Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: Tkjxpq7AOzCZcLeD2pgMLz9rCayrr0VCME5jtrT1JRM=
Subject key identifier: AA:B5:52:C8:39:0D:65:FD:08:76:BC:17:AB:1D:14:7B:A9:6A:FC:D0
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 019D28171BF5EA95A7962E2509869AC7DBD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 0EE4
Signing time: Thu 26 Mar 2026 03:01:36 +0000
Manifest this update: Thu 26 Mar 2026 03:01:36 +0000
Manifest next update: Fri 27 Mar 2026 03:01:36 +0000
Files and hashes: 1: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: jyFDCHGuSjnI+oyXGyjjn5wjoQ3tKU2mpiY/VPSAVck=)
2: ZDnCXrs2VTXwnUeyEGxx3aj0GCo.roa (hash: lCX2OIWetakZH0BDXor6ZmMOPfPeK+kN4Jw1mCD9ZF0=)
3: zMQYa_z0ETouvgoP-hRFa3Ez7Ms.roa (hash: eLkLQOUvRvhD6ZfGFzHN4nd/jJr/zq6oP4KeFHqbKSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:1b:f5:ea:95:a7:96:2e:25:09:86:9a:c7:db:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: Mar 26 03:01:36 2026 GMT
Not After : Mar 27 03:01:36 2026 GMT
Subject: CN=aab552c8390d65fd0876bc17ab1d147ba96afcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:c5:ee:3c:35:cd:59:68:45:97:c3:85:d5:
02:8d:92:8a:ec:60:7a:3d:31:cb:ec:d5:b8:8c:42:
57:e1:f6:13:41:e6:57:e7:69:5f:5e:60:8d:42:07:
7b:81:9b:7b:c8:44:29:ec:46:49:49:b0:91:9e:0f:
16:f4:48:d9:39:a3:bb:94:d4:c9:1b:b6:40:06:05:
27:5d:90:2e:78:ce:b3:f8:44:26:a3:c6:a1:7d:b2:
bf:a1:59:0c:94:72:9c:d8:73:e2:0c:f7:fb:18:f2:
32:23:5f:5d:1c:7c:d2:ba:f6:5c:af:2c:54:f9:ed:
7f:86:ec:20:db:36:55:fb:3b:85:3b:31:a5:55:ec:
f5:10:21:02:fe:1e:c0:cb:39:2d:12:20:2e:29:4f:
e6:96:23:cb:23:9e:33:7a:48:36:c5:60:ef:44:f0:
e3:97:81:fa:bd:37:fe:fe:b9:7e:41:50:3d:e2:04:
e3:f5:98:c8:19:36:1e:2e:d7:76:ef:48:bc:6a:9d:
46:09:d6:3d:b8:a5:69:9b:66:82:6c:24:04:29:27:
0d:ee:a2:10:b6:7c:64:5a:31:29:3c:49:5a:e4:0e:
2a:b1:48:d5:1e:59:08:4e:c4:22:69:0e:9b:08:77:
66:73:33:fe:03:0c:02:4f:58:66:49:28:46:d8:f9:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B5:52:C8:39:0D:65:FD:08:76:BC:17:AB:1D:14:7B:A9:6A:FC:D0
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:92:8a:9f:b8:97:80:4b:f4:b2:82:00:45:53:04:62:8d:b1:
38:d7:9d:cb:09:29:06:87:32:8e:88:55:5b:52:13:a7:54:a6:
73:83:9b:9b:b8:a3:a1:62:e6:cc:10:4e:65:ab:c8:c7:e6:c4:
e6:43:aa:67:e2:3e:4a:d2:64:bc:9b:7a:3f:e9:bd:3e:51:8f:
7a:53:01:bf:a0:1a:d0:0d:58:08:bb:14:ae:db:15:84:ca:c9:
a1:df:8b:61:c5:13:29:0f:25:cf:ba:6e:c5:1d:1b:67:75:06:
0b:92:f3:8f:b6:ac:b2:67:42:7d:98:f2:e6:35:2e:a5:8f:6c:
68:fe:2e:f1:ad:bc:e0:c9:90:40:b2:e7:68:f2:b4:dd:2f:68:
98:1e:84:73:bf:e9:b3:a1:b3:ef:c0:bb:4f:d9:dd:2e:ab:98:
8a:93:65:ff:20:0e:a6:27:d9:86:e8:11:d6:6b:88:62:a0:12:
35:98:e8:f1:35:52:2a:27:24:20:fe:7d:73:d5:ab:b7:4c:2b:
bb:43:bd:13:e3:80:8f:d0:0c:54:3c:9b:96:b1:3b:6d:4a:82:
33:52:c0:6c:74:c2:93:70:24:9a:bf:b7:ca:61:d1:79:1c:00:
d3:46:cc:f1:08:55:8c:b8:14:ef:ff:73:72:4b:27:28:ee:30:
5f:1c:7b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:51:19 2026 by rpki-client