Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File: VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier: 5BfMQVxDss+kHuHsaN8gE1dDXdxWcvPl6pkB46x43qU=
Subject key identifier: F8:FA:A4:DC:DA:95:E7:E1:0B:E2:8C:6A:B9:F4:3A:E2:DE:53:5B:E2
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 019F94371FA0D25CFD22B5D1C2094B3BAD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number: 1A03
Signing time: Fri 24 Jul 2026 13:01:08 +0000
Manifest this update: Fri 24 Jul 2026 13:01:08 +0000
Manifest next update: Sat 25 Jul 2026 13:01:08 +0000
Files and hashes: 1: 7NGoj5cGztX58pAtipUcpmb4aIM.roa (hash: vlOULZs24F/kcnILYjizoe3IHDjDEgukRjmyfRx6nIw=)
2: V2ZzzbVPUiKvWiZZCU89cR5PNd0.roa (hash: A3URN1enAjnCkB6UzDkrO/J0z/XkaxyVPZWO9Xu4fHc=)
3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: OFdpg9OgwBFYqGxe3eSMGrLWQ1F/bVUGVAAR0o9pJg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:1f:a0:d2:5c:fd:22:b5:d1:c2:09:4b:3b:ad:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: Jul 24 13:01:08 2026 GMT
Not After : Jul 25 13:01:08 2026 GMT
Subject: CN=f8faa4dcda95e7e10be28c6ab9f43ae2de535be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:44:13:41:d9:02:09:0d:93:26:ac:ef:fe:
28:d5:8b:68:7f:b7:34:93:5f:c4:b3:d9:84:5e:65:
e5:39:85:28:98:97:26:be:43:6d:3e:fd:09:1e:c2:
7d:b3:f2:92:c3:ad:1c:53:e1:2f:e7:40:8c:1e:b1:
84:89:b4:78:43:1f:eb:65:7c:31:0c:98:b3:bb:d9:
2e:b1:37:24:d5:64:8c:0e:38:b9:e7:13:20:73:b0:
5c:cf:17:d2:84:bb:f7:14:ef:65:56:19:47:de:f0:
6d:43:54:8b:8e:d6:14:f9:7a:60:19:96:5b:66:59:
d4:f8:5e:85:5a:bd:c8:59:04:9e:d1:5c:4e:21:fe:
0e:2a:a5:30:62:7b:67:e6:28:3d:4c:fa:60:e6:c2:
17:54:ec:74:ba:40:68:9b:0b:9f:0c:5b:de:c8:25:
22:1f:c5:be:ce:4f:90:fb:8b:c8:04:79:ee:27:2d:
a2:7e:43:04:bc:03:19:3d:d6:da:bf:1c:87:02:8e:
25:d5:3e:26:28:2a:30:b7:ae:fe:4e:24:0e:37:cb:
05:41:59:0c:33:d1:d8:30:70:c1:14:99:3f:68:26:
47:f7:09:21:58:38:99:f6:fa:3b:c8:32:85:1c:bb:
0c:01:ab:91:13:6b:24:3f:7b:30:43:e5:ef:78:9c:
82:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FA:A4:DC:DA:95:E7:E1:0B:E2:8C:6A:B9:F4:3A:E2:DE:53:5B:E2
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:87:10:a8:6f:48:d5:2b:bc:96:01:8f:4a:da:68:e0:ac:5b:
e6:ab:5e:1a:7d:e2:83:c5:a7:6d:9b:cf:dd:2d:3b:7f:ec:e1:
fd:01:4a:38:bd:9f:05:c7:55:95:01:5a:e2:d2:87:db:c3:32:
c0:f4:44:a3:ce:05:5a:3d:64:1f:c5:3c:b7:a4:97:aa:23:78:
4c:e4:10:25:00:6d:6b:33:b5:f0:c6:3b:43:aa:fa:bd:53:5b:
eb:6d:9b:86:ad:11:10:02:7d:af:8c:04:c4:77:1c:1a:61:a5:
fd:ea:0b:bf:72:5b:55:b8:eb:4b:60:8a:11:3f:63:d7:64:16:
30:79:3b:de:d6:4c:c6:f0:c8:2b:93:84:f8:e2:88:55:9f:44:
70:f2:ba:17:be:e4:44:aa:45:a5:78:b5:53:1a:33:5e:42:ea:
d6:b0:46:76:ff:b8:0b:b5:48:cc:eb:97:33:5f:42:7a:40:47:
7b:76:fc:13:ea:3b:da:71:77:ed:95:f8:f1:53:95:a2:50:80:
05:36:89:4b:92:bf:36:e8:da:ae:b4:96:46:76:db:a8:c6:9f:
1c:f6:2f:d5:2f:11:16:d4:a2:53:fb:d1:28:c6:38:df:f1:1c:
9f:e0:ad:ba:75:c0:f4:1f:ae:53:32:fb:1f:aa:62:1c:27:1a:
c0:bf:3d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:13:52 2026 by rpki-client