Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier: EBvO6Z1KrirgRvRvWkhclsJv9YjnBYFrcQg7ESnDXnU=
Subject key identifier: E4:70:0C:24:CE:27:2B:A4:00:41:F1:D5:FB:95:F0:08:FA:07:D4:C0
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 019FAAF5C73AEA71F25E572BDBCA66A472B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number: 16A6
Signing time: Tue 28 Jul 2026 23:01:01 +0000
Manifest this update: Tue 28 Jul 2026 23:01:01 +0000
Manifest next update: Wed 29 Jul 2026 23:01:01 +0000
Files and hashes: 1: PD1WySNjlq_IY2uBIMnATsjVoRM.roa (hash: SZgZePDON35ElVyphahHJc8sNER6FBgFl6oM5awboYo=)
2: k8w0NUXD9JayBBvKF9ncDALdg78.roa (hash: lUbCLxx0DXi3nyWOu3iruTVHC0Q/jhFLMzT5toYmB6I=)
3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: zy2F3TWEx1+md5J6OjaoE8mxmh+T+5crWtKEB55O1jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:c7:3a:ea:71:f2:5e:57:2b:db:ca:66:a4:72:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: Jul 28 23:01:01 2026 GMT
Not After : Jul 29 23:01:01 2026 GMT
Subject: CN=e4700c24ce272ba40041f1d5fb95f008fa07d4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1b:d0:fe:1c:ac:78:39:f3:12:b5:d4:cf:dd:
63:42:f9:2a:d6:cb:52:c2:7b:53:79:ca:54:ad:fc:
6b:0a:a2:bc:22:a7:1d:76:c8:e2:fb:24:83:c1:fd:
06:e7:2a:87:b0:1f:27:35:1c:b3:c3:ef:50:13:a6:
14:e8:fa:4b:d2:a1:1a:8d:86:23:d2:b9:3d:a7:90:
4d:71:28:fb:1b:94:93:12:e0:9b:33:df:ca:8d:1a:
ec:66:9e:0e:8b:fb:66:a8:f9:66:59:73:b4:42:23:
3d:45:10:f8:e7:b7:42:15:7e:57:7e:df:4f:d4:69:
9f:17:13:06:f0:91:66:73:c6:71:4c:a1:f4:a9:8c:
d4:f4:df:80:52:93:73:9f:fa:b2:19:90:05:81:e8:
30:00:f2:69:0f:9b:ad:6e:d4:1d:d0:41:a6:d9:c6:
a3:57:64:a4:94:38:c3:82:e8:fb:7f:da:7e:08:a9:
d4:15:1a:71:4c:69:1f:26:f8:b9:2c:00:89:42:47:
f1:0f:eb:87:8b:92:23:73:66:1e:54:e1:a8:97:0c:
c9:17:86:d2:7e:23:a9:ef:d7:9b:44:37:12:d1:00:
f8:b9:95:a3:42:d0:69:1e:e2:b9:4c:95:52:7c:09:
d1:09:27:ce:e2:da:b1:79:da:7c:58:76:ac:50:14:
08:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:70:0C:24:CE:27:2B:A4:00:41:F1:D5:FB:95:F0:08:FA:07:D4:C0
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ce:5b:c3:f6:91:55:32:7c:34:e6:21:67:c0:1e:02:05:97:
62:8e:c4:fd:95:46:f9:e8:18:4b:43:a6:80:5e:0e:52:a6:9a:
3d:4e:00:1b:4c:00:eb:53:08:53:a7:68:1d:58:a8:df:b7:3c:
e9:b5:f1:ef:a7:79:3b:7b:cc:08:5b:0e:d3:0c:ad:40:2e:1d:
67:46:f0:51:44:e7:e7:14:d4:0a:66:d8:e4:b4:7a:a9:31:a5:
48:ad:7b:df:a2:e8:59:9f:0f:85:53:35:18:40:05:87:ec:e4:
32:6f:ea:8f:ca:ef:22:28:e0:10:2e:25:8a:5b:e1:73:2f:42:
d5:f0:1f:b4:ba:f5:4f:63:15:2f:90:2d:6c:9a:5c:74:f9:47:
29:a2:7d:94:ad:89:40:17:7a:71:e4:c3:9f:e8:1f:3b:e9:46:
3d:a4:e1:7b:39:b5:65:8f:07:12:67:1a:3b:6b:8f:8a:76:38:
34:59:58:b4:bf:9c:2c:11:0d:bc:08:f8:e8:ec:5a:d8:6d:78:
d9:40:2c:66:23:98:92:ba:51:75:5e:40:58:74:58:9c:52:53:
43:4d:0a:fd:dd:11:54:5f:6e:fe:92:7a:3f:10:7d:62:bc:98:
21:97:b2:58:25:df:9e:82:47:98:1a:bc:81:ae:c0:5c:e1:b2:
34:e8:e6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:49:32 2026 by rpki-client