Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
File: VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json)
Hash identifier: u3QQcxuZnt82WYQxzKgmKQAkkXAjcGjem2tXjbWLmmE=
Subject key identifier: 87:36:24:69:C1:73:C4:15:4C:82:56:70:71:3D:1D:95:A1:15:EC:FD
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 019D27A905BBFB4427F03BC72E6278C1E948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
Manifest number: 135A
Signing time: Thu 26 Mar 2026 01:01:21 +0000
Manifest this update: Thu 26 Mar 2026 01:01:21 +0000
Manifest next update: Fri 27 Mar 2026 01:01:21 +0000
Files and hashes: 1: 4-WbBaq98Oq9Hev6MWdBUYGPmH0.roa (hash: GNmnhi1gsX6X4qEuEkfyWsKzBAsClKRsbDlEB+HLZ4o=)
2: CjhmCMWptrEEhGP0rWZ3aS_GZCQ.roa (hash: xRBb5qX8Yz/3LKM505uXNjs7V3IJIMZmvB9mN9XYUV0=)
3: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: U5/V2NqkdGa60K3nb1DN5Tr5o/Wh3p1X/dw0579Le6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:05:bb:fb:44:27:f0:3b:c7:2e:62:78:c1:e9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Mar 26 01:01:21 2026 GMT
Not After : Mar 27 01:01:21 2026 GMT
Subject: CN=87362469c173c4154c825670713d1d95a115ecfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:c0:eb:62:e6:58:0d:18:58:4e:2e:62:c2:
c4:10:5a:2a:2b:f2:26:82:77:22:6e:01:0c:9f:75:
fb:be:19:27:91:8b:3e:82:49:35:24:cc:75:eb:60:
ab:fe:d2:6c:53:da:7a:9f:97:0c:ee:6c:3a:86:40:
b2:28:52:f8:05:73:70:25:d7:c5:4b:98:bd:cf:d9:
bf:ed:ea:0f:2c:19:a4:09:cd:e2:98:83:f2:19:1c:
1f:37:e5:e8:6a:b3:c4:5d:0b:4d:b2:5f:3b:dc:46:
98:7d:39:86:bf:c9:2e:01:c6:5e:1b:24:13:79:d2:
1a:8b:02:30:5e:d8:a8:a3:b1:03:34:3e:77:4e:99:
4a:a0:64:46:04:2f:72:99:bb:77:98:14:1d:3f:b1:
9e:e8:f2:36:1a:0c:ea:dc:80:9a:bd:07:15:2a:35:
f7:f3:ec:2f:33:7d:fe:f5:41:7b:a7:15:0b:1f:71:
89:44:ea:92:99:90:f7:da:4e:7f:5c:45:78:3d:9a:
06:8b:38:3e:a6:47:01:89:69:02:64:c5:d7:b7:86:
f8:53:0c:89:11:25:5c:47:c5:f4:64:d3:36:6d:96:
54:20:ca:a3:74:18:60:21:d8:ca:93:64:f7:37:e6:
41:d6:f6:c8:e4:36:49:f2:09:f6:57:26:23:51:86:
b5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:36:24:69:C1:73:C4:15:4C:82:56:70:71:3D:1D:95:A1:15:EC:FD
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:01:0e:18:09:70:e5:0d:31:f4:8e:a8:c8:02:c1:70:08:f7:
de:12:cf:ff:6f:73:05:4d:b7:dc:e7:8f:24:4d:19:ae:a8:8b:
4d:9a:86:75:0e:fe:b3:b7:43:df:78:01:bf:61:53:f0:90:f7:
d3:5f:e9:27:a4:0f:b8:ce:05:a9:c6:92:1f:4b:48:88:65:49:
36:c0:8f:64:24:17:1c:bd:1c:e5:45:40:50:e9:8f:ef:b5:15:
86:35:fc:9e:4e:9e:dc:d6:dd:a5:20:38:e4:d1:f7:36:1e:b6:
af:70:1d:41:6f:08:14:0f:87:85:8d:80:b5:b3:23:26:92:af:
29:1d:2b:9c:d3:33:35:20:d3:07:ca:e3:f2:dc:6d:f0:f9:c3:
7c:ec:bc:fe:d2:1f:22:a6:3f:cc:fc:b8:09:74:15:7f:6c:64:
36:7a:2f:9b:0b:86:ea:97:04:f5:7c:3c:f1:1c:8a:05:6e:d7:
7e:69:ff:27:8f:e7:ed:37:fb:15:45:9f:fe:1b:24:22:66:27:
b0:da:f7:22:85:9a:5d:16:fb:3a:02:84:ad:ee:74:d9:f1:74:
1c:69:a9:6c:3c:82:6e:ab:4a:6e:ef:ab:91:56:e2:25:1b:4d:
18:49:31:46:1d:ae:7d:9d:f5:6b:5f:d0:b9:b6:04:51:00:38:
82:02:a8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:43 2026 by rpki-client