Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
File: Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft (raw, json)
Hash identifier: 19RoOS3bUjIA3dR0WoqB0ZkXq0J8h5k6pvAmxRNffGs=
Subject key identifier: 69:47:27:FE:E8:CE:BD:E3:88:1C:21:22:46:47:A8:6B:C8:78:19:34
Authority key identifier: 56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4
Certificate issuer: /CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
Certificate serial: 019D27045736CA95F8AB2D52EF67E8321E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
Manifest number: 17AB
Signing time: Wed 25 Mar 2026 22:01:29 +0000
Manifest this update: Wed 25 Mar 2026 22:01:29 +0000
Manifest next update: Thu 26 Mar 2026 22:01:29 +0000
Files and hashes: 1: Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl (hash: pH8pTGTjFU9cacCWIUbDRXdA8mlvdymX2SVpM9e52HM=)
2: ksdw21uo8tL2LhVO0SZTaj0xN_A.roa (hash: SG7h3EKzF4YmgDHN6t8CLka5u3+CMxZHGn0rZ97GjLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:57:36:ca:95:f8:ab:2d:52:ef:67:e8:32:1e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
Validity
Not Before: Mar 25 22:01:29 2026 GMT
Not After : Mar 26 22:01:29 2026 GMT
Subject: CN=694727fee8cebde3881c21224647a86bc8781934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:06:42:cb:39:7c:27:b9:ce:1b:5f:03:3c:
9f:21:d5:6c:e5:13:df:0b:c3:75:69:ad:50:21:e4:
4e:ee:d6:9f:e8:c9:16:b2:c1:d0:4b:2b:a4:94:9b:
76:95:0e:0f:c0:3e:15:54:b5:86:a0:7c:ca:d8:be:
8f:e9:45:d0:5d:7e:8b:a8:f8:be:c3:4f:09:09:ff:
4f:f6:8b:e3:27:3e:0f:2b:31:5f:00:ee:00:93:ca:
6a:87:56:9d:ef:94:3d:fb:f9:32:2a:c7:0e:e1:e2:
e8:e0:d1:9d:c7:bd:5d:3f:95:69:6b:65:f8:1a:37:
14:c0:bc:62:27:fa:c3:08:47:f6:53:22:26:b6:0d:
70:01:57:c2:28:2b:4e:1f:e0:2d:8e:fd:b0:5d:9b:
49:4d:38:88:45:6e:95:68:63:f0:c2:be:55:63:98:
ec:5e:5a:f0:45:03:8d:0d:be:2e:99:74:6a:d6:7c:
8a:fe:42:06:ef:80:b1:9c:c1:4b:92:c9:8e:ef:20:
11:0e:d3:da:dd:98:a0:a3:b0:e1:c6:d5:51:ba:d4:
9e:a3:cf:d5:3b:ab:9f:c3:fe:a2:ea:57:3c:27:6b:
68:40:ae:75:76:ac:62:c8:ea:eb:5d:e8:41:16:e0:
28:a9:cc:1d:e4:cb:f6:a1:b0:66:e1:4a:7d:5f:86:
ce:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:47:27:FE:E8:CE:BD:E3:88:1C:21:22:46:47:A8:6B:C8:78:19:34
X509v3 Authority Key Identifier:
keyid:56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:df:03:d5:34:ba:a3:42:2b:fb:b9:18:d4:d9:09:81:98:87:
7d:92:0f:f0:46:21:b1:ad:eb:52:1a:bd:ed:72:82:13:cb:96:
d1:8f:71:ea:eb:fc:18:3a:6b:27:75:ac:20:28:4f:ad:21:f0:
6c:76:0a:f3:10:ed:81:3f:be:28:2c:e4:ad:ca:55:9c:6d:bf:
fc:1b:e8:25:c1:66:90:8c:ce:fe:c2:82:d2:5a:5b:4c:81:22:
c7:e0:7d:88:18:4b:b0:6c:72:4b:3e:64:52:ea:77:6a:6c:c2:
ad:1b:4d:d5:17:6a:81:90:b0:76:b9:99:d8:0c:f7:46:af:4f:
c6:23:e6:2e:0a:97:b9:af:db:9c:7d:bb:19:5d:35:7a:3c:d5:
43:6a:7f:4d:22:3d:99:28:0c:58:16:1e:f5:5e:00:de:16:a0:
72:8c:61:94:0e:be:1b:de:1b:65:ea:86:f3:bb:0d:02:d1:4e:
17:ac:8a:3f:d4:b9:5c:52:d5:f9:5f:39:85:b1:02:4a:ae:84:
7e:c2:ed:13:9d:ea:c2:dc:4c:3f:38:61:68:51:7d:5c:24:15:
17:81:fd:34:a3:2d:24:66:16:72:34:ac:7d:ba:b5:60:37:74:
1c:1a:40:68:0f:f0:dc:0f:33:ec:06:98:17:21:ff:38:76:d9:
c2:1e:77:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBFc2ypX4qy1S72foMh4YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Y2M3ZjRhYzcwMGJiNWFkN2Y0YjIxYzExMTExNDkzZmY2
OTc3YTQwHhcNMjYwMzI1MjIwMTI5WhcNMjYwMzI2MjIwMTI5WjAzMTEwLwYDVQQD
Eyg2OTQ3MjdmZWU4Y2ViZGUzODgxYzIxMjI0NjQ3YTg2YmM4NzgxOTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQAGQss5fCe5zhtfAzyfIdVs5RPf
C8N1aa1QIeRO7taf6MkWssHQSyuklJt2lQ4PwD4VVLWGoHzK2L6P6UXQXX6LqPi+
w08JCf9P9ovjJz4PKzFfAO4Ak8pqh1ad75Q9+/kyKscO4eLo4NGdx71dP5Vpa2X4
GjcUwLxiJ/rDCEf2UyImtg1wAVfCKCtOH+Atjv2wXZtJTTiIRW6VaGPwwr5VY5js
XlrwRQONDb4umXRq1nyK/kIG74CxnMFLksmO7yARDtPa3Zigo7DhxtVRutSeo8/V
O6ufw/6i6lc8J2toQK51dqxiyOrrXehBFuAoqcwd5Mv2obBm4Up9X4bOUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlHJ/7ozr3jiBwhIkZHqGvIeBk0MB8GA1UdIwQY
MBaAFFbMf0rHALta1/SyHBERFJP/aXekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnN4X1NzY0F1MXJYOUxJY0VSRVVrXzlwZDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wOWJmOTgtNTkwZC00YWQ1LTllYjMt
OWI4NmJmZmM4MzNjLzEvVnN4X1NzY0F1MXJYOUxJY0VSRVVrXzlwZDZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wOWJmOTgtNTkwZC00YWQ1LTllYjMtOWI4NmJmZmM4MzNj
LzEvVnN4X1NzY0F1MXJYOUxJY0VSRVVrXzlwZDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjt8D1TS6
o0Ir+7kY1NkJgZiHfZIP8EYhsa3rUhq97XKCE8uW0Y9x6uv8GDprJ3WsIChPrSHw
bHYK8xDtgT++KCzkrcpVnG2//BvoJcFmkIzO/sKC0lpbTIEix+B9iBhLsGxySz5k
Uup3amzCrRtN1RdqgZCwdrmZ2Az3Rq9PxiPmLgqXua/bnH27GV01ejzVQ2p/TSI9
mSgMWBYe9V4A3hagcoxhlA6+G94bZeqG87sNAtFOF6yKP9S5XFLV+V85hbECSq6E
fsLtE53qwtxMPzhhaFF9XCQVF4H9NKMtJGYWcjSsfbq1YDd0HBpAaA/w3A8z7AaY
FyH/OHbZwh53eA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:24:07 2026 by rpki-client