Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier: UxX58RhDZUwKfkki/PDzmtNsxONWXPqGPDHie35myLw=
Subject key identifier: 78:15:26:94:A8:A2:AF:2B:32:FE:B9:2D:7B:E0:E4:61:14:8C:71:00
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 019D99CFDBC14CA681DB83915F703AD29C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number: 1594
Signing time: Fri 17 Apr 2026 05:00:29 +0000
Manifest this update: Fri 17 Apr 2026 05:00:29 +0000
Manifest next update: Sat 18 Apr 2026 05:00:29 +0000
Files and hashes: 1: PD1WySNjlq_IY2uBIMnATsjVoRM.roa (hash: SZgZePDON35ElVyphahHJc8sNER6FBgFl6oM5awboYo=)
2: k8w0NUXD9JayBBvKF9ncDALdg78.roa (hash: lUbCLxx0DXi3nyWOu3iruTVHC0Q/jhFLMzT5toYmB6I=)
3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: e5dER+vbo230jxs/Vqp+dzf5N0DISVxChjNgXa1iTWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:db:c1:4c:a6:81:db:83:91:5f:70:3a:d2:9c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: Apr 17 05:00:29 2026 GMT
Not After : Apr 18 05:00:29 2026 GMT
Subject: CN=78152694a8a2af2b32feb92d7be0e461148c7100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:54:f7:aa:09:56:f4:00:1a:c8:fc:1e:af:3f:
ec:ca:18:25:ee:cc:1a:91:cc:92:33:d0:49:c6:88:
71:70:02:34:2a:17:b1:e3:0e:67:ff:e2:a1:ef:35:
af:53:da:99:50:74:65:74:6c:43:e7:8f:5e:41:67:
bd:a9:d0:34:27:de:e6:96:40:8c:ca:63:84:5b:0b:
91:3a:80:48:a1:72:2b:e2:f8:03:14:c7:92:e8:ae:
d6:d5:7f:31:10:a3:36:cc:21:2f:4c:3d:0b:f0:c0:
dc:27:29:60:ea:df:b6:c6:21:5a:3f:30:3b:7b:23:
a0:73:04:6d:b0:47:01:3c:0d:f5:99:15:27:2d:03:
a4:73:51:e6:9d:83:68:19:fc:2d:8b:02:69:08:d9:
68:00:ad:3a:65:32:ed:c5:93:a1:96:45:ac:aa:70:
41:75:47:de:61:e7:2b:98:86:b8:97:a9:11:37:9e:
53:1d:12:24:c8:99:0c:53:31:41:7e:5b:79:cc:05:
27:20:42:b2:39:b7:0e:2e:b6:51:1d:42:81:20:8d:
b5:ca:6e:bc:cb:fa:ac:9f:73:6e:c3:6e:b6:42:c5:
7a:ef:ca:76:1d:93:56:9d:7c:e4:10:f0:f4:31:bf:
c3:89:27:8e:d1:ea:cf:5c:50:4c:1e:2c:d6:4a:b1:
0b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:15:26:94:A8:A2:AF:2B:32:FE:B9:2D:7B:E0:E4:61:14:8C:71:00
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6a:3a:fc:5b:76:99:da:60:37:3f:c9:5b:f5:b1:a9:ae:e9:
e3:3b:a1:30:9c:1d:a5:59:59:67:6c:82:ee:86:c5:bc:9a:c7:
23:fb:d2:7e:06:0b:e2:d6:a4:55:c2:4e:34:20:04:ed:57:1a:
88:15:5a:c1:5f:8d:1f:35:51:6d:94:9f:41:de:9d:80:af:56:
5b:37:ac:60:d2:ac:7c:08:3c:83:f5:b4:6a:13:33:2b:92:b6:
bf:52:20:df:a1:77:7f:f9:2a:e1:6d:58:d9:3a:8a:fd:cd:71:
fb:4d:8b:35:aa:ea:67:d7:a2:f4:d3:aa:59:18:33:14:cc:0c:
4b:1b:4e:65:8a:a0:3b:79:ea:e1:68:fe:e6:86:02:ee:11:57:
25:fa:0b:f4:8d:14:29:62:4c:38:b3:16:4c:54:a8:00:de:62:
12:78:49:91:5b:5a:e7:ec:92:14:d0:cb:c8:97:55:75:0b:9a:
c5:dc:ba:7a:53:62:0c:70:f8:2f:f4:ad:e3:12:5a:88:57:5c:
da:e4:13:ae:1d:af:eb:87:93:cc:5f:9d:71:20:31:54:65:be:
35:3a:6c:42:44:3e:6b:1d:16:69:49:22:be:4b:f3:31:57:ec:
d7:8c:58:f1:5e:09:83:7a:e1:66:fe:c6:6f:a5:2b:f5:61:0e:
6e:5a:6e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:22:28 2026 by rpki-client