22:57:17:e6:f4:d0:a4:b8:5e:d6:f4:fc:1e:
16:42:6f:da:d3:f1:de:46:43:b0:04:7a:63:41:ba:
ad:30:5a:f2:58:c7:4b:68:2a:6f:49:72:71:a0:31:
c6:cf:35:46:ee:3a:86:f1:c8:a8:63:d8:ed:19:bb:
33:b3:92:4a:4e:72:49:7f:17:7d:0e:bb:b3:f5:ca:
7a:ef:89:7b:b2:a9:85:58:b9:28:44:e6:54:fb:34:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FF:53:47:A5:1E:89:C9:02:EB:70:E3:E7:E4:65:F1:E4:85:10:5A
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:83:e8:9c:2d:a6:aa:60:0c:57:0e:bc:3a:d4:ab:d7:d3:39:
18:7e:4e:87:5e:3d:f3:b9:34:f8:51:62:9e:cb:da:3f:f8:0e:
74:7c:b5:8c:f9:99:fa:6b:10:17:1d:a9:2b:6d:86:a6:f8:9b:
91:dc:35:75:50:1e:55:e2:97:c2:43:f5:23:a0:fb:f2:b9:09:
99:b1:0a:a6:0e:db:c3:0e:2f:b8:7c:17:ed:32:6c:d5:62:84:
de:bd:df:c0:51:0b:52:4b:b6:9b:91:2f:70:41:56:c1:c9:d0:
2c:db:c1:fd:84:a9:e6:17:00:44:bf:83:af:25:9c:65:fc:23:
e3:20:3e:7e:6a:6c:7f:bf:86:90:8b:8f:54:98:f4:03:d8:91:
62:a6:9e:cb:65:75:60:da:dc:97:8f:d7:5e:ba:cc:2b:5a:ca:
75:0d:12:69:6c:75:dd:e4:69:ab:14:23:f4:b2:61:0d:43:3a:
0b:5b:b9:a5:71:9a:20:fd:45:28:db:36:e2:33:d5:75:c6:96:
75:83:10:4e:e4:12:34:60:c2:e0:38:dd:11:f7:ba:04:12:46:
69:47:06:f1:c8:8e:6f:d0:37:ee:d5:5e:12:47:76:ed:bc:89:
74:4b:c5:8d:05:d2:7d:21:f5:f9:f3:0f:0d:ae:e3:1f:37:ba:
d9:1a:31:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:38:44 2026 by rpki-client