Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier: 55gwzHLPZyyW8IT+f8T2wMUvrMhEqrTipz6DUvmI580=
Subject key identifier: 67:70:DE:64:2C:F3:17:D8:B2:CC:3B:5C:96:D2:32:22:24:72:D7:11
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 01A0E1E289B912E5AC1AF065CC734C04E7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number: 1747
Signing time: Sun 27 Sep 2026 08:01:54 +0000
Manifest this update: Sun 27 Sep 2026 08:01:54 +0000
Manifest next update: Mon 28 Sep 2026 08:01:54 +0000
Files and hashes: 1: PD1WySNjlq_IY2uBIMnATsjVoRM.roa (hash: SZgZePDON35ElVyphahHJc8sNER6FBgFl6oM5awboYo=)
2: k8w0NUXD9JayBBvKF9ncDALdg78.roa (hash: lUbCLxx0DXi3nyWOu3iruTVHC0Q/jhFLMzT5toYmB6I=)
3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: bdD57wSvp34tsE+qkKQN34TMnYe2kdsakfDbXFYhJqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:89:b9:12:e5:ac:1a:f0:65:cc:73:4c:04:e7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: Sep 27 08:01:54 2026 GMT
Not After : Sep 28 08:01:54 2026 GMT
Subject: CN=6770de642cf317d8b2cc3b5c96d232222472d711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:26:11:bf:7a:ad:35:bb:9e:ac:a9:9a:0d:
ba:dd:41:97:8d:e8:83:72:aa:67:e6:dd:b5:fe:40:
d0:b6:b1:ff:74:3a:f5:36:5a:cb:cd:8d:14:fa:74:
9b:0e:61:11:f6:99:77:a0:9d:44:53:92:ed:82:61:
ce:0d:bf:78:b7:de:e0:64:3b:9a:30:c3:9f:88:a3:
3a:48:81:78:50:95:ed:01:7d:ce:06:4f:5b:29:33:
d5:63:2c:f9:c8:9e:22:22:e6:93:94:84:64:bd:6e:
62:fc:53:e0:10:e5:40:71:4b:23:90:1a:2e:54:0e:
9c:5f:03:62:7b:f5:99:1a:8a:88:7c:9a:3a:18:dc:
66:2f:6a:56:e8:8e:d4:c5:c2:78:b4:3c:a9:16:40:
ab:9f:06:0c:7e:62:c5:5b:79:c4:1a:ca:8c:0e:d4:
5e:6e:09:b3:4f:8b:fb:25:a6:bd:28:21:c5:c9:56:
5a:21:b3:fe:68:17:65:3b:4b:5c:f9:ce:c4:30:bd:
9a:8e:44:75:21:d5:03:cb:8e:40:51:67:ea:b1:84:
1e:22:3a:e0:99:dd:e9:36:91:17:62:23:3c:04:ed:
12:3d:f4:24:bb:a8:7a:a0:3c:ab:11:99:13:9a:1d:
da:2a:ef:46:22:78:01:b2:1b:17:33:30:a0:e9:57:
e8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:70:DE:64:2C:F3:17:D8:B2:CC:3B:5C:96:D2:32:22:24:72:D7:11
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1b:fa:3b:6e:5c:09:67:d5:67:72:7b:b7:fe:fb:29:6f:f9:
be:dd:08:86:bf:01:b8:42:70:e6:34:7f:7b:a9:a1:45:27:77:
3b:cc:43:f5:dc:f7:bb:b3:a8:ec:6d:44:99:bd:8b:00:53:69:
53:a5:fe:8c:27:f2:f4:5c:e7:34:79:dd:a0:67:09:93:bc:3a:
c8:d7:2c:ea:84:82:17:ad:6e:01:6f:7e:cc:7f:16:f3:01:eb:
f8:ef:b5:c7:1f:00:b7:6c:0a:25:57:ea:45:f3:2c:e5:89:9c:
99:a3:b7:b3:f6:84:1b:ba:0d:c9:7b:8a:43:17:0e:4a:f3:35:
1c:1d:07:99:03:76:0e:c4:5b:9f:18:12:d0:ce:91:6d:d7:2a:
16:33:aa:d8:e6:96:d2:7d:06:74:ed:d6:1a:e0:aa:92:1e:88:
31:be:b2:6d:2d:9d:27:05:3b:e9:8f:6d:e6:1e:45:eb:90:ae:
0b:13:1d:cf:15:34:07:4f:d2:e2:16:23:bf:9d:92:58:fd:61:
c8:f5:22:8c:4c:28:b6:2b:6a:2b:ef:37:d0:8a:d9:a9:df:50:
8a:c6:5d:02:e0:73:30:0f:7a:e3:e1:37:87:74:d1:89:a7:f8:
43:c3:d6:73:66:5a:cb:bd:ec:31:a1:a1:3f:3e:90:c2:01:95:
74:46:5b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:34:38 2026 by rpki-client