Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
File: VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json)
Hash identifier: zrzNCUmA34zCn2riTSz7XBtSYWrbacpkgK3CFZ0gtzA=
Subject key identifier: A7:E3:31:EB:C7:BA:93:E6:AB:01:4D:3B:37:47:7F:09:C0:F3:0A:88
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Certificate issuer: /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial: 01A0C47C13DC9F8F33FC5594F54C0D159531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
Manifest number: 16FB
Signing time: Mon 21 Sep 2026 15:01:00 +0000
Manifest this update: Mon 21 Sep 2026 15:01:00 +0000
Manifest next update: Tue 22 Sep 2026 15:01:00 +0000
Files and hashes: 1: E6VcUABJOgaDwD9RzJREvDXjkAM.roa (hash: qjoSCznyEiS7sQVKAn02kghNOIKy/+vPrXAKlA+IZs8=)
2: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: FDJcmIuXl3KSkBnTi/LVONr2Y3WNY8hUHCw/OTvXu+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:13:dc:9f:8f:33:fc:55:94:f5:4c:0d:15:95:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Validity
Not Before: Sep 21 15:01:00 2026 GMT
Not After : Sep 22 15:01:00 2026 GMT
Subject: CN=a7e331ebc7ba93e6ab014d3b37477f09c0f30a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:28:ba:32:e1:5a:c0:ad:f0:b1:16:d4:5d:
7b:55:69:c4:d1:16:2e:40:c9:71:fc:b3:16:bd:03:
b2:3e:48:e8:02:af:bb:54:85:00:71:21:34:cf:96:
d2:29:0d:a6:5b:48:6c:cf:64:0d:c0:68:26:cd:3e:
ad:9b:8d:89:54:21:c2:3b:c4:27:94:3f:bc:8b:1e:
b8:24:b6:87:11:63:c2:8e:37:20:67:fc:24:11:66:
0f:75:11:c0:1d:b2:53:da:fd:89:68:fb:6e:d9:97:
e0:1f:25:2c:a7:24:ee:74:b8:21:2f:5b:ac:d9:8b:
fe:e1:9c:9e:86:f7:4f:f8:85:13:fb:ee:8a:f2:1e:
92:26:50:aa:e2:ac:3c:16:ee:d6:d7:ec:dd:bf:07:
a9:2a:5a:bc:20:75:eb:77:b4:ba:c8:55:55:26:57:
6a:24:30:a7:3d:68:f0:9d:49:0a:83:d8:dd:2a:00:
e0:c0:50:5c:ba:09:ae:8f:05:2e:88:7f:2a:86:13:
a9:30:24:ae:82:a4:b2:4e:8c:de:43:f4:06:cd:0e:
4a:db:5c:69:76:d3:7d:a6:39:c0:f3:c6:01:39:ef:
c1:4e:e7:eb:b1:5f:ab:1e:93:3a:e3:97:50:4f:bb:
09:77:91:91:e6:28:51:76:97:6b:22:c3:fe:d2:3e:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E3:31:EB:C7:BA:93:E6:AB:01:4D:3B:37:47:7F:09:C0:F3:0A:88
X509v3 Authority Key Identifier:
keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:10:8f:f7:f5:7b:51:66:f4:d7:e8:c3:fa:14:19:89:07:e1:
f8:0a:ac:d3:9d:22:37:a4:8d:8d:fa:7c:31:79:d7:18:9e:ab:
3a:0f:f4:c6:a2:5e:7f:df:21:97:b5:90:a4:8c:47:07:6e:8a:
a9:6d:4c:3e:25:95:20:df:f8:51:c9:65:83:70:6b:f8:16:f0:
85:c7:80:bc:5a:8c:c6:9f:5f:71:19:f5:b0:44:c7:34:18:19:
ca:2e:44:a5:12:fc:92:c1:3b:2b:c2:2b:09:79:a0:ad:36:56:
c9:ad:f7:9a:32:fb:7d:7f:6e:32:82:9b:83:71:e5:5f:c3:84:
c2:25:cb:3f:41:4d:cc:0d:a2:cc:18:ee:e0:ae:4a:04:c6:56:
77:54:6d:d0:c2:ee:e9:98:ce:35:5b:0d:7f:8d:8e:8c:59:d8:
aa:de:88:c4:61:74:4b:74:d8:10:6c:62:ac:0b:29:59:94:ed:
4c:52:5d:8d:c3:d7:40:bf:2d:88:c0:e2:08:71:9a:8e:49:88:
72:ea:46:30:12:26:98:00:9c:0f:87:95:1e:ad:73:c6:ee:e6:
c1:a7:4c:a9:6f:e8:5b:c9:f9:05:0f:c5:2e:d7:cf:26:34:03:
bc:47:83:03:7d:b6:9b:1e:bb:80:4a:53:1d:6a:8f:6b:9c:73:
f5:1e:f1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:55:23 2026 by rpki-client