Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File: VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier: ffgoTlZZDmUC9hXlG6xkf62VDA6Vilql2wRIbdlDZZI=
Subject key identifier: 6E:4F:73:A2:0F:5E:AF:FC:BC:33:FC:F2:06:C5:A7:6B:82:F3:41:27
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 01A0CB22D60D0620861D9E92FD1420D97A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number: 1AA4
Signing time: Tue 22 Sep 2026 22:00:52 +0000
Manifest this update: Tue 22 Sep 2026 22:00:52 +0000
Manifest next update: Wed 23 Sep 2026 22:00:52 +0000
Files and hashes: 1: 7NGoj5cGztX58pAtipUcpmb4aIM.roa (hash: vlOULZs24F/kcnILYjizoe3IHDjDEgukRjmyfRx6nIw=)
2: V2ZzzbVPUiKvWiZZCU89cR5PNd0.roa (hash: A3URN1enAjnCkB6UzDkrO/J0z/XkaxyVPZWO9Xu4fHc=)
3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: prYgRWC1tQUvXmioYYonOTv3OPZ7qovJBTym88itc2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:d6:0d:06:20:86:1d:9e:92:fd:14:20:d9:7a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: Sep 22 22:00:52 2026 GMT
Not After : Sep 23 22:00:52 2026 GMT
Subject: CN=6e4f73a20f5eaffcbc33fcf206c5a76b82f34127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:f3:e5:be:ec:b8:8f:cd:37:57:a8:1c:7b:
4e:99:58:b1:8c:84:ca:09:30:65:a8:88:29:4e:50:
cd:10:2f:33:84:cc:e6:a0:96:b0:0e:52:cd:f1:da:
6b:51:64:57:dd:b1:b6:16:5f:84:a3:1c:de:53:06:
e9:3b:40:40:c0:3d:87:3c:3c:70:60:b1:ac:42:fa:
4d:c0:a2:56:a7:c0:ea:11:06:c6:24:a1:46:8d:20:
8b:42:60:bd:dd:11:9a:23:bb:08:83:d7:51:5f:47:
e1:ec:db:37:86:50:82:1c:71:c4:24:e1:1b:00:2b:
05:42:96:40:4b:ae:48:c4:4a:eb:3e:79:8b:8e:af:
64:8c:42:4a:47:99:e6:e1:93:b0:9a:89:2c:1a:9c:
ae:37:d6:4f:00:55:0e:fb:ab:da:63:a9:99:a3:62:
cc:69:ad:c5:81:39:f0:cb:fb:7e:f2:c1:7a:13:99:
06:0f:ad:00:f5:33:26:8a:4c:0f:ab:fa:7e:2b:1c:
3b:14:b4:1f:1a:cb:fa:41:55:aa:67:28:78:e0:15:
69:3f:51:f4:42:db:d6:92:66:06:32:86:37:a0:61:
05:8a:93:b5:8b:0e:0c:8f:24:ca:6a:5c:5f:16:aa:
6c:09:b8:76:5d:70:8b:67:46:29:72:3b:31:11:40:
fc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4F:73:A2:0F:5E:AF:FC:BC:33:FC:F2:06:C5:A7:6B:82:F3:41:27
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:bb:99:e7:ef:c4:b6:fe:79:d9:d6:30:10:8b:4d:85:8c:ac:
f1:fe:a7:f6:fc:69:fc:f2:f8:93:a1:07:98:cd:10:42:c0:25:
3a:d4:f9:d7:2a:cc:0d:19:c6:1d:f4:14:d1:8b:3c:dd:b6:66:
25:4e:8c:4e:a2:a8:4f:a6:17:e6:10:2c:25:8b:5e:c2:6b:d1:
59:9c:55:fb:ef:21:8e:33:68:11:8b:05:96:a5:31:01:e0:20:
ec:dc:c0:d7:80:0d:0f:b3:aa:bb:68:45:ab:8a:b3:ff:6a:5e:
12:c7:96:bc:9f:6f:42:00:09:d5:ed:a5:20:a5:e0:29:d0:d1:
34:25:cd:e7:9b:7f:02:40:8d:b8:58:66:b5:39:83:44:b4:72:
a1:ba:06:5a:77:7f:b0:3d:5c:66:1a:f4:63:f4:f0:7f:89:0e:
c3:0a:04:d3:d3:45:2a:d5:93:1c:70:a7:35:92:88:40:97:d6:
dd:17:d4:50:e5:45:0a:74:bf:3c:cf:d0:20:d0:0f:37:ae:5c:
36:e9:df:88:98:10:0f:a5:28:90:ed:71:29:43:c0:20:f0:ed:
e8:12:9f:44:3c:3f:3d:c6:4e:f2:17:d9:93:1e:e4:f6:a4:18:
86:26:3f:b3:05:8d:d3:7f:e5:e9:fb:a9:05:d3:f8:a4:6e:7c:
5b:b6:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:59:05 2026 by rpki-client