Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
File: VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json)
Hash identifier: UoGUlBTqEHR5kcCk8eeEut0HH/tLaxk6WqkGg2MC30g=
Subject key identifier: 42:F3:77:57:9E:93:23:90:D4:24:65:7D:DE:49:B2:66:A4:54:42:AC
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 01A0CEF04F8D649BFDCF2800D77D7CD674F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
Manifest number: 1540
Signing time: Wed 23 Sep 2026 15:44:10 +0000
Manifest this update: Wed 23 Sep 2026 15:44:10 +0000
Manifest next update: Thu 24 Sep 2026 15:44:10 +0000
Files and hashes: 1: CjhmCMWptrEEhGP0rWZ3aS_GZCQ.roa (hash: xRBb5qX8Yz/3LKM505uXNjs7V3IJIMZmvB9mN9XYUV0=)
2: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: Q1VMv/QIugkdb0dMUYBYIUJ0547//B95pYUNl795lVg=)
3: WzQwsjeNlKGeNiyLIj7G2-n0QjU.roa (hash: 98+A38a7VoBJstFyrt0O4RAHxmYS2icXfskW9cGDfKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:f0:4f:8d:64:9b:fd:cf:28:00:d7:7d:7c:d6:74:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Sep 23 15:44:10 2026 GMT
Not After : Sep 24 15:44:10 2026 GMT
Subject: CN=42f377579e932390d424657dde49b266a45442ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0b:51:7d:35:bf:87:1d:c8:45:de:85:85:32:
6c:35:ad:12:08:14:6f:8a:c5:5b:44:0a:f4:a7:4e:
5d:24:58:56:a4:db:f8:24:94:ed:f1:d1:6c:f4:93:
ba:d8:a8:6f:0d:3d:65:b8:6c:61:28:f3:28:9e:54:
ee:de:3e:55:2b:dd:1a:6e:ce:f7:f4:d9:20:a2:40:
83:65:5b:45:76:07:32:cf:96:d3:35:1e:9a:70:89:
ff:5b:2c:92:37:8d:f0:de:18:71:12:11:2d:07:e6:
bb:d2:0c:a1:d8:65:f0:c9:56:9a:83:8d:94:8f:dc:
b5:be:80:f8:c4:2d:26:3a:5b:59:42:0a:b2:14:1c:
93:fd:c3:5d:3d:f2:ab:2e:8b:cc:56:46:d1:b6:c4:
2c:6b:ab:88:13:90:e8:6d:c2:d2:b5:48:67:47:97:
6b:ba:9d:d3:37:41:31:24:1b:d3:25:96:5d:ef:7a:
88:13:35:de:41:f3:64:66:d6:1e:6c:0f:dd:81:19:
05:cf:0d:93:e6:26:b3:92:dc:91:56:e2:99:a0:19:
83:38:ea:01:ba:e9:a1:4c:56:aa:f2:25:83:bc:d6:
61:12:52:b7:14:9b:69:b8:ba:d5:32:32:32:40:1c:
62:30:46:ec:07:83:bb:52:53:33:f5:5a:db:1c:cf:
8c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F3:77:57:9E:93:23:90:D4:24:65:7D:DE:49:B2:66:A4:54:42:AC
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:21:71:70:e9:0d:54:33:dd:26:b8:c0:4b:e3:e3:ad:a0:a6:
63:a2:18:af:65:45:3e:a1:90:c9:f2:4b:24:2e:e8:c6:d1:f3:
1b:32:d9:e8:81:3a:52:22:80:39:23:dd:b9:e9:ce:bd:91:e1:
2b:87:50:31:e6:bd:95:d5:56:1c:41:85:1f:66:7e:3e:d3:3a:
9b:c5:ef:96:77:43:9d:63:14:51:e9:84:a4:8d:92:a8:4e:52:
bd:79:70:b1:18:e6:38:ac:62:e6:74:d1:e4:68:db:14:0e:be:
84:49:f3:60:28:c3:ae:39:1d:7c:03:5a:67:0c:31:0d:16:29:
58:78:86:f7:32:84:0f:b4:74:02:7f:da:75:c4:64:fd:f6:c7:
07:d2:3c:5b:0e:ed:7e:bc:11:72:53:3d:7a:2e:83:7b:d8:73:
e3:bf:21:3d:96:1f:8d:23:cb:ca:1f:9f:e4:9a:5e:2f:2e:80:
23:c9:5a:37:da:a5:24:f8:ce:01:6a:47:57:cf:72:62:cd:7b:
34:c9:44:f0:a6:24:63:d4:18:a5:97:e8:f7:4b:62:99:65:5d:
46:b8:d1:b1:c2:ee:56:a3:fe:c7:42:26:76:ae:c5:25:c5:3b:
69:38:6d:a2:0d:68:d5:42:5d:39:26:64:9b:05:af:ef:9a:00:
32:8d:14:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:11:15 2026 by rpki-client