Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: 4z3JrSBipHS9yU6W3i+HdxUbfvI2PX+bajiVQny0oHU=
Subject key identifier: 7B:48:A0:F4:2E:D5:E9:BB:97:8B:29:BF:4B:1F:D8:04:2B:2F:8C:D7
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 01A1DD26A468578B0D3CD6DB906AE2DDF7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 1154
Signing time: Sun 15 Nov 2026 03:00:59 +0000
Manifest this update: Sun 15 Nov 2026 03:00:59 +0000
Manifest next update: Mon 16 Nov 2026 03:00:59 +0000
Files and hashes: 1: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: 5O+rYvzR+RMJiR47DF/JisQKSqnTxm2qJTbzWf2N06I=)
2: ZDnCXrs2VTXwnUeyEGxx3aj0GCo.roa (hash: lCX2OIWetakZH0BDXor6ZmMOPfPeK+kN4Jw1mCD9ZF0=)
3: zMQYa_z0ETouvgoP-hRFa3Ez7Ms.roa (hash: eLkLQOUvRvhD6ZfGFzHN4nd/jJr/zq6oP4KeFHqbKSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:a4:68:57:8b:0d:3c:d6:db:90:6a:e2:dd:f7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: Nov 15 03:00:59 2026 GMT
Not After : Nov 16 03:00:59 2026 GMT
Subject: CN=7b48a0f42ed5e9bb978b29bf4b1fd8042b2f8cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:3e:50:15:1b:bf:3c:af:03:4e:6a:ea:5b:
e0:57:3b:5d:06:57:c9:f8:79:0d:83:57:86:54:91:
5c:9f:e9:48:b8:5f:ed:78:a3:3e:30:07:b8:67:ca:
3a:b4:a7:56:9f:31:cf:0e:21:c7:a8:ae:6c:eb:3c:
12:29:83:04:4e:82:0c:14:8e:9d:86:05:c0:16:c6:
27:76:d3:05:15:8c:dd:96:f7:4e:47:8e:9a:0e:b7:
f3:ef:91:d5:31:2d:20:aa:a6:41:b6:37:d3:1c:d1:
ff:c2:ff:12:41:d8:bc:6f:f6:55:37:9f:bd:eb:41:
e1:d6:88:1e:ff:77:e9:3c:80:c0:6a:79:98:83:0c:
99:bb:fb:d7:89:5d:75:48:6a:9b:ce:4a:08:79:be:
80:2a:39:9b:f9:cb:e6:d3:a2:f9:20:0d:ea:82:08:
a3:e2:b0:91:67:53:cb:bb:c5:bb:53:c3:96:76:3a:
a1:21:ab:83:d7:e0:85:fe:4f:86:dc:50:51:5f:da:
a5:4e:84:f2:e8:95:6f:72:8e:7a:26:0b:f8:6f:f2:
d3:48:0e:03:66:b8:e2:ac:83:e7:fb:76:a8:7d:e1:
ab:e3:7f:8d:f3:dc:2f:ba:a8:2a:25:f0:3c:66:66:
27:1d:31:42:63:44:ea:4b:98:8a:d9:2c:34:5a:88:
79:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:48:A0:F4:2E:D5:E9:BB:97:8B:29:BF:4B:1F:D8:04:2B:2F:8C:D7
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6a:10:ed:c5:d7:51:3f:89:a4:bb:63:78:ee:7a:a2:4d:05:
c2:17:f3:1d:01:3b:3b:95:09:48:bc:42:2b:e4:2f:3f:92:51:
3f:0d:c5:ec:d9:21:f4:31:86:47:ad:2d:72:8e:78:b7:79:65:
53:e2:05:17:73:b8:28:80:fd:80:64:dd:af:b4:45:a1:d0:9d:
3c:e5:9e:22:09:13:8f:94:82:9d:80:eb:75:95:39:5d:b3:8b:
29:ad:68:65:da:ae:a1:e1:0d:72:70:ad:c8:0c:fc:a4:99:ed:
94:a2:23:e5:21:d2:e6:e0:ad:93:21:de:16:b0:35:b3:12:bd:
49:32:b7:fc:86:e5:3e:a9:56:f0:a4:2e:54:47:e1:f5:c4:62:
bb:30:9a:42:f5:dc:80:22:2c:4f:17:a3:c5:f1:18:0a:96:0e:
ec:e2:e2:fd:ce:0a:93:43:d9:94:c4:21:32:ae:40:10:db:b1:
7b:50:3e:78:19:ea:d7:ac:a4:80:58:5f:cf:cd:d0:7f:5c:d5:
b4:66:33:06:a4:f9:52:42:2d:5d:c6:89:52:f6:f1:2c:b3:d2:
b3:d1:d1:e1:70:20:09:27:2f:74:84:8b:ff:91:82:e9:47:a0:
d3:ff:23:aa:59:21:c3:39:f5:91:34:06:ba:fe:55:2f:9c:a5:
5d:b8:31:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:15:02 2026 by rpki-client