Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
File: VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json)
Hash identifier: ln9SdMgGEQ6/UYayn3lNcEi2Ku1GVUP4Dmw+iAMC5ds=
Subject key identifier: 75:0B:BA:7C:43:61:CF:B4:C5:51:6D:B9:09:E9:CB:52:3A:DA:FA:3C
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 019F8FB5818128120B8862A8669A2393D0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
Manifest number: 1499
Signing time: Thu 23 Jul 2026 16:01:04 +0000
Manifest this update: Thu 23 Jul 2026 16:01:04 +0000
Manifest next update: Fri 24 Jul 2026 16:01:04 +0000
Files and hashes: 1: 4-WbBaq98Oq9Hev6MWdBUYGPmH0.roa (hash: GNmnhi1gsX6X4qEuEkfyWsKzBAsClKRsbDlEB+HLZ4o=)
2: CjhmCMWptrEEhGP0rWZ3aS_GZCQ.roa (hash: xRBb5qX8Yz/3LKM505uXNjs7V3IJIMZmvB9mN9XYUV0=)
3: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: iBOzfZry7jSu8ukLfpL8pQrPK9ut7ptNBWgwgd2Bwso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:81:81:28:12:0b:88:62:a8:66:9a:23:93:d0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Jul 23 16:01:04 2026 GMT
Not After : Jul 24 16:01:04 2026 GMT
Subject: CN=750bba7c4361cfb4c5516db909e9cb523adafa3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:51:f0:9d:1f:b0:49:84:63:55:3f:ea:e0:
76:e0:82:ca:c5:2d:79:0d:f9:51:b2:b6:45:8e:33:
50:1f:b9:62:a1:61:74:3d:ff:09:b6:80:77:65:bd:
eb:3f:ed:54:8f:0d:e6:e7:d2:c1:68:af:f4:f6:ce:
93:92:33:79:4d:60:bd:03:61:a4:b6:a2:85:71:9e:
ec:90:da:35:e3:a8:48:4d:a7:d6:07:d0:60:29:66:
4a:24:ff:42:90:99:db:4f:ee:8b:ba:97:8d:12:e7:
4c:18:34:97:61:9d:df:8f:ef:99:8f:af:b1:f2:53:
6b:64:db:96:3d:74:93:72:67:01:ad:4a:ba:f4:93:
69:85:e0:9e:47:18:1f:f4:fc:37:80:a0:14:87:48:
31:bc:51:16:a2:c5:39:a0:10:d1:27:b0:9b:10:0e:
92:91:26:0c:ed:83:de:98:21:6a:ab:3f:7e:dd:75:
96:0b:87:95:2e:ca:b8:0d:6a:ac:22:fe:5e:e4:4a:
f0:0f:76:21:9f:82:f0:d9:27:3d:76:fb:e0:ff:4a:
48:99:da:d7:40:06:7a:2f:24:2d:f5:39:e6:31:9c:
bc:6e:d1:1e:41:ec:92:e7:63:f1:5b:e9:07:51:cc:
d5:72:4b:8b:af:00:79:b0:e8:59:71:c8:4b:71:ff:
d0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0B:BA:7C:43:61:CF:B4:C5:51:6D:B9:09:E9:CB:52:3A:DA:FA:3C
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b1:d5:b0:8a:76:5e:15:f9:8b:8a:83:ed:e2:10:03:1b:a6:
c9:b5:47:b1:20:0f:94:eb:20:a8:37:18:5c:5c:75:66:de:66:
4b:7a:e3:16:78:e0:93:80:8e:a7:6c:b9:dc:40:85:aa:47:f4:
e9:eb:36:4c:50:73:5c:98:a5:1f:42:a8:15:40:a5:11:96:fe:
4a:b8:3a:37:c8:56:e8:04:96:20:c3:31:81:61:4b:a1:a9:c5:
1d:df:41:64:b7:72:38:dd:cf:7f:11:68:86:c1:b9:ea:9c:3c:
08:b0:5e:2c:4e:6b:1b:28:91:04:d5:a4:9d:52:6e:d1:81:a3:
06:03:d5:6e:4d:78:5a:57:20:02:ef:b6:fc:1e:e2:18:68:91:
b5:cb:d6:b3:5e:99:9e:45:8c:fe:d3:c1:1d:f2:43:c3:a9:53:
32:f9:8a:3b:02:af:f2:0f:cc:de:ca:ef:1d:fd:30:43:40:8c:
de:0e:30:bc:68:00:c1:9c:8d:fc:a9:8d:31:bd:13:74:a6:4f:
7d:10:b8:07:a8:1e:95:0b:68:86:13:79:29:f4:04:4e:ea:b7:
79:c4:97:4f:7d:f9:5c:d5:8a:c2:0e:f2:94:3c:2d:20:e1:a7:
26:43:68:96:1c:fa:d8:39:58:0e:21:f3:81:74:10:21:dc:60:
cf:ec:4e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:04 2026 by rpki-client