Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier: e9xXb7KcPctdh228Hj51Pg/nov7orZhXixzq6zxVRwA=
Subject key identifier: EC:96:80:C8:CE:CA:C2:2E:93:F8:89:C1:9E:CD:00:B8:E3:1F:C6:11
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 01A0E3D092004F80F5FDB0E8D6AB8B7AC482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number: 1748
Signing time: Sun 27 Sep 2026 17:01:31 +0000
Manifest this update: Sun 27 Sep 2026 17:01:31 +0000
Manifest next update: Mon 28 Sep 2026 17:01:31 +0000
Files and hashes: 1: PD1WySNjlq_IY2uBIMnATsjVoRM.roa (hash: SZgZePDON35ElVyphahHJc8sNER6FBgFl6oM5awboYo=)
2: k8w0NUXD9JayBBvKF9ncDALdg78.roa (hash: lUbCLxx0DXi3nyWOu3iruTVHC0Q/jhFLMzT5toYmB6I=)
3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: xxPq2PqcIFsVfR6OnD1p0BUHs2584Y/yZ9fl+c0eIdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:92:00:4f:80:f5:fd:b0:e8:d6:ab:8b:7a:c4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: Sep 27 17:01:31 2026 GMT
Not After : Sep 28 17:01:31 2026 GMT
Subject: CN=ec9680c8cecac22e93f889c19ecd00b8e31fc611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:7d:3a:58:36:6a:f0:c5:0a:69:5d:72:78:
b7:f2:b0:dc:00:e5:65:78:f0:ca:17:b4:8b:d1:b6:
a6:da:7d:05:2b:ee:24:ea:ee:b0:0b:6c:53:1f:9f:
1b:4c:1e:6e:b6:f1:7a:15:7f:8d:9a:cd:db:87:3d:
16:58:87:81:be:c6:e7:d1:5c:c4:76:66:0a:9b:e5:
9f:31:8d:a9:58:14:99:ca:e3:bb:0b:26:d0:a0:54:
8b:4f:34:e4:7d:5a:d3:42:66:3c:24:32:e6:ed:48:
84:76:51:08:d5:b7:81:ad:83:55:82:3a:f6:d7:fd:
24:21:7a:d4:20:05:c4:8d:e6:a6:5c:8a:f9:35:9a:
be:c9:51:89:76:af:c9:ae:93:f6:6d:dc:f9:bf:39:
f0:76:90:a8:47:4f:a0:a0:07:01:b1:47:9a:b4:ff:
30:69:4e:b4:1e:fd:a4:63:18:4d:1c:f7:cc:af:a9:
10:85:bb:d9:35:2d:ae:17:ea:bb:d9:e2:e1:49:97:
96:b0:1f:ec:ef:0d:08:75:44:5c:6e:52:ec:fe:3e:
09:f7:ad:87:cd:a5:8f:09:6c:89:c1:d6:44:92:b8:
e0:ec:9d:06:91:2e:78:c5:7f:07:ec:0d:aa:65:0c:
9d:77:b3:29:e5:3b:0a:71:b3:5a:2f:e5:41:6b:22:
60:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:96:80:C8:CE:CA:C2:2E:93:F8:89:C1:9E:CD:00:B8:E3:1F:C6:11
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:69:50:43:a5:29:6d:7a:71:0a:87:de:aa:a2:10:08:50:66:
df:b4:d9:e5:83:7c:b8:38:00:20:5f:3b:dd:f5:ba:17:08:6f:
d1:00:48:5e:d2:7f:e0:54:3d:8a:e5:42:a4:a5:73:58:45:ef:
ce:4b:61:0f:1c:85:30:1a:56:79:00:43:32:69:d6:43:a2:76:
75:9c:6e:86:9a:e9:95:92:88:9a:b1:18:35:be:90:e0:d2:2b:
31:0a:98:b6:2d:30:4b:70:28:27:ab:3b:d8:ee:1a:64:6c:56:
21:d6:b7:09:7c:c4:0b:36:19:c3:28:b4:9b:3b:dd:71:f9:6e:
25:25:55:11:59:c9:3d:e9:b9:a4:66:5e:c1:29:5a:ad:86:6c:
dc:1f:9f:c3:6e:d0:05:c1:3a:ab:c8:56:89:b6:1c:39:71:56:
7f:1c:5e:4b:d9:4e:cd:60:96:37:79:3f:3e:7c:62:9d:59:a3:
3f:39:01:6a:5e:3f:af:83:6a:86:0e:21:f4:af:8f:83:c8:a3:
a4:da:15:59:84:9f:51:e2:bb:ac:f6:f2:2d:5a:17:c6:c1:ac:
fc:73:25:52:64:f1:04:2f:4d:f9:02:f3:80:ac:50:33:06:06:
c0:3d:66:fd:5f:9d:d9:ef:b8:77:3e:11:1e:f7:5e:a7:38:54:
20:bd:20:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:12:21 2026 by rpki-client