Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier: t/g5LhiB0qqOqPyqYlxrjMR+xpUxyq3LpaVA63vi1Ic=
Subject key identifier: 7F:25:A3:F8:45:A2:28:35:8F:D2:30:2E:76:86:64:88:6D:50:F2:52
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 019D27DF65DDFAEE18D60585F586AD02F308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number: 1559
Signing time: Thu 26 Mar 2026 02:00:45 +0000
Manifest this update: Thu 26 Mar 2026 02:00:45 +0000
Manifest next update: Fri 27 Mar 2026 02:00:45 +0000
Files and hashes: 1: PD1WySNjlq_IY2uBIMnATsjVoRM.roa (hash: SZgZePDON35ElVyphahHJc8sNER6FBgFl6oM5awboYo=)
2: k8w0NUXD9JayBBvKF9ncDALdg78.roa (hash: lUbCLxx0DXi3nyWOu3iruTVHC0Q/jhFLMzT5toYmB6I=)
3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: eiI6fvkGQ57Svia16Ps2UYalVKD+qtNZcCZbTMtc1Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:65:dd:fa:ee:18:d6:05:85:f5:86:ad:02:f3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: Mar 26 02:00:45 2026 GMT
Not After : Mar 27 02:00:45 2026 GMT
Subject: CN=7f25a3f845a228358fd2302e768664886d50f252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:2a:1e:86:aa:c8:ed:e0:c9:01:4f:c7:ac:
9e:c6:52:23:c8:9c:4c:bf:c7:5f:a6:79:69:19:8d:
53:bd:c7:75:e8:1c:fb:a0:46:45:48:f4:a4:57:5d:
56:2d:7a:40:89:9b:5b:61:e7:ec:1b:fc:a1:53:64:
d9:08:cb:67:df:4b:71:aa:4a:0c:d8:8d:a6:3a:01:
31:4b:4a:92:6d:30:5f:f5:10:90:40:d8:8e:dc:13:
2b:e9:ee:a5:e3:3c:bb:3c:0b:4d:55:5a:1a:d8:b3:
13:c3:06:0e:7d:1d:e4:f4:42:ba:47:8f:05:21:fb:
16:ec:36:22:e7:50:ec:69:40:ee:e9:68:4b:7a:d3:
16:31:29:ba:cf:9e:7c:89:57:fb:93:4d:92:f7:d1:
ee:b2:15:ae:48:43:30:1f:fe:45:76:34:9c:7d:3a:
4c:df:4e:58:d0:a8:e3:75:fd:ec:96:0e:64:75:ba:
15:90:cf:6e:a1:28:65:50:42:9d:d9:ef:cd:26:60:
fd:61:f8:2f:31:29:81:c6:c1:6c:dd:df:98:45:64:
af:3e:7b:30:e4:84:f1:f3:e1:5a:85:86:b9:80:cc:
cd:7e:70:ac:26:e2:a4:dc:0d:b6:a8:28:ea:df:71:
71:b7:1f:09:a5:ec:d0:60:bb:82:56:02:e1:8c:8a:
c7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:25:A3:F8:45:A2:28:35:8F:D2:30:2E:76:86:64:88:6D:50:F2:52
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2a:30:23:03:38:45:df:51:79:cb:99:af:7f:c4:8c:ac:f9:
cb:60:da:bd:93:da:61:25:37:ae:a1:9f:69:4a:e4:37:43:e1:
2f:1c:54:cd:5d:f3:a9:f0:46:f8:59:43:b4:0c:2f:a7:6a:99:
a6:d9:fb:64:4f:8a:54:4d:bf:28:8d:d1:56:f8:e2:e6:be:96:
8e:f1:5b:11:39:95:5e:ea:ce:53:19:76:18:42:85:74:37:24:
df:ee:af:18:86:a8:3c:f6:f5:83:af:91:bb:2c:52:b1:1d:f8:
fa:e5:ba:70:7f:0b:57:31:eb:d0:4b:67:2c:33:10:33:2b:cd:
02:9f:d3:4b:ee:b0:ec:28:7d:04:34:61:43:93:bd:98:c6:c9:
b1:0b:7f:86:e3:1a:21:62:86:32:dc:1b:06:20:3b:a6:f7:f7:
8c:bf:e3:f5:02:94:30:0e:a8:f1:54:30:64:bf:db:6a:b2:8f:
89:09:a3:a3:33:69:3a:04:9f:7c:a4:19:47:47:41:ee:90:7f:
8c:e7:9e:65:18:a8:e1:6b:e8:46:29:1c:0c:03:ca:7c:d1:1c:
31:a3:0f:f7:88:f7:d7:5f:04:0d:dc:29:b7:87:c1:7d:b4:97:
cb:c4:0d:58:49:c0:63:c2:36:3f:cc:d4:fb:d5:cb:65:1a:cb:
ac:da:3a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:37:13 2026 by rpki-client