Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier: pXuzJaLe/QZuM6cUtDDbbdy1UfezEv73qtwTDxuF0bI=
Subject key identifier: FD:E8:4E:AC:02:19:41:07:91:42:B9:79:C4:F0:07:9D:B6:94:41:39
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 019CAA58CE73CAE46ABFD66E8757EA12C8AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number: 1518
Signing time: Sun 01 Mar 2026 17:01:12 +0000
Manifest this update: Sun 01 Mar 2026 17:01:12 +0000
Manifest next update: Mon 02 Mar 2026 17:01:12 +0000
Files and hashes: 1: PD1WySNjlq_IY2uBIMnATsjVoRM.roa (hash: SZgZePDON35ElVyphahHJc8sNER6FBgFl6oM5awboYo=)
2: k8w0NUXD9JayBBvKF9ncDALdg78.roa (hash: lUbCLxx0DXi3nyWOu3iruTVHC0Q/jhFLMzT5toYmB6I=)
3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: LSW6xpJoTUJE91aYw4G5bi2BBQ30xO/XnbEr7p2D8OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ce:73:ca:e4:6a:bf:d6:6e:87:57:ea:12:c8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: Mar 1 17:01:12 2026 GMT
Not After : Mar 2 17:01:12 2026 GMT
Subject: CN=fde84eac021941079142b979c4f0079db6944139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:55:d2:1a:3a:1e:68:c2:02:bb:54:36:75:d4:
d1:e3:e3:13:27:3d:c6:75:86:5c:c0:82:2d:8f:68:
d1:20:1e:e4:e0:90:9f:ad:f5:0a:86:49:a1:15:24:
df:5a:2c:24:23:f8:0c:b9:8b:55:fd:03:5c:3c:27:
99:0d:1e:ab:93:d8:84:bd:60:be:ca:bc:50:f0:f1:
6e:c1:b8:05:c2:bc:21:8a:fb:70:a3:ff:64:f2:a5:
77:9f:90:a8:31:31:d3:74:3d:91:22:ad:1d:8d:a7:
e4:ab:52:d3:e2:65:72:94:7f:57:0a:16:86:1c:e8:
36:ee:f2:d4:2c:b5:21:3b:d8:2e:f4:83:67:e6:0f:
a0:ce:d5:89:f0:e2:3b:04:c2:67:89:a0:47:b5:57:
83:d9:c1:52:df:71:96:e5:be:31:f7:4a:10:8e:a9:
99:d5:7d:0c:e2:b5:88:30:17:88:ce:3e:c4:7f:65:
12:52:e3:21:91:06:79:2c:c8:41:6e:93:68:88:4f:
4c:07:ce:eb:87:18:78:0e:6a:f4:f4:4b:87:6d:63:
86:79:97:e9:fa:d7:5d:05:76:2e:7b:99:d7:70:53:
51:c7:df:35:bf:d1:02:bc:cf:49:5f:cd:cc:16:34:
72:00:df:4c:0f:07:c6:d1:d8:24:1e:3f:37:b5:b7:
d5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E8:4E:AC:02:19:41:07:91:42:B9:79:C4:F0:07:9D:B6:94:41:39
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:77:56:56:4d:e9:ec:0e:95:79:ad:03:f1:70:6d:f0:ad:99:
2d:02:7d:6b:c7:93:95:d5:76:b6:15:10:b8:f7:28:12:6a:41:
3a:ab:dd:97:4e:63:2c:09:dc:7f:05:40:c1:63:d8:aa:86:01:
ba:34:27:69:f8:fc:fa:f0:f7:83:87:8a:c9:57:52:15:27:33:
3f:e6:1c:4a:78:ef:71:99:31:60:2c:00:3a:ab:34:0d:3d:30:
ad:8a:eb:ac:ea:8c:7f:28:0d:f9:1f:14:c0:6f:26:d5:ce:06:
77:1f:6e:81:f7:8b:13:68:0c:eb:1b:d5:82:43:02:b4:46:5c:
48:ba:ca:d9:ad:0e:b9:95:14:f2:0a:e8:28:e3:86:dd:05:dd:
54:5d:04:54:64:ab:17:e1:17:81:2a:82:d4:37:6d:b2:9c:0d:
4b:fe:80:09:a4:0a:c2:7f:f1:b5:b9:41:25:67:7c:b2:5d:4b:
8c:a8:a1:da:17:a0:8e:87:c9:a2:a1:36:39:75:b0:c6:20:4e:
21:36:54:94:3b:71:b9:fc:c9:d3:b3:49:a6:5c:ce:00:08:fa:
c1:ee:35:df:ae:19:23:95:d3:84:96:5f:e3:c2:c7:e6:a5:c0:
68:8d:b6:0a:48:5a:6d:06:c0:d1:67:8b:73:46:71:3f:d8:e0:
db:a0:e6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:43 2026 by rpki-client