Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
File: VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json)
Hash identifier: tYNK34eNdJeJQK4Dj3zD8yR7SYKEAmR4cFu3ZCXA4ww=
Subject key identifier: A2:E9:1C:48:D6:4E:0D:01:60:BD:B3:0C:0A:BE:E3:D4:E0:30:10:DB
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Certificate issuer: /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial: 019F9437260CFB04391667CE2154E9E5646F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
Manifest number: 0709
Signing time: Fri 24 Jul 2026 13:01:09 +0000
Manifest this update: Fri 24 Jul 2026 13:01:09 +0000
Manifest next update: Sat 25 Jul 2026 13:01:09 +0000
Files and hashes: 1: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: +GnMA0t3MrLbeHOmvp5oi7jCLigyncJYxvd2JZ6sB3w=)
2: r8T9kW8X8GtCFTRxWjnqQQkGt18.roa (hash: h3aumMGf0ToESbOzhSKHlEo8BiRIXKiUebFOoBpkJJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:26:0c:fb:04:39:16:67:ce:21:54:e9:e5:64:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
Validity
Not Before: Jul 24 13:01:09 2026 GMT
Not After : Jul 25 13:01:09 2026 GMT
Subject: CN=a2e91c48d64e0d0160bdb30c0abee3d4e03010db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:00:34:6d:58:fb:aa:50:76:34:b9:bb:52:
e7:06:7d:9b:dc:4e:c2:fe:24:14:04:17:a9:ae:24:
c9:81:8a:74:34:56:19:2b:73:fd:9d:5e:8c:9b:af:
f4:b6:4d:19:f4:19:1a:28:48:f2:6e:a9:70:70:74:
41:2e:e9:ab:77:d2:38:4b:dc:d8:27:f7:b5:0a:0e:
09:a5:07:d4:1b:d2:7e:d8:93:12:ef:4c:a2:66:52:
58:85:ef:20:46:f9:e9:96:ce:03:43:ae:e8:93:f4:
c4:42:cf:f8:af:50:77:d4:6b:8a:76:8c:37:5b:95:
95:bb:d2:a3:8b:e9:0e:97:09:23:06:14:73:91:30:
55:ad:fb:53:91:57:fd:de:ce:99:85:e7:b6:55:90:
34:85:5c:4a:8d:d1:67:91:dd:24:17:c6:a1:c5:e6:
1e:cc:6a:33:d6:0b:28:24:ca:e5:65:35:4a:45:9f:
33:88:59:39:fa:a4:de:8c:89:e8:37:05:62:51:3f:
cf:8e:02:a4:50:30:7c:3b:2b:56:c7:38:ce:73:87:
6a:1e:aa:9a:0a:33:f8:bb:db:38:50:95:74:09:fc:
35:2c:d7:b6:25:48:d9:6a:e0:67:54:c1:43:fe:7a:
5f:37:49:06:b7:48:3b:88:b4:cf:32:13:1b:67:4b:
73:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E9:1C:48:D6:4E:0D:01:60:BD:B3:0C:0A:BE:E3:D4:E0:30:10:DB
X509v3 Authority Key Identifier:
keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d3:f7:89:46:71:17:4c:c5:7d:d4:fd:db:6c:f7:98:25:f5:
58:c8:09:9c:d6:35:c0:68:90:1b:57:8c:be:00:4e:db:32:44:
dc:52:7b:67:7b:dd:ce:6c:eb:5e:a9:86:8d:2a:15:0d:14:cf:
47:6e:05:4f:b8:ea:f5:35:2e:89:eb:57:a8:85:5e:d9:b9:bb:
ca:e7:65:42:f6:a6:02:cf:31:91:6e:44:ad:55:be:5f:d8:0a:
b6:42:23:0a:c7:55:6a:26:e9:b6:47:62:46:92:24:24:9a:ee:
71:32:91:02:2e:68:08:f6:c4:0b:8a:96:8c:a5:a6:08:6a:c9:
40:62:7c:e5:0a:76:57:2f:3c:fd:9f:19:37:d7:cf:fd:61:2e:
34:34:83:09:8a:91:23:3f:f9:f5:45:6f:3b:88:a3:ea:ef:65:
f7:80:21:1a:ab:ea:a4:8c:bb:86:cd:c9:f6:7d:7e:7c:bc:5f:
0c:8d:4b:cb:d0:91:d2:e9:04:b5:f1:9a:a0:c3:2f:aa:cd:61:
1f:05:35:23:7a:77:98:20:2b:0a:35:93:64:6d:ed:f8:af:2c:
70:45:05:3b:05:a9:e3:e0:28:f1:cc:fb:33:13:a7:90:27:0b:
bc:5c:55:13:ea:d8:2e:c3:14:ed:4d:43:f5:58:07:84:a5:21:
45:13:9b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:33 2026 by rpki-client