Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: STFuIK9sa/1v5n2/L72D2ZrMW5cc91nv53zPi/JMl7c=
Subject key identifier: C2:8A:68:FF:19:F5:99:A5:B3:5D:07:47:B9:F2:98:58:3E:3A:B7:FB
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 019E1F47CBC89EC24D577FBA05A7E5DB9AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 0F64
Signing time: Wed 13 May 2026 03:00:59 +0000
Manifest this update: Wed 13 May 2026 03:00:59 +0000
Manifest next update: Thu 14 May 2026 03:00:59 +0000
Files and hashes: 1: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: 9dGiRJtCEdRunT35AE5yHosIhVq2ApFHauYiYYS3kY8=)
2: ZDnCXrs2VTXwnUeyEGxx3aj0GCo.roa (hash: lCX2OIWetakZH0BDXor6ZmMOPfPeK+kN4Jw1mCD9ZF0=)
3: zMQYa_z0ETouvgoP-hRFa3Ez7Ms.roa (hash: eLkLQOUvRvhD6ZfGFzHN4nd/jJr/zq6oP4KeFHqbKSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:cb:c8:9e:c2:4d:57:7f:ba:05:a7:e5:db:9a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: May 13 03:00:59 2026 GMT
Not After : May 14 03:00:59 2026 GMT
Subject: CN=c28a68ff19f599a5b35d0747b9f298583e3ab7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ec:6e:8f:b0:73:78:74:db:28:6a:6e:6e:9b:
01:78:53:21:54:ec:8b:b2:21:27:d9:ac:22:f7:13:
57:fe:91:34:7c:39:40:b2:de:78:04:59:57:c3:d5:
32:e6:ec:c4:fd:1a:ce:fa:f8:f0:64:87:33:44:d9:
33:67:47:3a:b4:74:e2:92:87:e2:af:c3:f8:ce:a2:
73:5d:54:37:25:5b:e1:c2:28:52:99:ce:13:d0:1a:
c0:a9:92:5b:6c:a9:56:ff:53:df:fa:46:0d:34:1a:
84:64:f5:43:d9:b8:01:96:47:8d:a1:7e:87:15:2a:
c0:54:e6:26:e6:b7:9d:39:af:49:70:c5:e2:74:a7:
9d:a3:2e:71:a5:79:0b:57:24:e7:c1:31:98:99:68:
d7:8e:a5:a6:e8:7c:ee:46:71:a6:b0:3c:24:aa:2d:
34:09:cc:56:27:f6:f2:62:b9:c3:cc:ca:21:35:6c:
c0:60:96:4d:4b:5b:a5:e3:a9:5f:ad:0c:0e:3d:c6:
b8:b6:dd:7e:05:0b:3c:b8:7b:ec:88:55:9d:25:af:
c4:8e:be:97:54:a5:6b:c7:60:f6:7b:b7:34:99:89:
c1:14:78:69:c1:f8:ac:ae:b4:29:6b:d2:f1:1f:3d:
b6:a2:62:b9:63:18:b8:a0:3b:cc:eb:30:63:76:a6:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8A:68:FF:19:F5:99:A5:B3:5D:07:47:B9:F2:98:58:3E:3A:B7:FB
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:20:3c:f3:9a:f3:6e:48:95:f8:7c:79:7a:a6:b2:d5:04:bd:
02:f2:16:5b:de:08:a9:ea:e1:f3:cc:31:07:d7:db:df:4f:db:
72:32:c3:13:52:10:1f:5d:4f:7c:98:58:18:bf:9f:f7:7c:01:
84:f1:93:bf:37:b6:2a:d0:ce:7a:b5:72:be:79:6f:76:cb:6a:
72:4e:95:6f:64:d0:e2:ec:83:f8:63:03:af:d2:ff:fb:c0:60:
c1:85:d2:2b:b4:34:59:10:8e:7d:eb:07:42:04:9e:e0:6e:5d:
5a:bb:7f:05:82:22:2b:bc:66:49:5c:18:bb:f6:04:59:b7:f3:
1f:ba:2b:9d:86:71:ef:dd:30:f2:37:ff:5d:c6:a3:c5:fc:08:
70:1b:2c:45:85:c7:3a:19:ce:c2:26:72:36:c7:cb:7a:65:fa:
59:c2:88:38:bc:d6:e6:e6:59:39:e7:97:9c:5f:06:69:2e:83:
96:e2:c2:2b:82:3a:7a:fa:fa:e3:4f:f7:cf:0c:c5:8e:bf:90:
ac:29:26:2e:94:a7:55:1a:ac:ca:c4:2c:5e:b1:22:ca:18:2c:
de:e4:23:84:2c:05:03:85:f7:de:bb:36:94:9e:70:fb:ab:bb:
cb:69:b1:16:2c:ff:21:99:12:cd:f9:39:2a:ae:36:c1:fa:99:
90:1e:11:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:50:15 2026 by rpki-client