Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
File: VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json)
Hash identifier: wzMSdJn9bsvOgctO0HUak4I0AlTJQVMGq8MCmK2kaLM=
Subject key identifier: C5:3B:41:36:10:8E:A0:73:0A:7D:D2:3D:C5:B1:21:09:91:A6:C7:58
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Certificate issuer: /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial: 019CACB4D8DCAAE066E65F35C9CD189AD3B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
Manifest number: 0588
Signing time: Mon 02 Mar 2026 04:00:58 +0000
Manifest this update: Mon 02 Mar 2026 04:00:58 +0000
Manifest next update: Tue 03 Mar 2026 04:00:58 +0000
Files and hashes: 1: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: CVfiJNdFPLdMfu0qIWYStEK3BMiGOjOqgLx5un1TnHI=)
2: r8T9kW8X8GtCFTRxWjnqQQkGt18.roa (hash: h3aumMGf0ToESbOzhSKHlEo8BiRIXKiUebFOoBpkJJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:d8:dc:aa:e0:66:e6:5f:35:c9:cd:18:9a:d3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
Validity
Not Before: Mar 2 04:00:58 2026 GMT
Not After : Mar 3 04:00:58 2026 GMT
Subject: CN=c53b4136108ea0730a7dd23dc5b1210991a6c758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:74:a7:25:37:8a:53:87:f0:68:f9:76:f4:
8f:18:f3:a0:91:fb:25:a0:38:9f:1c:3d:28:9e:1e:
ad:dd:7a:73:11:e6:92:f5:d8:61:03:37:5f:62:c1:
db:b9:01:de:12:7c:c2:0d:dd:f3:0c:c0:30:00:26:
50:42:85:2d:7b:d1:1f:aa:bb:17:7a:83:76:24:da:
4c:f3:d6:f1:82:78:44:99:c6:d8:fd:a5:f1:dc:92:
87:c7:ef:3e:05:bb:89:c5:91:b1:8f:64:cf:e5:44:
14:bc:a2:58:68:fc:5f:8a:5e:c4:51:70:ef:ff:df:
66:50:6b:f7:ad:48:58:9b:9d:b7:e4:b2:33:c4:c3:
d6:f3:9c:31:d5:33:9c:55:9d:c1:3c:63:3f:55:5a:
52:ae:70:0f:0b:e8:95:a6:fe:c8:1d:e1:79:92:b6:
3e:e3:a2:64:ca:d5:2f:63:2a:da:fa:06:e1:ac:d5:
35:cf:48:4c:0b:d1:ca:16:3d:c7:4b:48:ef:75:b5:
56:56:6c:5b:a2:af:c4:55:1f:03:27:9a:e2:97:00:
04:c9:58:6e:f0:ee:ec:c6:63:8c:d9:ce:89:83:07:
fb:0c:e0:0b:5a:bd:bc:88:90:ae:9a:94:fe:c4:10:
29:42:2f:99:f4:2c:ad:c7:70:ac:7e:f1:c0:f4:8b:
18:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3B:41:36:10:8E:A0:73:0A:7D:D2:3D:C5:B1:21:09:91:A6:C7:58
X509v3 Authority Key Identifier:
keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7f:08:c4:96:e7:a0:22:be:12:db:8f:2a:1f:33:9b:ee:4b:
55:7f:af:22:7a:60:1d:e4:33:5e:7d:19:0f:5e:ae:2c:ff:66:
f1:35:e2:e4:b5:11:0c:4c:dc:62:ac:7a:43:7e:89:fa:55:52:
1a:8e:1d:92:00:b5:71:18:03:b1:22:14:c7:73:84:03:18:2c:
09:59:09:e1:3d:9b:a5:4e:2b:c0:d8:fb:45:ed:26:6e:6e:2d:
75:0a:ff:3e:3a:3c:89:37:b3:e8:45:6d:ff:25:30:db:e8:04:
b9:48:ef:27:6b:99:00:a6:c2:87:7c:89:87:63:80:1a:84:f5:
7e:4b:db:c9:2b:49:65:a7:b2:bd:02:4c:fe:f3:30:da:9d:bd:
7f:82:e7:a1:8c:d7:74:a1:92:93:81:43:dd:de:0c:4d:77:72:
46:22:cd:f1:c8:7e:b8:48:4c:ac:3e:0f:e7:ed:d0:1c:07:ed:
89:e4:c9:0e:6e:15:f3:14:21:e2:1c:2b:97:5b:4d:15:e0:a6:
51:e2:6d:f0:dc:a4:78:90:f0:58:0e:a0:1e:3a:9e:26:d0:e2:
b4:d7:66:10:7d:65:bc:62:23:74:3d:5e:63:2b:65:51:e7:18:
c2:07:6c:bc:7e:ad:b4:af:91:1d:3a:5e:4a:56:5c:dd:a5:07:
bc:1d:af:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:08 2026 by rpki-client