Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
File: VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json)
Hash identifier: 3Mq1moV4BioFAF7j3V9Xkz5mKStlaURRRSQ7nfUkt4Y=
Subject key identifier: F2:D3:5D:62:B3:51:AA:9D:56:F2:FF:DB:01:1C:2B:95:04:58:E8:B0
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 019CAC0FD5D73E2BE2CF8B9A8C3756CBBAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
Manifest number: 131A
Signing time: Mon 02 Mar 2026 01:00:44 +0000
Manifest this update: Mon 02 Mar 2026 01:00:44 +0000
Manifest next update: Tue 03 Mar 2026 01:00:44 +0000
Files and hashes: 1: 4-WbBaq98Oq9Hev6MWdBUYGPmH0.roa (hash: GNmnhi1gsX6X4qEuEkfyWsKzBAsClKRsbDlEB+HLZ4o=)
2: CjhmCMWptrEEhGP0rWZ3aS_GZCQ.roa (hash: xRBb5qX8Yz/3LKM505uXNjs7V3IJIMZmvB9mN9XYUV0=)
3: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: tfAAi5V2BaOLTkUtvjEIsRJ7XQQPKF1bEQMGbVed318=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:d5:d7:3e:2b:e2:cf:8b:9a:8c:37:56:cb:ba:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Mar 2 01:00:44 2026 GMT
Not After : Mar 3 01:00:44 2026 GMT
Subject: CN=f2d35d62b351aa9d56f2ffdb011c2b950458e8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:69:dd:89:41:77:9f:8e:6b:72:96:ec:67:
b6:e0:7a:cb:a5:26:92:db:8a:4b:31:d0:3c:1f:31:
24:09:70:55:42:22:7d:cb:ef:9b:18:97:f4:d4:55:
97:0d:4e:7c:a1:60:9b:cc:2d:2d:8b:17:c1:ed:5b:
d6:54:98:f3:76:ec:69:65:8e:13:66:e3:68:3e:6c:
45:fb:a3:d0:31:09:9e:5b:b9:f4:17:86:b9:cf:e5:
2a:c8:7e:fc:bb:6f:42:64:32:37:9f:3c:61:16:b3:
58:d1:87:75:52:6d:b9:e6:e8:80:9d:82:37:5e:a9:
01:b1:7a:ad:b1:b5:d8:ef:ca:f6:44:9b:3a:56:42:
90:50:ae:73:16:59:31:e1:13:8f:fa:f2:0d:5b:1d:
5d:de:02:d0:d9:a0:81:b6:90:3e:b9:e9:f9:bc:91:
2a:0d:ae:f7:24:7d:a2:31:8f:39:48:af:cd:72:df:
8a:a1:81:38:66:f4:a7:b9:5a:39:f3:2e:c4:04:e9:
fa:4d:31:8f:c5:f7:a5:f1:2a:9c:2d:76:a6:55:4d:
1b:30:9c:d2:89:18:36:b3:c8:95:cc:2a:8d:68:66:
b2:8b:d3:05:bf:8f:c2:fd:9f:b6:c2:9f:27:27:c9:
d9:6f:e9:74:2d:3f:1f:1f:7f:17:cb:8d:1c:aa:1b:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D3:5D:62:B3:51:AA:9D:56:F2:FF:DB:01:1C:2B:95:04:58:E8:B0
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:30:d7:09:56:b3:f4:70:4e:08:f0:38:5e:c9:40:66:77:a7:
ee:93:d9:d3:02:06:1c:ef:ff:f7:7a:66:b6:c8:d9:7f:d2:2c:
a8:3d:15:e7:7e:eb:5b:1f:e4:a1:5d:7a:16:ff:9f:fb:08:69:
10:e7:f1:66:f6:ed:d9:4c:16:5d:31:3a:a6:19:f7:05:69:78:
ae:bd:3d:94:19:9a:c0:62:65:53:d6:19:b4:9b:89:4d:fe:e9:
e7:a0:69:4c:3a:92:70:c2:4b:18:ab:cc:5a:d1:05:dd:cb:91:
fe:af:67:de:76:5b:b9:5f:e8:b2:e8:1d:ca:37:9b:55:01:2e:
5e:34:22:d3:d2:4c:90:34:13:9a:dc:cf:89:4b:be:4a:ec:51:
1d:3f:37:78:d3:d5:e1:59:30:d3:ee:93:d0:07:b7:94:0f:f3:
7b:18:c9:70:a6:04:69:a6:fe:f6:56:b7:ac:be:85:25:d2:50:
5f:fe:33:a9:3d:96:32:b3:39:00:14:1d:89:97:c2:95:8e:34:
8a:98:18:a3:8b:25:44:06:5b:63:1c:16:ab:69:8b:e8:eb:8d:
74:94:ea:62:2a:cc:4d:02:a7:44:b9:82:28:db:20:09:bc:b3:
2e:75:4c:69:0c:65:b8:89:2a:2b:ec:40:00:55:98:42:48:16:
3e:4e:f2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:55 2026 by rpki-client