Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
File: VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json)
Hash identifier: GPEekQP1dTX9QKBcastwSoUryuKfkKhoij74RDoKkAQ=
Subject key identifier: 39:2B:8A:29:61:19:3B:DC:04:F8:C4:8C:BC:2A:A1:B9:CB:87:92:8C
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 019E1CEB7DFB5EFC94F03597AAE848FBB970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
Manifest number: 13D9
Signing time: Tue 12 May 2026 16:00:55 +0000
Manifest this update: Tue 12 May 2026 16:00:55 +0000
Manifest next update: Wed 13 May 2026 16:00:55 +0000
Files and hashes: 1: 4-WbBaq98Oq9Hev6MWdBUYGPmH0.roa (hash: GNmnhi1gsX6X4qEuEkfyWsKzBAsClKRsbDlEB+HLZ4o=)
2: CjhmCMWptrEEhGP0rWZ3aS_GZCQ.roa (hash: xRBb5qX8Yz/3LKM505uXNjs7V3IJIMZmvB9mN9XYUV0=)
3: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: Ch1h6i0OasbmZTbaIHgemrVb+ZKk3aEZTiOPY32p9b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:7d:fb:5e:fc:94:f0:35:97:aa:e8:48:fb:b9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: May 12 16:00:55 2026 GMT
Not After : May 13 16:00:55 2026 GMT
Subject: CN=392b8a2961193bdc04f8c48cbc2aa1b9cb87928c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:87:b0:16:38:c8:34:14:d7:d4:94:f9:f8:b4:
e2:49:da:30:c1:92:16:d7:0e:41:65:13:65:1c:4f:
4c:72:da:1b:8a:96:42:6f:04:c4:90:66:6f:65:e8:
a0:91:46:87:3a:24:4a:bc:23:30:d9:4b:93:d1:4d:
a1:ad:d2:88:04:35:13:62:68:9c:71:6b:c4:00:e8:
5c:ef:99:02:43:61:1a:55:22:47:67:17:35:c6:d7:
10:82:e6:f1:a9:13:f5:11:9b:8f:bc:4f:a2:02:d0:
4c:e7:78:a2:91:e2:db:94:59:e6:dd:55:c5:ad:b6:
a6:cf:46:b4:4c:35:22:a6:ee:17:cd:e6:46:dc:cb:
4d:9e:02:d5:9b:ce:29:ac:1b:98:10:42:45:43:d2:
34:ee:68:eb:52:15:02:91:76:41:36:bf:9e:42:df:
35:37:a6:b4:84:f4:f8:ed:5d:5a:59:1f:05:fb:78:
3e:45:8a:80:5f:2a:7c:58:f3:35:aa:10:78:2d:58:
fc:58:f0:62:8f:84:79:12:4e:83:ad:a9:06:14:c8:
dd:f1:a2:d8:73:5d:4f:a6:31:80:d8:7a:56:b7:15:
c8:03:e2:23:41:ee:a1:83:b7:44:05:7b:34:34:3f:
7c:49:2b:f4:37:e5:f1:cc:9d:c3:42:32:b6:36:fd:
d0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2B:8A:29:61:19:3B:DC:04:F8:C4:8C:BC:2A:A1:B9:CB:87:92:8C
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7d:ef:f1:5d:2d:05:9d:fb:fb:64:ce:c7:fb:de:b0:0a:b2:
c0:ef:cc:93:5c:73:3e:02:21:ef:6a:53:7d:2d:60:dc:2a:c6:
db:f7:fd:2f:df:42:3d:0a:85:68:79:2f:2c:57:3e:b4:a5:e0:
d4:b1:0d:37:1f:34:a4:44:56:ac:6a:7c:d9:e1:1d:c4:b7:74:
1a:0f:64:b4:6d:1b:bb:34:ae:c4:d4:91:d3:ea:09:85:6f:7d:
f9:27:8b:da:65:5d:62:8a:0a:ba:53:7c:37:19:17:01:9e:13:
33:0c:bb:b3:44:68:0a:3e:8c:df:2b:88:f7:af:e3:b6:93:46:
52:bf:48:c2:cc:1b:f1:7d:31:c6:7f:ac:0c:1d:73:ed:0a:ba:
bd:66:f5:e1:09:06:f9:2f:9b:97:b8:10:e6:cf:46:3a:ff:08:
cd:a0:6a:88:4b:2f:5b:0c:cf:be:b1:9b:82:8e:23:ea:4b:81:
a9:a7:3e:9b:d6:ae:95:f7:a3:a5:1a:ed:bd:d7:c3:01:00:b3:
3f:28:c6:35:73:9c:04:a4:5e:fd:2e:ff:a5:d7:1c:9a:0d:aa:
2f:aa:c1:c5:83:45:1e:5d:31:09:ba:ca:c0:af:65:44:b4:7a:
3b:4e:91:24:05:00:f6:6d:d5:72:a3:91:2c:b5:ee:38:4a:2b:
5d:e9:70:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:45 2026 by rpki-client