Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: HGUQRbsW4sBEiTfuRjGDYrG2IB+BJ5EvFiHcIQUBL0Q=
Subject key identifier: 85:BC:97:E4:FF:8A:AD:91:C6:7B:48:1D:58:2C:DA:A5:39:F7:35:8C
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 019CAC7E03C471CCB87F7B60C35D417B2D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 0EA4
Signing time: Mon 02 Mar 2026 03:01:05 +0000
Manifest this update: Mon 02 Mar 2026 03:01:05 +0000
Manifest next update: Tue 03 Mar 2026 03:01:05 +0000
Files and hashes: 1: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: mwLQultzOe9s6akEO6BWexQ1sB3QAgve3vImGzn93SA=)
2: ZDnCXrs2VTXwnUeyEGxx3aj0GCo.roa (hash: lCX2OIWetakZH0BDXor6ZmMOPfPeK+kN4Jw1mCD9ZF0=)
3: zMQYa_z0ETouvgoP-hRFa3Ez7Ms.roa (hash: eLkLQOUvRvhD6ZfGFzHN4nd/jJr/zq6oP4KeFHqbKSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:03:c4:71:cc:b8:7f:7b:60:c3:5d:41:7b:2d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: Mar 2 03:01:05 2026 GMT
Not After : Mar 3 03:01:05 2026 GMT
Subject: CN=85bc97e4ff8aad91c67b481d582cdaa539f7358c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:10:85:db:f4:d8:6b:ac:97:03:1a:ef:c6:
23:3a:25:19:37:7d:a6:ca:22:46:27:22:06:8d:fb:
ed:5c:10:cc:70:8b:61:f0:2a:ff:89:3f:2c:81:30:
06:b3:bb:3b:67:67:04:7c:8e:98:b6:4e:9b:59:b6:
f3:11:9c:58:e7:17:38:0d:6a:f6:e2:19:70:e1:cd:
00:66:93:1c:42:2a:3b:db:10:01:29:91:2e:f7:69:
d1:cf:6d:52:13:54:15:36:e8:d2:24:dc:dd:99:09:
17:e7:bb:b6:4b:7e:f2:c1:b7:24:e6:8e:c5:0e:e4:
f0:e7:25:07:49:5e:1c:ee:d9:3a:f7:78:d7:11:ac:
ed:28:19:cd:a6:fc:1c:6d:9c:5b:f4:7c:a2:bd:94:
c3:b2:75:55:ea:7d:31:31:7f:03:c9:b5:1c:cc:40:
05:52:0a:5a:21:15:40:c0:f7:43:31:61:96:e3:91:
82:03:b0:5a:26:d3:db:e9:07:8e:20:5d:b0:0d:73:
8d:b3:7f:81:48:06:46:bd:43:75:20:f0:2d:1f:3d:
18:44:a8:c1:74:7b:1e:b9:e0:25:ea:08:f3:bd:29:
67:2f:8f:39:3e:0f:13:2d:3d:fb:d7:dc:bd:58:eb:
91:1a:73:1b:f1:2b:cf:7e:df:dc:27:ae:a8:79:95:
47:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BC:97:E4:FF:8A:AD:91:C6:7B:48:1D:58:2C:DA:A5:39:F7:35:8C
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:17:02:ef:b3:81:fb:a0:47:24:bd:ad:b6:41:0f:33:34:d1:
c9:f1:1e:8c:1d:c0:0b:e3:2a:d5:50:75:08:7b:57:90:bf:95:
e5:b5:9c:40:7d:38:c8:46:0d:a0:a7:2f:76:9c:25:38:2b:a7:
b4:9e:c8:a8:a1:47:04:99:21:73:d2:a3:05:99:b3:31:be:b5:
96:92:c6:47:9e:27:2c:a7:8e:53:6e:7d:9b:17:66:da:40:4d:
a9:54:80:a4:01:83:4d:e7:5d:32:a1:77:3d:db:89:1b:96:26:
50:28:5a:a2:29:d5:90:86:a8:8b:89:f4:d1:14:f5:ad:c7:14:
e7:d4:0f:a2:0f:77:01:f1:26:48:d9:18:24:6b:0b:f1:b0:7b:
43:b5:d8:a9:fa:11:71:e0:f2:de:d3:fb:da:f7:b7:6f:d3:21:
c7:64:8f:42:13:d4:16:7d:53:95:35:1a:27:2e:12:06:7e:1e:
a3:5e:4a:1d:f5:1e:4e:8c:43:82:7f:88:22:84:b9:29:d0:17:
7e:fd:75:5a:ee:2c:9b:5d:1a:f3:c1:d7:fe:0b:d2:b2:ab:e8:
30:2a:a5:b8:87:0f:40:dc:1f:19:e6:2e:d3:2d:cd:c7:6b:6b:
46:48:a5:b8:39:73:da:b2:70:46:91:0c:b0:91:96:83:d4:3e:
4c:e4:3e:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfgPEccy4f3tgw11Bey1LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MmI0ZWQ5MjY4MmQ3MThhOGZjNDQ4ODE0MDAyNzQwNjk2
MDc5NWYwHhcNMjYwMzAyMDMwMTA1WhcNMjYwMzAzMDMwMTA1WjAzMTEwLwYDVQQD
Eyg4NWJjOTdlNGZmOGFhZDkxYzY3YjQ4MWQ1ODJjZGFhNTM5ZjczNThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwwQhdv02GuslwMa78YjOiUZN32m
yiJGJyIGjfvtXBDMcIth8Cr/iT8sgTAGs7s7Z2cEfI6Ytk6bWbbzEZxY5xc4DWr2
4hlw4c0AZpMcQio72xABKZEu92nRz21SE1QVNujSJNzdmQkX57u2S37ywbck5o7F
DuTw5yUHSV4c7tk693jXEaztKBnNpvwcbZxb9HyivZTDsnVV6n0xMX8DybUczEAF
UgpaIRVAwPdDMWGW45GCA7BaJtPb6QeOIF2wDXONs3+BSAZGvUN1IPAtHz0YRKjB
dHseueAl6gjzvSlnL485Pg8TLT3719y9WOuRGnMb8SvPft/cJ66oeZVHfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIW8l+T/iq2RxntIHVgs2qU59zWMMB8GA1UdIwQY
MBaAFFcrTtkmgtcYqPxEiBQAJ0BpYHlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84ODRjMzEtZTUwOS00MjJiLWIwYTEt
YWY5ZmMwMTJiZDU0LzEvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84ODRjMzEtZTUwOS00MjJiLWIwYTEtYWY5ZmMwMTJiZDU0
LzEvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxcC77OB
+6BHJL2ttkEPMzTRyfEejB3AC+Mq1VB1CHtXkL+V5bWcQH04yEYNoKcvdpwlOCun
tJ7IqKFHBJkhc9KjBZmzMb61lpLGR54nLKeOU259mxdm2kBNqVSApAGDTeddMqF3
PduJG5YmUChaoinVkIaoi4n00RT1rccU59QPog93AfEmSNkYJGsL8bB7Q7XYqfoR
ceDy3tP72ve3b9Mhx2SPQhPUFn1TlTUaJy4SBn4eo15KHfUeToxDgn+IIoS5KdAX
fv11Wu4sm10a88HX/gvSsqvoMCqluIcPQNwfGeYu0y3Nx2trRkiluDlz2rJwRpEM
sJGWg9Q+TOQ+zA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:42:22 2026 by rpki-client