Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File: VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier: gizUi9ujvS7U+Vn2PLCJIHk21l05XgkybwLUWKpeu7s=
Subject key identifier: D3:2F:DE:C7:E6:DB:CD:80:3E:81:6F:5C:96:84:2A:6C:F4:CF:FA:1A
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 019FAD515DF405D3304B3C71830AF732C8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number: 1A10
Signing time: Wed 29 Jul 2026 10:00:18 +0000
Manifest this update: Wed 29 Jul 2026 10:00:18 +0000
Manifest next update: Thu 30 Jul 2026 10:00:18 +0000
Files and hashes: 1: 7NGoj5cGztX58pAtipUcpmb4aIM.roa (hash: vlOULZs24F/kcnILYjizoe3IHDjDEgukRjmyfRx6nIw=)
2: V2ZzzbVPUiKvWiZZCU89cR5PNd0.roa (hash: A3URN1enAjnCkB6UzDkrO/J0z/XkaxyVPZWO9Xu4fHc=)
3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: ScgCjSXJpltNn2cfSwTBFMfD0++NvVr27MipatS7qYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:5d:f4:05:d3:30:4b:3c:71:83:0a:f7:32:c8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: Jul 29 10:00:18 2026 GMT
Not After : Jul 30 10:00:18 2026 GMT
Subject: CN=d32fdec7e6dbcd803e816f5c96842a6cf4cffa1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:1a:2d:5b:f7:fc:f8:43:49:5a:70:73:73:
20:a8:96:8f:20:0d:d5:7b:71:d3:8e:5f:59:c6:38:
b5:65:ac:e5:b5:e0:50:7a:7e:a4:4f:c9:cf:d3:4d:
d5:95:36:e3:58:9b:95:af:e8:b4:f6:90:22:73:70:
4a:7f:80:c5:79:17:ab:c9:d8:3f:6f:0e:6a:e7:f0:
2d:45:bb:9f:91:7b:6c:4f:53:ba:a6:4e:ed:8b:d3:
47:22:87:74:96:f4:ef:a6:95:14:bd:60:22:84:d1:
e0:ba:22:ee:9e:3d:95:c4:c9:6b:29:a7:09:a6:cf:
00:bd:c9:63:19:da:6c:b1:cc:43:fc:ba:db:ff:d5:
7d:39:48:4c:15:4b:42:1a:4e:15:98:84:95:86:f4:
b8:e5:90:ae:39:6e:c4:47:22:ad:c8:fd:6a:8d:aa:
eb:d5:f5:d1:b7:32:34:37:47:af:ce:18:2e:42:32:
86:c8:c6:bf:e2:af:72:47:ba:c4:bb:f7:13:9f:83:
a0:99:f6:ef:ae:4a:cc:b8:ac:eb:cc:a3:10:11:cb:
d3:44:22:34:04:7f:a8:9d:09:b7:ca:ea:42:6e:f6:
e8:7c:83:5d:c2:ae:b1:27:5c:57:8c:f6:c0:b4:7f:
4b:a3:ec:9d:a4:bb:6b:32:1c:e1:60:10:c9:a8:53:
df:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2F:DE:C7:E6:DB:CD:80:3E:81:6F:5C:96:84:2A:6C:F4:CF:FA:1A
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f9:41:c5:5c:56:ea:53:ab:1f:92:c2:04:ac:62:bb:d8:71:
f2:98:2e:0a:ed:e1:af:b5:4d:04:88:31:0d:cb:76:d9:2b:18:
53:2a:8b:d4:75:2e:40:60:fb:b5:a7:b0:cb:75:7e:9b:94:50:
6a:2e:fc:3b:bc:89:6d:e6:0c:4c:67:9e:4d:5e:4d:95:46:a1:
84:78:79:59:ea:e2:89:8a:7c:70:d1:8a:e1:57:6d:8e:a1:06:
92:36:3f:07:89:9f:96:66:72:d9:b7:03:ac:61:6c:fe:3e:52:
b0:6c:d9:40:99:a6:09:59:c5:30:c2:b0:2c:e4:65:c1:b7:ed:
6a:6f:fd:50:d9:3a:bd:57:d6:00:36:36:f4:40:b1:35:50:a5:
4f:53:55:03:ff:9a:d6:49:be:c8:98:d8:26:7a:43:75:10:e2:
62:da:05:82:97:e9:bf:c7:e5:90:4c:1e:49:15:e5:25:78:0d:
72:6e:14:f4:cb:c3:0e:8b:70:af:32:b4:9f:23:38:4d:fc:8f:
df:c7:e5:6b:67:87:e0:16:b3:02:fd:6f:ec:2a:4b:d4:50:3f:
a8:75:d9:0b:22:89:7d:57:41:44:c0:5e:e5:63:d1:25:be:b7:
8f:9d:08:5b:7c:fa:d2:67:7a:c2:96:41:4e:9b:e2:0d:c7:36:
a2:71:b4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:21:52 2026 by rpki-client