Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
File: VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json)
Hash identifier: st1wK4DMt7k2SEP+FlNDaCodLgYfDecJMWoEjlfzvUI=
Subject key identifier: 14:1C:62:4F:C6:F5:B6:2D:4B:07:3E:53:A3:D2:4C:FD:68:BE:F3:D5
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Certificate issuer: /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial: 019E216CDB11929B348C7CEA2FF1DDDA25AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
Manifest number: 0649
Signing time: Wed 13 May 2026 13:00:42 +0000
Manifest this update: Wed 13 May 2026 13:00:42 +0000
Manifest next update: Thu 14 May 2026 13:00:42 +0000
Files and hashes: 1: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: 7AVjRD5LM1yz3tWw4HJy5N0Fs70mG/u3lPzvr/5kbqc=)
2: r8T9kW8X8GtCFTRxWjnqQQkGt18.roa (hash: h3aumMGf0ToESbOzhSKHlEo8BiRIXKiUebFOoBpkJJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6c:db:11:92:9b:34:8c:7c:ea:2f:f1:dd:da:25:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
Validity
Not Before: May 13 13:00:42 2026 GMT
Not After : May 14 13:00:42 2026 GMT
Subject: CN=141c624fc6f5b62d4b073e53a3d24cfd68bef3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:65:7f:2d:63:0e:c5:b8:b8:6a:5c:0e:49:
cd:56:04:42:e6:8f:60:ae:ca:86:23:85:ef:47:a4:
73:e5:90:d5:68:2c:3a:b1:90:85:8a:50:ca:df:56:
af:39:2b:fb:2e:7c:77:a0:b0:57:a6:f0:3c:08:4f:
c3:6b:ac:76:94:13:50:ac:f6:07:99:bb:3b:13:8d:
c9:e5:31:19:a5:e1:ba:4e:85:a3:6a:0c:e3:de:ca:
35:a2:b5:ab:2a:b8:21:ca:d6:3b:7c:c6:9d:53:82:
e4:d1:72:27:e9:f4:46:6c:68:80:d2:bc:fd:3c:b2:
d5:54:3a:dd:64:7a:d4:98:ce:54:a1:bf:07:41:93:
c5:42:69:4b:e6:e6:87:67:bd:4a:3a:48:1d:8b:f3:
70:bc:61:aa:14:89:75:ab:5d:eb:34:c3:e0:42:1a:
ba:a9:69:74:c1:81:d1:06:a2:72:08:76:1e:2b:dc:
1a:d7:62:15:bb:5e:8a:12:85:ff:ea:09:de:5c:40:
b3:4d:db:ed:49:1f:7b:f0:18:14:75:7f:e5:6e:c2:
0b:fd:ae:6f:95:09:e5:72:84:e1:1a:66:ef:36:f9:
16:93:29:f9:a3:4c:fc:af:f2:00:37:66:a7:6f:33:
a4:96:75:6f:66:05:05:94:94:c1:94:4c:cd:1a:b9:
6c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1C:62:4F:C6:F5:B6:2D:4B:07:3E:53:A3:D2:4C:FD:68:BE:F3:D5
X509v3 Authority Key Identifier:
keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3a:e2:e1:29:6c:55:75:23:16:16:91:51:fe:de:02:59:70:
07:58:90:64:c4:c1:e5:a8:d8:1e:00:e9:37:81:cf:5e:25:84:
7c:76:a1:b4:b5:15:0e:d8:42:79:a7:5d:05:44:7b:0f:44:f0:
e1:25:18:b8:3e:c0:7e:0b:14:1b:1c:65:51:a7:89:0b:fb:c5:
96:83:2b:b8:6c:42:95:12:35:a2:aa:9e:29:fe:1f:14:f2:15:
ed:d8:cb:4d:2f:d2:e5:5b:f6:cd:04:cb:e9:d0:51:8e:69:1f:
23:89:67:11:3d:06:f5:16:7f:b3:06:62:66:91:f4:76:d7:bb:
f8:4f:cb:8f:85:e6:aa:58:0c:05:ea:5d:39:21:68:33:21:4b:
27:6e:99:b7:16:c3:3e:ca:3a:43:de:69:c6:1a:e4:90:da:7f:
d9:13:65:79:c8:c4:2e:61:5b:64:b4:fb:4e:8b:df:8e:65:49:
75:6b:17:74:f9:53:66:98:27:f0:57:58:e1:e9:ee:ae:1f:75:
ab:e6:81:7a:e5:48:0c:aa:35:47:a9:24:06:af:62:b2:11:6e:
89:ae:ab:cc:1f:51:8b:a3:b5:ac:33:a2:7b:c1:ba:2f:a9:e7:
34:fb:23:03:d3:fe:7b:bf:46:cb:a9:fd:97:a0:c6:98:29:ff:
db:2a:ae:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:12:59 2026 by rpki-client