
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File: VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier: sX8QM8zsnIYy/+IGKt3IuOPV+0feSV1Fqgg8LLLGaK8=
Subject key identifier: F9:65:79:31:E4:6D:36:50:4F:F2:68:A6:61:17:FF:A2:A0:4C:52:A7
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 019D284D5BF492C2869F65D2FF6539DCD211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number: 18C2
Signing time: Thu 26 Mar 2026 04:00:51 +0000
Manifest this update: Thu 26 Mar 2026 04:00:51 +0000
Manifest next update: Fri 27 Mar 2026 04:00:51 +0000
Files and hashes: 1: 7NGoj5cGztX58pAtipUcpmb4aIM.roa (hash: vlOULZs24F/kcnILYjizoe3IHDjDEgukRjmyfRx6nIw=)
2: V2ZzzbVPUiKvWiZZCU89cR5PNd0.roa (hash: A3URN1enAjnCkB6UzDkrO/J0z/XkaxyVPZWO9Xu4fHc=)
3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: yIkJAG4uGIbnz8NO1wbZhceEX9aUjzd6wyRIkmC5cRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:5b:f4:92:c2:86:9f:65:d2:ff:65:39:dc:d2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: Mar 26 04:00:51 2026 GMT
Not After : Mar 27 04:00:51 2026 GMT
Subject: CN=f9657931e46d36504ff268a66117ffa2a04c52a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:1f:ac:a6:f4:6d:56:87:36:52:12:ed:d2:
2c:b8:aa:9e:6d:68:59:ae:2b:74:8d:b2:0e:a4:b3:
a6:ab:6d:09:f2:e1:e6:a0:c2:d3:a4:3c:6f:29:cb:
21:de:ed:9d:c4:b0:de:33:ba:6b:16:7b:b8:4f:8f:
54:b8:cb:1c:df:10:e2:30:31:91:0a:06:ea:72:5d:
03:a7:64:cf:d5:a7:df:fd:3c:0c:54:8e:b0:4c:c0:
6b:43:88:9a:fe:fe:aa:39:66:2a:bb:3d:db:4c:d1:
f0:87:78:e8:83:5c:ae:aa:a8:17:20:b8:a4:e9:44:
b7:0d:ab:bd:9a:f7:5e:e7:7c:99:5f:21:fc:d3:8b:
c2:1b:ab:79:6b:93:ab:6c:5e:00:97:80:53:22:fb:
70:49:85:c8:ac:29:65:07:58:48:06:ce:7b:fa:06:
62:af:dc:dc:9f:00:f3:fe:67:83:ef:9a:60:11:5e:
c7:28:c0:bb:0a:26:66:14:93:f5:8b:93:f6:4d:ad:
49:50:bc:34:7a:32:36:eb:88:6c:2b:cd:1f:f1:4f:
73:b3:a3:3c:31:74:3f:8d:2c:ab:46:f0:8b:47:b5:
87:14:38:f0:6d:fa:6d:1b:c5:23:6c:f9:b2:4f:e1:
c5:0c:5a:cf:05:29:1f:0d:a1:cd:68:ef:a4:82:6e:
98:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:65:79:31:E4:6D:36:50:4F:F2:68:A6:61:17:FF:A2:A0:4C:52:A7
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:29:0e:c8:7b:4f:97:bf:32:5f:c9:37:0a:0f:c6:1a:76:3d:
b0:4a:5e:81:32:fd:c7:6e:4c:df:b3:35:11:46:9d:02:89:46:
ee:8b:f4:28:5e:4c:96:12:1a:17:43:ad:45:d3:31:ad:91:ec:
2b:fa:36:b1:8f:ec:73:9e:a8:10:cf:f4:36:04:d2:52:f0:22:
6d:98:d1:22:af:b6:51:76:7c:1f:f7:13:2d:8e:25:61:4d:a9:
3f:1b:36:91:c3:29:2d:fc:42:5b:28:36:e6:f6:b6:f2:d2:fd:
e7:fe:19:55:ce:33:97:e1:c4:3c:a6:89:db:d7:e1:8a:3a:1d:
07:18:50:bc:8b:81:29:e4:c9:0e:18:81:48:af:bc:11:4e:d8:
59:5a:d7:c2:57:12:b8:86:31:eb:65:31:f7:ae:49:5c:2c:7d:
d8:5a:33:a2:43:cb:41:a1:3e:f8:77:5f:f4:8e:e6:9c:6d:3c:
fb:3d:c2:a5:0f:d5:fc:23:e6:4d:ce:1a:36:a1:6b:9c:ff:c4:
b5:f4:ef:90:ec:5d:d9:0b:0a:0f:34:75:27:ad:6f:78:ee:60:
27:f9:0a:d4:dc:dc:4d:37:a7:0a:94:02:a0:cb:a2:5f:97:c2:
34:d0:a5:94:9b:04:c2:85:8c:a7:5a:48:e9:8a:4e:18:d8:33:
4d:26:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:24:44 2026 by rpki-client