Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File: VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier: tPZtgYkPGdytD8a7fdTdSkArBKNhgwBO0DrsYO6QAKA=
Subject key identifier: 0B:F3:7D:DC:26:A0:8C:05:C4:A8:C9:2B:AB:38:EA:33:57:1C:6B:90
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 019CAAC61729895CBD8F633ECDA9FB5F47C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number: 1881
Signing time: Sun 01 Mar 2026 19:00:34 +0000
Manifest this update: Sun 01 Mar 2026 19:00:34 +0000
Manifest next update: Mon 02 Mar 2026 19:00:34 +0000
Files and hashes: 1: 7NGoj5cGztX58pAtipUcpmb4aIM.roa (hash: vlOULZs24F/kcnILYjizoe3IHDjDEgukRjmyfRx6nIw=)
2: V2ZzzbVPUiKvWiZZCU89cR5PNd0.roa (hash: A3URN1enAjnCkB6UzDkrO/J0z/XkaxyVPZWO9Xu4fHc=)
3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: j5hhxj1uU8pvpn4f4irPOmylF1c8jGuvYa1fkbHxokY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:17:29:89:5c:bd:8f:63:3e:cd:a9:fb:5f:47:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: Mar 1 19:00:34 2026 GMT
Not After : Mar 2 19:00:34 2026 GMT
Subject: CN=0bf37ddc26a08c05c4a8c92bab38ea33571c6b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:31:8f:a5:0d:42:ae:97:96:60:52:20:cb:
e1:bf:99:fd:2e:21:eb:ae:29:5b:3f:15:37:56:70:
ea:ed:9c:3a:4c:1c:0c:6d:4c:7e:f1:14:a9:97:b1:
15:22:6a:b5:91:08:2d:4f:5b:21:49:e4:14:c3:0c:
a2:e9:31:1c:02:43:61:91:66:41:7a:5c:06:63:ce:
25:af:8a:b0:cd:20:96:86:31:c9:00:4f:e3:6e:21:
f4:00:92:b9:0f:37:90:f9:fd:70:ee:55:95:d8:70:
04:3e:90:43:52:00:13:87:51:23:f3:98:1b:04:21:
9d:cf:94:ae:a7:40:ff:65:ff:17:2c:0c:ff:0c:4a:
42:ef:31:88:cd:bf:5d:09:87:11:ed:7a:44:a5:91:
ea:73:1d:7f:42:55:17:2f:de:13:4f:99:4e:64:3b:
19:8a:0c:cf:36:2b:c2:39:b0:af:fa:a5:2c:89:47:
21:0a:54:2e:f9:bf:ef:6a:56:19:0f:c6:f5:71:92:
f2:c6:5f:ba:94:5d:d8:bf:b3:72:b5:de:50:e5:4a:
00:f7:2a:13:b2:9d:e9:3e:21:8d:29:b2:8a:b4:f8:
f9:33:af:65:8c:00:23:55:ca:77:ad:a2:3f:e9:ed:
79:fb:3f:6f:db:6f:5a:ad:d2:60:1e:5d:aa:c2:16:
7e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F3:7D:DC:26:A0:8C:05:C4:A8:C9:2B:AB:38:EA:33:57:1C:6B:90
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e3:5c:8e:78:7f:92:b1:66:f8:d8:33:4b:fb:59:9c:75:4e:
f5:99:48:5e:de:f1:7a:e3:47:7c:f5:47:4c:02:89:38:02:7b:
a9:98:7a:b2:5b:03:84:d9:2f:18:20:03:50:44:7b:fc:77:37:
4b:37:e8:20:32:df:78:72:04:29:5f:8c:bf:f0:1a:43:41:23:
d9:97:cb:6a:0a:89:6b:70:53:35:d0:b8:47:af:d9:16:d0:3d:
f3:1b:9c:01:ec:6f:e5:e2:9c:53:e1:a8:b7:86:df:85:7e:59:
79:cb:2e:82:d3:1d:4e:f0:b2:c2:80:e8:30:4d:3f:b9:4f:5b:
48:f7:86:9c:5d:86:bc:c9:8c:2f:8b:82:04:fc:f1:97:84:7b:
bc:d3:92:88:cd:05:75:90:59:d3:2f:87:65:30:e9:b4:10:c2:
70:78:c9:10:38:79:32:d9:52:08:f3:78:13:e5:05:4d:63:67:
fc:bd:41:cf:63:92:09:1f:c3:a3:e7:09:0c:cf:94:ae:08:bc:
5e:34:29:18:bc:36:a3:96:d5:53:2f:21:e6:4a:7f:6e:fd:b3:
04:78:60:74:26:77:fb:bc:46:53:db:e8:65:6a:a9:37:75:c3:
0c:50:20:48:a4:82:82:30:29:6e:21:77:50:cf:01:8f:95:af:
7c:d1:32:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:02 2026 by rpki-client