Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: aVm7Whq6YlQaip+RBF5D8w08XKgk4bxo90ptOrC1xgI=
Subject key identifier: 53:72:D6:54:5A:7C:44:1F:E4:EB:F3:66:FB:65:5B:39:96:78:89:49
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 019FAD1A609C7845CA7CC4F1C2BA52B366BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 1032
Signing time: Wed 29 Jul 2026 09:00:14 +0000
Manifest this update: Wed 29 Jul 2026 09:00:14 +0000
Manifest next update: Thu 30 Jul 2026 09:00:14 +0000
Files and hashes: 1: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: SosIJra/QASrDTGMb3w5aovKDuR2QI12w/fkvQAKltg=)
2: ZDnCXrs2VTXwnUeyEGxx3aj0GCo.roa (hash: lCX2OIWetakZH0BDXor6ZmMOPfPeK+kN4Jw1mCD9ZF0=)
3: zMQYa_z0ETouvgoP-hRFa3Ez7Ms.roa (hash: eLkLQOUvRvhD6ZfGFzHN4nd/jJr/zq6oP4KeFHqbKSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:60:9c:78:45:ca:7c:c4:f1:c2:ba:52:b3:66:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: Jul 29 09:00:14 2026 GMT
Not After : Jul 30 09:00:14 2026 GMT
Subject: CN=5372d6545a7c441fe4ebf366fb655b3996788949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:df:c1:1a:5b:7d:3a:07:e5:7f:55:06:ee:
0e:f8:35:0a:7b:7b:1d:a8:94:48:c2:fa:7b:75:f9:
0a:cf:4d:dc:dc:49:9e:15:2b:d5:b6:f6:11:35:dc:
72:5e:31:16:3f:4b:d9:eb:87:13:79:b7:a4:b9:c5:
45:c2:c7:87:eb:da:2b:b8:c2:86:70:ad:97:32:33:
20:ff:2a:36:1e:09:f1:e0:2b:79:4c:36:5b:92:48:
fb:53:57:51:ec:3e:a6:ce:ea:9b:9f:fc:35:02:44:
49:2e:4a:22:2e:41:26:d0:bc:20:08:ac:87:25:21:
e4:be:b4:68:bb:c2:fc:7a:4b:27:83:fc:74:5a:0f:
a4:75:49:9d:36:3d:85:dd:96:12:b4:8f:fb:e9:e7:
14:d3:67:cc:42:21:58:ec:a8:cd:d7:62:1a:ec:f1:
1e:0d:dd:85:e7:ac:b7:77:f7:fb:37:01:59:66:07:
10:16:21:a1:96:1d:a8:2c:6b:36:84:8d:3e:9e:e3:
b9:32:44:5c:78:95:bd:98:da:06:88:c7:cc:4c:cf:
16:4b:20:02:80:22:b3:b4:99:2a:70:e5:6f:1c:09:
2f:a5:25:97:ab:0e:1f:b2:15:b0:a5:ee:f1:99:8a:
d5:c3:74:63:2a:8d:dd:12:51:28:d9:65:ea:1e:44:
5d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:72:D6:54:5A:7C:44:1F:E4:EB:F3:66:FB:65:5B:39:96:78:89:49
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b5:f8:9d:b7:7a:c7:15:4a:6e:95:f8:63:99:b4:39:84:e4:
d9:33:67:c2:9e:1d:58:f8:09:66:8a:89:f6:44:08:aa:e0:14:
e6:07:ac:c2:fd:17:c4:61:f4:2d:ee:58:4a:7b:55:af:4f:e1:
94:4f:0d:a1:79:28:8a:fd:eb:5a:f8:df:bf:71:5f:9d:1f:15:
88:4e:40:36:94:19:a8:af:60:64:0e:89:c2:8e:31:8c:0c:18:
03:ff:73:db:58:fb:6c:1e:36:a9:14:5b:1b:bd:7a:4f:a7:a6:
22:ab:7a:d8:87:85:bb:3f:0c:e7:8d:bc:14:1a:41:15:3a:17:
b0:fd:4a:01:2c:ef:0a:6d:5c:46:71:b3:ae:9c:be:5d:d6:d6:
43:f4:5d:05:9b:ba:dd:f2:34:1f:6d:0a:2e:96:27:1f:2e:66:
c0:5a:44:57:0e:30:49:10:49:6a:19:b0:52:b0:93:12:9d:f7:
ac:6e:cb:e6:c6:67:10:60:dd:90:7f:d8:5d:27:d8:d6:37:3b:
2d:46:3a:d0:2d:8e:aa:d0:a7:b0:17:8f:0c:ec:fc:9b:7a:ce:
b6:ce:c8:9f:70:ef:ff:c7:3c:fb:c7:e3:72:54:cf:15:6a:39:
0f:a1:23:d4:e8:85:69:72:c8:f4:55:b8:00:42:07:cb:82:a4:
27:47:13:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:33:33 2026 by rpki-client