Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
File: VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json)
Hash identifier: CUVnZ2nkT/nxhBiPHuBEewV8EhfqdDzqsmgRh+gyxNI=
Subject key identifier: 1C:90:C1:09:75:12:78:4F:A9:9B:70:45:F2:B7:41:8E:B3:26:15:2B
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Certificate issuer: /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial: 019F94365EE9FCDC907DC73FCDB4F212DC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 13:00:18 +0000
Manifest this update: Fri 24 Jul 2026 13:00:18 +0000
Manifest next update: Sat 25 Jul 2026 13:00:18 +0000
Files and hashes: 1: 6X4Jk6qo75EQY5AqZ7LyaMmPOj4.roa (hash: mTjThBJAOSa8qyri48cjOYYkA9lZErxqgqTP6n0jrYU=)
2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: HObtX3Nbc1KKCjv15LR6OhJDRbI0Wk2Z0Jmj/e7rD2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:5e:e9:fc:dc:90:7d:c7:3f:cd:b4:f2:12:dc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Validity
Not Before: Jul 24 13:00:18 2026 GMT
Not After : Jul 25 13:00:18 2026 GMT
Subject: CN=1c90c1097512784fa99b7045f2b7418eb326152b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:84:ad:c2:12:67:8b:cc:34:a6:46:5c:4a:
41:99:3d:ed:8f:a9:bd:7d:64:3c:d6:74:ec:35:a7:
a2:7f:95:63:c4:d1:ea:2a:f7:aa:70:63:a2:37:23:
fd:1f:2f:e8:96:0b:53:4d:61:10:d5:cb:12:28:cb:
5f:d3:b0:4e:3e:79:c0:4c:03:05:2c:9e:19:0c:bc:
42:70:77:22:6c:92:c9:45:9b:87:6b:df:39:3a:ec:
38:bd:fd:25:d5:2b:ae:c4:c4:3b:1a:ba:7c:95:2e:
bb:78:14:0a:61:df:63:2d:5d:20:c1:4c:38:43:e3:
4b:ef:03:c7:33:23:99:03:3d:02:df:ca:05:05:7f:
16:27:6b:4e:6e:ab:20:da:49:84:d3:17:72:95:43:
bc:99:2a:6f:8e:77:58:4e:f5:cc:5c:cc:aa:80:c4:
7f:3d:e4:17:de:7e:60:2f:5d:bd:f2:ac:be:7b:dd:
a8:e5:e6:eb:26:97:06:df:4d:a8:b9:6c:3b:99:a0:
f8:be:4b:da:6a:25:39:ca:b6:a9:fa:1d:df:c3:43:
e9:ac:e6:f3:07:1a:c3:a3:c3:1a:d9:6f:db:8e:5c:
e4:79:d8:29:ba:c1:b4:a1:d2:9a:68:3f:63:2d:71:
75:5c:1d:d6:34:7e:eb:3f:a7:28:3b:4e:27:bc:8f:
17:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:90:C1:09:75:12:78:4F:A9:9B:70:45:F2:B7:41:8E:B3:26:15:2B
X509v3 Authority Key Identifier:
keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ad:9f:fd:d8:3b:57:3b:f1:a6:87:75:0c:e3:52:d7:7d:b7:
e7:4f:f3:2d:5b:8f:8d:6a:96:bb:4f:86:ce:7c:b8:9f:42:29:
c2:13:8b:16:2d:4b:69:72:b6:dc:21:44:69:41:ac:5e:b6:11:
86:64:f5:bf:80:f7:be:a7:14:e9:72:11:ed:5c:04:88:81:2e:
52:7a:8f:fe:0e:93:41:77:c8:5c:19:90:22:94:8b:d1:5b:e5:
a2:9a:4b:22:a5:4f:74:39:40:0b:88:35:f4:46:fc:0e:eb:1d:
3c:70:22:40:6b:39:7d:db:6d:fe:25:32:a4:2f:0a:34:51:7a:
d4:ef:27:e0:ce:c6:47:79:0a:ed:c9:69:91:ff:93:79:36:6d:
03:5d:e5:7e:66:34:1f:bc:7a:d0:e5:11:d7:fd:68:82:b0:1b:
8b:a3:4b:54:95:7d:a8:22:f6:e8:7e:0d:7b:b1:42:7f:a9:13:
57:d2:77:d8:be:b6:15:72:e3:87:fc:01:08:12:ea:e0:33:82:
25:e0:b6:f1:e3:9c:da:17:a3:c6:d9:d0:a3:73:d5:f4:49:f4:
97:e1:42:0c:fe:e7:ef:4d:ff:2e:fd:e0:d5:33:d5:e2:51:0d:
09:91:cb:3a:c6:a0:fc:66:dc:08:54:3a:36:0b:ae:93:32:5b:
c7:01:3f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:41 2026 by rpki-client