Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
File: VzoAKcURHfnMLPUxgnfwEbwpEKk.mft (raw, json)
Hash identifier: F47SocoIG3JTnZ0fD7qKgWMUbCeGCwdYs4/qSbIEfsg=
Subject key identifier: 9D:4B:89:41:6B:E3:13:77:BC:E1:88:19:9D:6E:60:46:07:84:30:78
Authority key identifier: 57:3A:00:29:C5:11:1D:F9:CC:2C:F5:31:82:77:F0:11:BC:29:10:A9
Certificate issuer: /CN=573a0029c5111df9cc2cf5318277f011bc2910a9
Certificate serial: 01A0DF85F2C632DD988AC98CAD05FA69E508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzoAKcURHfnMLPUxgnfwEbwpEKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
Manifest number: ED
Signing time: Sat 26 Sep 2026 21:01:32 +0000
Manifest this update: Sat 26 Sep 2026 21:01:32 +0000
Manifest next update: Sun 27 Sep 2026 21:01:32 +0000
Files and hashes: 1: Hw6fDQFRFN_Ls3115aFzf0vRck8.asa (hash: OsI8RtgpTzCj0b88FzzXfilbNxRb3Sb0tKlLzKAD5M8=)
2: VzoAKcURHfnMLPUxgnfwEbwpEKk.crl (hash: kO+ElnOf2sYHP2CR198RLgTbt9GJgekpnxvg9kmLInA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzoAKcURHfnMLPUxgnfwEbwpEKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:f2:c6:32:dd:98:8a:c9:8c:ad:05:fa:69:e5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573a0029c5111df9cc2cf5318277f011bc2910a9
Validity
Not Before: Sep 26 21:01:32 2026 GMT
Not After : Sep 27 21:01:32 2026 GMT
Subject: CN=9d4b89416be31377bce188199d6e604607843078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:09:25:af:ae:6e:52:61:3e:8b:9d:79:c7:
ef:f2:88:e4:00:5a:5f:59:75:39:d6:6a:c9:21:6d:
66:61:d4:42:f3:73:bf:e3:3f:92:01:70:4b:f1:e6:
2e:93:82:17:89:3e:32:1f:fd:6e:07:8c:19:13:3c:
da:97:a4:9e:3d:90:e3:d6:4d:37:7f:22:3c:12:70:
49:5d:33:1f:76:81:ec:44:88:2f:6a:be:75:44:60:
e5:bc:dd:6e:63:31:7e:fe:d2:ea:b7:1d:8f:bb:8f:
50:d6:76:43:f3:a6:ee:ba:3b:2d:dd:da:b6:22:50:
aa:d6:62:48:82:a9:c8:c4:88:e6:a6:f4:c7:d5:f3:
da:af:87:90:d1:fd:94:23:b2:d0:fd:59:35:59:9e:
68:41:2a:29:c9:04:c7:12:48:48:03:02:ee:8b:57:
9e:8d:70:ad:f5:53:b8:61:0b:0d:b1:39:c0:cb:88:
88:e2:7f:e0:9b:70:15:e2:47:82:e5:0a:03:b9:49:
b3:3e:a2:85:6c:93:75:53:ad:10:df:51:ac:53:d3:
7a:7d:ab:a4:3f:db:0e:d4:6c:27:5c:02:d0:35:48:
98:91:11:31:76:6e:d7:df:85:fb:76:1a:19:af:5e:
ba:4a:c2:19:8b:0e:60:63:61:8a:51:0d:8f:69:43:
45:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4B:89:41:6B:E3:13:77:BC:E1:88:19:9D:6E:60:46:07:84:30:78
X509v3 Authority Key Identifier:
keyid:57:3A:00:29:C5:11:1D:F9:CC:2C:F5:31:82:77:F0:11:BC:29:10:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzoAKcURHfnMLPUxgnfwEbwpEKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:4f:a7:f4:ce:e6:17:22:cf:96:03:df:32:50:7f:3e:1f:66:
f8:a2:40:ef:78:7d:cc:8e:04:c7:a1:82:44:53:1b:10:63:65:
b7:39:d0:dc:68:23:81:3a:d1:1b:32:ed:84:e4:8d:1c:d2:33:
53:46:44:ee:b2:c9:97:4d:b7:e5:59:cd:3c:f7:5c:57:d3:7f:
9b:bd:a1:44:e0:62:2a:7c:40:37:fc:7b:5c:49:50:2d:d7:83:
42:1a:5a:f4:e1:12:e2:a5:29:44:26:55:51:5c:56:b4:af:af:
63:38:40:4a:1f:2c:f9:33:3a:3d:1c:c7:b7:1c:0c:26:c6:a0:
29:e8:d4:8c:e4:50:f5:41:70:35:27:db:45:61:0e:bb:a3:ca:
65:05:fe:58:3c:9e:ba:89:f2:e7:3d:98:19:21:75:70:18:a5:
1c:26:3a:fa:ad:7e:16:47:96:dc:22:d7:12:b1:2d:94:93:6f:
eb:0d:b2:d9:22:d4:7c:94:aa:8d:9f:99:98:53:71:4f:a5:75:
eb:12:6b:96:0f:fe:55:f4:1a:b6:5e:78:58:ee:20:fd:7e:90:
93:1d:07:5d:5a:94:7d:d2:7d:84:e6:b7:fd:ff:d4:68:cb:1f:
fd:d4:e0:d1:73:3c:f6:26:dc:1f:2f:54:4f:e0:5e:bc:f3:bf:
b5:ef:78:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:40:23 2026 by rpki-client