Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
File: VzoAKcURHfnMLPUxgnfwEbwpEKk.mft (raw, json)
Hash identifier: +AKvB2ToqB5e9T0PBNWZN61FvIWgcWTPWvbSS914kcI=
Subject key identifier: 2B:46:79:E8:CF:1F:62:C3:9D:F8:AA:D4:30:C1:AC:E4:B0:33:E4:BD
Authority key identifier: 57:3A:00:29:C5:11:1D:F9:CC:2C:F5:31:82:77:F0:11:BC:29:10:A9
Certificate issuer: /CN=573a0029c5111df9cc2cf5318277f011bc2910a9
Certificate serial: 019FA89A584034A8C7B7EB894F770CAAB6B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzoAKcURHfnMLPUxgnfwEbwpEKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:55 +0000
Manifest this update: Tue 28 Jul 2026 12:01:55 +0000
Manifest next update: Wed 29 Jul 2026 12:01:55 +0000
Files and hashes: 1: Hw6fDQFRFN_Ls3115aFzf0vRck8.asa (hash: OsI8RtgpTzCj0b88FzzXfilbNxRb3Sb0tKlLzKAD5M8=)
2: VzoAKcURHfnMLPUxgnfwEbwpEKk.crl (hash: wuAbdWfUuHGCRKsIz8B8WnwGEw7S3VhzLdE2hHk1Igo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzoAKcURHfnMLPUxgnfwEbwpEKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:58:40:34:a8:c7:b7:eb:89:4f:77:0c:aa:b6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573a0029c5111df9cc2cf5318277f011bc2910a9
Validity
Not Before: Jul 28 12:01:55 2026 GMT
Not After : Jul 29 12:01:55 2026 GMT
Subject: CN=2b4679e8cf1f62c39df8aad430c1ace4b033e4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:64:75:2b:3e:42:10:62:e2:bf:52:71:0b:d7:
5b:df:02:73:65:3f:f9:db:09:df:e5:35:46:e8:8d:
1a:ee:3b:34:e2:71:93:09:ff:ce:46:0f:46:bc:11:
ac:57:bf:c5:a6:33:fe:ef:d1:9a:7c:2a:91:8b:39:
c7:ba:d7:23:5c:40:8b:7f:91:a5:53:42:be:90:3c:
84:6b:32:9f:18:f5:7d:5a:e4:f0:22:db:32:94:d5:
59:18:ff:60:ed:23:92:41:c7:65:b5:56:13:97:a6:
27:e8:00:03:e8:12:80:b4:c7:81:12:95:85:e7:bc:
e0:f9:ba:95:64:5e:31:4a:4a:c7:f2:df:59:a5:4d:
da:a5:0e:f2:b5:ac:76:2c:07:98:e4:d9:c4:23:3b:
2d:b9:4d:60:9e:15:c2:bf:24:0a:81:70:03:a0:97:
70:fb:30:09:39:70:25:91:09:89:0e:2e:a5:20:6d:
c0:af:d5:e1:da:a4:7f:32:fd:8e:3d:64:a0:e3:30:
75:a6:b6:11:27:40:e2:03:48:51:1b:23:e1:7c:57:
ff:4c:5e:c2:be:65:f4:58:19:29:35:cc:22:f0:d2:
93:b8:6e:a6:74:49:a7:f1:7d:7c:7b:b1:85:a0:e0:
40:e7:6a:50:b7:8b:c0:18:1a:f8:1c:42:29:b6:59:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:46:79:E8:CF:1F:62:C3:9D:F8:AA:D4:30:C1:AC:E4:B0:33:E4:BD
X509v3 Authority Key Identifier:
keyid:57:3A:00:29:C5:11:1D:F9:CC:2C:F5:31:82:77:F0:11:BC:29:10:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzoAKcURHfnMLPUxgnfwEbwpEKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:af:04:92:e3:e6:8b:02:5d:0d:f6:90:3e:88:6a:36:27:f6:
78:0b:ff:93:bb:6d:b2:27:1a:10:6c:d9:ba:02:c4:81:03:22:
07:1b:63:25:38:9e:8e:cf:e1:c6:18:ea:bf:5c:db:e9:a0:d4:
6c:db:9a:47:86:dd:c4:c9:10:71:f8:89:86:17:88:5b:26:6d:
4c:68:ab:2f:e2:84:38:6c:31:af:ce:9a:9d:a7:cb:51:9c:3e:
c6:b7:a3:9f:bb:7d:da:f2:f1:03:aa:db:fa:36:ad:31:f5:6a:
06:1a:8a:80:f8:ff:6a:a3:fe:6e:ec:9d:dd:6e:46:35:78:f1:
8c:5b:91:4e:a1:d6:8f:d7:e6:5c:47:01:37:b1:36:e4:37:80:
bb:80:ab:f3:62:c9:ca:4c:c7:5e:cf:7a:39:89:7d:ea:6b:f8:
f1:00:7b:ba:e1:6f:03:9b:6b:53:66:f6:cc:1b:32:9c:a8:c8:
82:6a:bc:46:fa:e6:70:54:b2:d4:c4:fd:9d:1b:56:3c:58:69:
a6:60:ab:5c:70:f5:aa:f1:b4:f6:80:7a:18:84:53:57:4f:47:
0f:68:8f:6d:bc:10:8a:fa:90:98:61:6c:2d:e3:c1:e0:fe:a5:
7e:b4:85:3e:94:8f:81:2e:1b:46:02:97:39:d9:37:30:85:e1:
c6:f1:94:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:40:14 2026 by rpki-client