Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: JQ9FuzSx8I7JX0Hpy31SHEvBKB0aDVNn97vb6B6fhKk=
Subject key identifier: 45:70:32:7D:83:1F:41:26:69:50:91:AE:50:66:29:A9:DE:A9:2D:43
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 01A0E9D273A47F8F712E538EC904D7AA8224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 10D6
Signing time: Mon 28 Sep 2026 21:01:18 +0000
Manifest this update: Mon 28 Sep 2026 21:01:18 +0000
Manifest next update: Tue 29 Sep 2026 21:01:18 +0000
Files and hashes: 1: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: vbbkxJl2d/j/24KkCWz6+gZoowKyQ4mkeHlhHmP2XAE=)
2: ZDnCXrs2VTXwnUeyEGxx3aj0GCo.roa (hash: lCX2OIWetakZH0BDXor6ZmMOPfPeK+kN4Jw1mCD9ZF0=)
3: zMQYa_z0ETouvgoP-hRFa3Ez7Ms.roa (hash: eLkLQOUvRvhD6ZfGFzHN4nd/jJr/zq6oP4KeFHqbKSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:d2:73:a4:7f:8f:71:2e:53:8e:c9:04:d7:aa:82:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: Sep 28 21:01:18 2026 GMT
Not After : Sep 29 21:01:18 2026 GMT
Subject: CN=4570327d831f4126695091ae506629a9dea92d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:8c:81:a3:17:38:73:f6:2a:5e:f3:1d:82:
58:85:96:e6:53:13:a2:fd:9f:44:62:4d:7b:a3:a4:
76:54:4a:16:a5:32:93:3a:28:da:f3:f8:00:c2:5b:
48:8b:6b:b4:6c:de:66:3b:a1:1d:b4:19:9a:4c:b9:
60:56:54:89:af:d4:b4:c0:41:ad:96:3d:dd:72:06:
bf:1c:d8:21:ec:b1:c5:5b:be:53:e1:78:30:ad:75:
1e:10:37:11:03:b7:64:8e:35:d1:c8:ad:20:3f:a0:
c2:b2:f6:02:2d:63:24:b5:6c:8b:d6:23:ab:a3:70:
66:bc:3e:90:56:36:b9:3e:f9:d7:eb:4f:ce:93:70:
2a:ab:1c:aa:ac:70:a9:b6:e0:32:86:b1:3f:b5:b0:
7b:06:ba:75:7f:7a:86:fc:a5:07:9e:06:c7:40:dc:
57:ce:ba:cd:c4:0b:f9:d8:49:f3:3a:76:90:ce:b3:
a6:e0:3d:21:25:40:62:4e:a1:36:48:29:c9:18:00:
ec:e4:d9:53:f9:29:39:5a:50:0e:30:a8:9c:01:6a:
f4:55:57:28:21:51:3f:65:6e:87:69:2a:cf:2c:e8:
cd:65:a9:5d:70:ba:4f:6b:76:8b:60:f9:59:92:d7:
43:88:de:82:34:ba:2c:2a:9e:1c:8a:08:b1:b1:d2:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:70:32:7D:83:1F:41:26:69:50:91:AE:50:66:29:A9:DE:A9:2D:43
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:77:00:1d:e5:1e:65:19:80:9b:e1:ba:7f:57:70:cb:6c:b4:
a6:34:8a:fc:b4:7d:7d:1e:12:80:5a:55:33:45:08:f2:a4:2b:
d5:9a:4b:20:a5:68:7c:70:10:5d:7d:17:5d:ab:92:50:a5:74:
a3:c4:da:3a:f2:3d:41:b9:7b:36:c1:af:cc:57:37:32:2c:26:
f1:5a:23:d9:ab:73:ee:a3:c1:f6:d3:89:5d:53:fc:fd:e7:ab:
1e:67:88:9f:5e:31:a4:67:3e:f1:28:17:8c:e9:d1:6e:50:1a:
24:15:82:6c:02:9c:39:07:8d:ef:6d:a1:5d:66:6a:5e:dc:5f:
77:a9:48:38:95:06:f7:38:28:cf:e8:db:79:a5:ba:59:88:29:
78:13:8a:ad:0d:c8:f0:98:27:a0:78:0f:e0:cd:11:82:75:5c:
24:39:21:41:7b:5b:29:97:76:b6:64:38:d5:86:45:05:1b:9d:
de:c8:6d:ee:66:3b:9c:ba:5c:63:d9:3c:13:c5:bd:1c:77:8d:
8c:f1:e6:1f:d8:ff:01:95:cc:c6:aa:2f:ff:30:63:08:e2:40:
f5:89:40:86:d8:68:50:b2:30:48:1f:1f:33:7c:a9:cb:fb:f3:
c9:41:16:18:d0:b2:bb:75:7f:a6:d3:e2:6d:8b:d2:35:ae:17:
3a:02:c0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:52:46 2026 by rpki-client