Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: ZyATNyfHN7CErUM1oEVvNsKiCIXsgzknVc2PvJ6TKGg=
Subject key identifier: D9:3C:6E:39:98:00:1B:61:70:00:12:6D:5D:01:D5:9B:AC:31:7B:DA
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 019EC18017BD3DCF1C4FE421DCA8B0192A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 0FB8
Signing time: Sat 13 Jun 2026 15:00:57 +0000
Manifest this update: Sat 13 Jun 2026 15:00:57 +0000
Manifest next update: Sun 14 Jun 2026 15:00:57 +0000
Files and hashes: 1: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: YW8wsPhLDSL8lW+PO60E6J/TOIR6zZjwd08/gjwnd4A=)
2: ZDnCXrs2VTXwnUeyEGxx3aj0GCo.roa (hash: lCX2OIWetakZH0BDXor6ZmMOPfPeK+kN4Jw1mCD9ZF0=)
3: zMQYa_z0ETouvgoP-hRFa3Ez7Ms.roa (hash: eLkLQOUvRvhD6ZfGFzHN4nd/jJr/zq6oP4KeFHqbKSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:17:bd:3d:cf:1c:4f:e4:21:dc:a8:b0:19:2a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: Jun 13 15:00:57 2026 GMT
Not After : Jun 14 15:00:57 2026 GMT
Subject: CN=d93c6e3998001b617000126d5d01d59bac317bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:f6:79:4d:20:22:39:a3:ae:fc:61:c1:2e:
fd:57:23:7a:38:be:d5:75:4f:2e:a4:4d:b1:c9:83:
23:c9:59:6c:21:28:6c:81:ef:9d:38:db:05:26:a6:
5c:a6:ef:0b:0f:66:d1:50:2f:74:32:37:2c:7c:d0:
d1:81:00:fb:67:e1:61:62:e1:d7:f8:62:0b:5f:74:
f0:57:af:dc:6a:a1:8c:13:9b:34:92:94:bb:c3:2e:
a2:d3:74:99:8e:0c:81:27:25:91:c5:24:7e:68:ac:
e0:6f:a6:fa:7c:53:81:34:9c:8a:b0:f2:99:ad:cd:
bb:33:55:5e:a5:13:37:13:9e:e7:54:c0:ba:0b:9f:
52:bc:4e:ac:07:e0:89:14:98:3d:b2:57:df:82:bb:
5c:bf:df:9d:bd:3c:13:6e:c1:aa:c0:28:3e:38:01:
df:3b:e5:e0:dd:d8:ff:17:d7:de:11:d4:85:01:46:
4d:6f:fc:48:f0:4f:a3:cf:36:89:38:49:a7:20:ba:
d9:bd:a0:ce:81:de:1a:5d:c6:ee:4d:82:c0:18:3e:
cf:2b:f2:5c:3e:15:f4:8d:08:ee:53:c6:d1:f3:52:
a5:02:a1:a0:24:ed:7a:f8:1a:3e:40:6a:d4:32:c7:
34:bb:ad:8e:0c:ad:61:2d:16:08:c8:8e:57:01:76:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3C:6E:39:98:00:1B:61:70:00:12:6D:5D:01:D5:9B:AC:31:7B:DA
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b4:08:fb:38:2f:66:19:54:8f:b4:05:fb:01:ea:d4:17:10:
ea:60:0b:3f:3a:a7:5f:3a:b7:cb:e0:ed:39:8f:74:00:3f:52:
72:70:30:9d:cf:ed:9c:ab:4d:13:17:e5:ea:10:56:49:50:35:
73:df:6d:90:d9:f5:72:28:fb:05:99:d3:f1:dd:49:87:9c:79:
56:33:fe:9c:42:87:3e:68:98:3e:51:70:86:48:69:35:e5:34:
e3:18:8f:11:16:37:1f:4e:64:60:e0:e6:a0:d8:b9:0c:32:1c:
c5:af:84:33:96:4d:03:68:ca:16:64:c3:d2:9f:30:61:19:7e:
ad:af:67:28:9f:58:ce:86:14:f5:99:0e:19:ff:50:ed:aa:a3:
25:f7:82:68:bd:78:0b:a5:fc:ff:10:08:48:c1:92:f2:6c:55:
b5:2b:f6:e6:51:06:b1:99:32:ef:45:7b:fa:fe:7e:c7:42:35:
68:45:51:60:2f:69:e8:80:1e:8b:8c:1d:56:89:a4:75:41:08:
9d:ea:dd:b5:48:52:6f:de:db:61:cb:57:3b:25:fe:a4:c8:0f:
ff:3a:78:06:d3:bf:76:7d:60:c9:62:5e:d4:82:3e:be:6f:5e:
92:fa:7a:9d:0f:06:40:10:83:5e:7d:c3:97:6d:e2:69:94:d4:
c0:15:41:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BgBe9Pc8cT+Qh3KiwGSphMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MmI0ZWQ5MjY4MmQ3MThhOGZjNDQ4ODE0MDAyNzQwNjk2
MDc5NWYwHhcNMjYwNjEzMTUwMDU3WhcNMjYwNjE0MTUwMDU3WjAzMTEwLwYDVQQD
EyhkOTNjNmUzOTk4MDAxYjYxNzAwMDEyNmQ1ZDAxZDU5YmFjMzE3YmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJf2eU0gIjmjrvxhwS79VyN6OL7V
dU8upE2xyYMjyVlsIShsge+dONsFJqZcpu8LD2bRUC90MjcsfNDRgQD7Z+FhYuHX
+GILX3TwV6/caqGME5s0kpS7wy6i03SZjgyBJyWRxSR+aKzgb6b6fFOBNJyKsPKZ
rc27M1VepRM3E57nVMC6C59SvE6sB+CJFJg9slffgrtcv9+dvTwTbsGqwCg+OAHf
O+Xg3dj/F9feEdSFAUZNb/xI8E+jzzaJOEmnILrZvaDOgd4aXcbuTYLAGD7PK/Jc
PhX0jQjuU8bR81KlAqGgJO16+Bo+QGrUMsc0u62ODK1hLRYIyI5XAXYJJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNk8bjmYABthcAASbV0B1ZusMXvaMB8GA1UdIwQY
MBaAFFcrTtkmgtcYqPxEiBQAJ0BpYHlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84ODRjMzEtZTUwOS00MjJiLWIwYTEt
YWY5ZmMwMTJiZDU0LzEvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84ODRjMzEtZTUwOS00MjJiLWIwYTEtYWY5ZmMwMTJiZDU0
LzEvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbQI+zgv
ZhlUj7QF+wHq1BcQ6mALPzqnXzq3y+DtOY90AD9ScnAwnc/tnKtNExfl6hBWSVA1
c99tkNn1cij7BZnT8d1Jh5x5VjP+nEKHPmiYPlFwhkhpNeU04xiPERY3H05kYODm
oNi5DDIcxa+EM5ZNA2jKFmTD0p8wYRl+ra9nKJ9YzoYU9ZkOGf9Q7aqjJfeCaL14
C6X8/xAISMGS8mxVtSv25lEGsZky70V7+v5+x0I1aEVRYC9p6IAei4wdVomkdUEI
nerdtUhSb97bYctXOyX+pMgP/zp4BtO/dn1gyWJe1II+vm9ekvp6nQ8GQBCDXn3D
l23iaZTUwBVB7Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:29:33 2026 by rpki-client