Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: ul/9AmoHILX20SF+njyGgpnweU5quoVJPhVYq1Au6D4=
Subject key identifier: 20:3D:37:3C:CD:33:28:D9:84:69:A2:04:52:0C:6D:79:C3:CA:3C:9E
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 01A0EDAF523EE1337F2FAC3A457D4092D8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 10D8
Signing time: Tue 29 Sep 2026 15:01:25 +0000
Manifest this update: Tue 29 Sep 2026 15:01:25 +0000
Manifest next update: Wed 30 Sep 2026 15:01:25 +0000
Files and hashes: 1: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: odnLwBM/LBHmEKjnFmGyZrgTTFv7Itfpi6S3C7O8Zo4=)
2: ZDnCXrs2VTXwnUeyEGxx3aj0GCo.roa (hash: lCX2OIWetakZH0BDXor6ZmMOPfPeK+kN4Jw1mCD9ZF0=)
3: zMQYa_z0ETouvgoP-hRFa3Ez7Ms.roa (hash: eLkLQOUvRvhD6ZfGFzHN4nd/jJr/zq6oP4KeFHqbKSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:af:52:3e:e1:33:7f:2f:ac:3a:45:7d:40:92:d8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: Sep 29 15:01:25 2026 GMT
Not After : Sep 30 15:01:25 2026 GMT
Subject: CN=203d373ccd3328d98469a204520c6d79c3ca3c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:bb:82:75:4a:0b:5d:b3:44:ce:4b:c4:e0:
aa:4e:44:13:b9:bf:4b:7b:ab:e7:1d:35:98:1c:5b:
fa:3a:01:eb:b2:62:d2:4a:f3:58:be:22:fe:40:15:
67:c8:08:7e:38:86:3a:10:8b:11:17:2a:b7:91:9d:
7f:db:e1:f8:e8:82:35:56:02:be:ce:b2:a0:35:92:
32:04:ce:79:7c:fc:50:50:ea:fd:b8:05:29:5d:d2:
b2:59:ea:13:83:8b:db:0d:b6:30:42:52:4e:03:00:
c7:de:00:2c:6c:c6:a0:ae:7f:f4:41:a4:47:a9:d5:
1a:14:99:ab:4b:0e:58:71:a7:bc:da:28:fb:79:35:
20:e6:07:dc:21:7f:f7:f0:43:e8:11:66:44:d3:ce:
f1:93:9e:66:18:ee:de:e2:c7:76:c9:b8:4b:de:88:
78:2d:29:4c:7c:64:85:04:7d:ca:c2:cb:f0:90:7c:
9f:97:cd:b3:89:11:de:4c:1e:4e:d7:c7:8f:be:92:
2f:29:01:e3:e5:28:d9:c2:e8:a7:63:31:fb:9c:f7:
74:d6:e7:fb:c6:8a:7c:26:0a:77:00:06:d8:27:37:
2c:27:00:11:0a:1c:17:5e:b8:7b:58:1e:3c:f2:e2:
27:13:6f:d6:27:f0:c8:51:78:b7:7f:05:e0:27:cf:
80:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3D:37:3C:CD:33:28:D9:84:69:A2:04:52:0C:6D:79:C3:CA:3C:9E
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2e:3d:45:a5:da:5e:08:6e:ba:08:bc:de:4e:61:96:8a:e8:
f5:b4:20:79:20:08:a6:53:d6:c3:64:a5:90:e0:00:02:05:8a:
a2:1a:ad:b0:70:61:40:5a:2f:fd:69:c2:6b:0f:6e:1f:26:e0:
fc:0f:69:44:4f:ce:ba:66:01:f1:6f:35:ed:9b:6d:59:43:af:
47:05:bb:83:21:d2:36:4c:4f:bd:52:70:ac:fc:67:6d:3d:65:
48:5e:7d:e1:81:51:c7:3c:9b:b6:6e:68:d3:88:95:67:10:fb:
76:7f:75:ae:42:f9:cd:3a:32:3f:6c:0e:a0:18:89:a2:18:b5:
0e:82:7f:6a:52:98:fd:2d:bc:e0:13:67:7f:08:e2:ad:6a:2f:
12:01:d4:17:76:56:16:b5:ce:f9:48:b1:ab:f3:6f:ea:be:e4:
b3:53:a2:4b:c3:d9:c8:47:51:5f:af:50:60:2e:4d:0f:47:7c:
cd:56:d5:51:88:4b:fb:4c:23:40:90:43:99:31:c4:b9:38:31:
4f:b1:50:59:44:ae:e5:bb:65:3d:53:b2:c3:b2:23:04:0d:33:
bb:0b:4f:fa:e2:99:36:c2:c6:3c:6b:07:1a:53:91:d9:55:72:
b9:75:f6:9f:de:0a:1b:08:93:99:6e:f2:d9:f8:57:c4:53:8d:
c0:e3:62:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 18:04:38 2026 by rpki-client