Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
File: VZxkpqxMSXatNiFBKhN0WeZJq54.mft (raw, json)
Hash identifier: jQx59aVbxmJ9gMOXNy2wudamNuY/i3+m7r64vSGARpI=
Subject key identifier: B4:C8:1A:15:B1:2C:EE:CF:3D:3D:B2:04:E1:A6:8B:8F:AD:8D:A4:3C
Authority key identifier: 55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
Certificate issuer: /CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Certificate serial: 019CAFB60B24A2CC80B43A8618670D8DCB6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
Manifest number: 13E0
Signing time: Mon 02 Mar 2026 18:01:09 +0000
Manifest this update: Mon 02 Mar 2026 18:01:09 +0000
Manifest next update: Tue 03 Mar 2026 18:01:09 +0000
Files and hashes: 1: OPRz51uzznqYUEPxfg90oEwb7MQ.roa (hash: eZ6pMS8abjtpitMERgpepOF6OAkDWhegDlYVypYAvp8=)
2: VZxkpqxMSXatNiFBKhN0WeZJq54.crl (hash: sTg7VbpjVt0KWRCqAxBavkiPlAT2cAYYBXzXBPHCCpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b6:0b:24:a2:cc:80:b4:3a:86:18:67:0d:8d:cb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Validity
Not Before: Mar 2 18:01:09 2026 GMT
Not After : Mar 3 18:01:09 2026 GMT
Subject: CN=b4c81a15b12ceecf3d3db204e1a68b8fad8da43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:71:92:82:86:2c:b0:fd:e9:4f:e4:ce:c9:
7e:b9:26:2f:ad:a2:37:a6:c9:ab:97:6d:61:50:fc:
40:f7:c2:b5:06:4a:85:e7:4b:3f:35:e2:19:c3:db:
7f:26:c4:74:0b:a9:43:fb:9c:17:6b:41:cc:a1:54:
27:96:9e:4f:4b:53:72:2a:19:8c:cd:c3:87:1e:e7:
43:b3:7c:6c:de:c6:94:74:0d:47:8e:53:79:a7:91:
89:9e:43:06:0a:07:a3:83:1a:b4:c7:55:cf:d5:1a:
6b:48:4b:38:03:31:47:b1:39:0f:e3:6f:8a:b7:37:
fd:b2:ff:8d:cd:c4:fe:8c:ce:51:92:86:d8:ca:2b:
fc:cc:f9:09:c6:d4:c8:ab:28:bf:df:a8:41:26:eb:
db:ee:8f:54:9b:48:6e:12:d2:a1:17:2a:03:2b:ea:
15:f9:b2:20:84:87:df:c0:56:98:bb:07:18:85:39:
29:eb:54:8e:25:84:3d:ae:58:cf:a1:60:3b:8f:94:
98:a5:30:15:fc:98:02:f7:c0:52:e4:6b:87:eb:3a:
e5:f7:56:11:30:b0:95:1c:9c:e1:89:ea:c3:94:0c:
ad:87:d9:12:e5:3f:ec:1b:33:38:30:83:6c:2d:50:
52:36:3f:e8:59:4f:ff:34:bd:fb:d2:91:18:6e:34:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C8:1A:15:B1:2C:EE:CF:3D:3D:B2:04:E1:A6:8B:8F:AD:8D:A4:3C
X509v3 Authority Key Identifier:
keyid:55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e1:13:1c:08:ec:c0:98:4d:84:ec:cb:f8:7c:09:40:5f:1f:
67:6b:ac:20:c0:72:bb:36:a7:c5:20:d7:b5:d4:46:74:a9:bf:
13:c5:82:eb:af:2d:9a:33:a8:41:7d:b7:a3:03:48:ac:04:ba:
40:ef:3d:a4:3b:06:e0:75:6b:2d:ca:ce:72:69:96:77:cc:91:
1e:bc:bd:b8:92:c3:dd:27:8b:12:78:02:8c:dc:3a:81:b3:e4:
7a:d9:8e:c0:fb:4b:65:6a:e1:e7:a3:1a:ee:f8:e5:3f:9b:3b:
90:27:bc:bf:ac:ed:97:fb:af:62:ba:58:e0:9d:e1:8a:ad:47:
b8:70:a4:a9:00:98:2d:09:a2:03:50:b4:a3:0e:bc:1b:0e:d9:
4a:50:2c:1b:1f:3f:88:56:7c:50:70:5e:3d:29:ce:cf:a7:32:
f7:2d:3b:36:9e:6a:df:82:18:86:2a:d6:b2:58:50:5b:54:6e:
b8:b0:aa:aa:6c:db:54:08:5b:5f:4e:21:f0:20:7a:c6:3a:9d:
d5:22:6b:a4:0d:cf:07:f2:d3:75:a3:d8:dd:4f:b7:0c:8c:82:
e5:7d:ac:bf:02:40:1e:10:fe:35:27:2e:08:a6:0a:f3:98:9e:
98:b7:d8:ab:d4:6b:d3:d0:dd:8f:64:bd:72:a9:8d:5b:63:b3:
e2:29:6a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:43:50 2026 by rpki-client