Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: dxWz7P0gJFq6E2EUgGcb3aUvHsS+rwuXX58SdmsltVA=
Subject key identifier: D3:0E:6D:B8:3B:56:DA:46:CF:82:71:09:E3:31:6D:99:46:10:AC:DD
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 019D98189FEBBB03508E18A2D6A08C4F97CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 0F1E
Signing time: Thu 16 Apr 2026 21:00:43 +0000
Manifest this update: Thu 16 Apr 2026 21:00:43 +0000
Manifest next update: Fri 17 Apr 2026 21:00:43 +0000
Files and hashes: 1: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: far1gPRkoj7jZMfGtR/dqhs6Zm+MOQ3rZQ5AGlEB4p8=)
2: ZDnCXrs2VTXwnUeyEGxx3aj0GCo.roa (hash: lCX2OIWetakZH0BDXor6ZmMOPfPeK+kN4Jw1mCD9ZF0=)
3: zMQYa_z0ETouvgoP-hRFa3Ez7Ms.roa (hash: eLkLQOUvRvhD6ZfGFzHN4nd/jJr/zq6oP4KeFHqbKSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:9f:eb:bb:03:50:8e:18:a2:d6:a0:8c:4f:97:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: Apr 16 21:00:43 2026 GMT
Not After : Apr 17 21:00:43 2026 GMT
Subject: CN=d30e6db83b56da46cf827109e3316d994610acdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:b7:d2:64:72:91:2b:5b:ff:13:56:3e:0e:
41:ab:6c:72:31:56:ff:bb:ba:4f:b8:9c:59:cd:bd:
91:e7:e7:5d:2a:23:78:74:74:9a:65:94:f0:d4:6e:
56:a3:3c:40:76:18:41:04:4d:06:33:1e:a5:3f:67:
b1:ad:22:3d:37:9f:14:e3:26:d9:a5:2b:43:66:6b:
3f:fe:2b:1f:f7:78:8f:6d:61:be:41:fc:9d:41:0f:
1f:f7:45:59:a8:30:33:18:ed:ea:fc:71:88:41:4c:
d8:ee:8e:34:be:dd:c6:c5:8a:8d:96:d3:19:6c:de:
12:d2:a3:7e:ce:21:5f:c4:86:d7:b7:13:34:81:dc:
81:b5:12:1b:68:a9:d6:00:bc:2b:3a:17:f7:af:fc:
61:1e:e6:b4:8f:73:3f:b6:c0:c4:62:69:d5:4f:16:
df:f0:e4:ee:9f:bd:8b:47:61:0d:2c:8b:c6:37:00:
cf:48:ab:31:74:c3:4c:84:8e:a4:ea:84:30:11:b7:
91:8b:62:90:94:a2:bd:95:31:a3:3b:76:26:7f:c4:
de:64:e3:f1:56:e1:bf:ad:ac:39:90:fe:dc:21:33:
11:a4:46:04:3a:96:17:ba:85:05:f3:09:8c:ab:04:
d2:f6:23:d5:c5:49:02:d6:39:a5:d4:9b:c7:e5:7c:
d4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0E:6D:B8:3B:56:DA:46:CF:82:71:09:E3:31:6D:99:46:10:AC:DD
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:21:6d:a1:41:0d:a0:cf:90:30:d9:67:c6:da:17:e4:03:f5:
c0:f6:ea:25:5d:76:2e:43:4b:f6:4f:4d:c9:47:af:19:62:b5:
61:d1:3d:ed:4f:cb:20:82:88:6b:f2:a5:70:72:64:b1:da:4f:
b1:99:2f:a7:69:08:b5:9c:75:90:fe:1b:60:98:2c:a8:be:85:
03:a0:46:9c:27:ef:2b:33:d6:e2:20:49:e4:48:e1:2e:8a:2b:
3d:89:ae:2e:65:3d:fb:cd:a2:0b:23:03:5e:7b:e3:1d:bf:93:
16:9b:79:02:3f:22:d3:81:ff:0e:ee:6a:e8:46:63:f6:46:43:
aa:24:6f:c3:9a:aa:7e:78:fd:78:52:38:1f:87:8c:67:56:07:
ab:f8:8a:86:3e:97:f0:24:9d:b9:dd:a4:0c:78:27:ea:7f:64:
e2:39:88:bb:8f:08:14:ac:fa:1c:53:8a:27:5d:42:65:af:ba:
86:de:c8:11:c7:11:4d:11:dc:5c:0e:70:de:f0:97:54:48:f8:
a1:00:1d:a8:80:e0:dd:29:f5:02:e0:7f:66:25:25:a8:8a:38:
1a:ba:dc:23:19:ee:31:46:4a:05:d4:cf:be:04:64:a2:5e:8f:
08:6e:23:d6:2f:02:64:a0:8a:09:18:16:fb:69:c9:3c:39:dc:
6d:ce:11:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:39:21 2026 by rpki-client