Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json)
Hash identifier: +vCuiYkkZ4BoKkC3nVd9J+IC3eQvYO1Ixx1oxvRVM3o=
Subject key identifier: B8:C7:91:FB:A8:B5:46:E0:C9:BF:E1:DA:96:E5:03:56:4A:EF:ED:F2
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial: 019CA97D03EAF4895C67FD23B614DD6E3AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
Manifest number: 0CA8
Signing time: Sun 01 Mar 2026 13:01:08 +0000
Manifest this update: Sun 01 Mar 2026 13:01:08 +0000
Manifest next update: Mon 02 Mar 2026 13:01:08 +0000
Files and hashes: 1: QjH4ysMjhx-FRFJ5XuVwEV5hkKY.roa (hash: kDgabNMh+h4CdxorS3mXQ7X6CnKJc4jDSgDlwGVSsRw=)
2: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: GzlSzvygU5/mXZdEe1fqqrBAmDJ9rGDJ4iPFymVaZ7o=)
3: neH0ynm-9_WfGLcRwlNHULD4ons.asa (hash: hATUAyHrF7u0nM6hFtbEJpofhSi3SzzTsiFp4CpEf8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:03:ea:f4:89:5c:67:fd:23:b6:14:dd:6e:3a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Validity
Not Before: Mar 1 13:01:08 2026 GMT
Not After : Mar 2 13:01:08 2026 GMT
Subject: CN=b8c791fba8b546e0c9bfe1da96e503564aefedf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:28:1e:8e:e2:07:00:d4:d6:d3:21:41:d4:
4c:eb:81:64:21:ac:c4:04:15:e0:de:ef:ed:d1:dd:
7e:b3:6c:02:14:7f:b2:f7:78:fc:80:7e:a3:4b:d3:
eb:a2:51:43:4f:d4:de:ea:50:c2:39:64:7c:61:0f:
48:0a:c5:45:2c:d7:8f:cb:6d:34:20:07:aa:17:73:
07:67:57:9c:e3:cf:6e:50:b5:1a:10:e3:8c:5d:69:
f3:fd:e0:0b:a5:d2:48:37:a2:20:1d:66:5e:4b:c1:
43:87:4f:bc:eb:ea:97:c6:9c:0e:61:72:a2:2b:30:
68:19:e4:03:db:c5:66:d1:32:82:ff:80:72:c8:20:
5e:27:4f:02:19:a3:dc:91:2e:f1:aa:d4:4c:42:06:
d0:8f:60:35:d2:bd:fc:12:cd:ed:a9:ab:6e:c7:75:
86:f4:c9:92:15:09:46:c7:7c:26:01:4c:c8:d1:2a:
e8:14:2a:f6:61:e2:95:4e:9f:b7:03:af:3f:fb:1e:
c8:77:bc:25:91:04:7d:9f:ad:c0:b0:27:8d:20:3a:
0f:b5:c4:56:46:bf:e8:e0:33:60:07:a4:26:da:98:
27:90:d7:35:9a:66:26:83:43:56:38:a0:8f:98:be:
40:20:63:55:a8:2f:cb:18:cf:f0:6e:57:79:0d:ed:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C7:91:FB:A8:B5:46:E0:C9:BF:E1:DA:96:E5:03:56:4A:EF:ED:F2
X509v3 Authority Key Identifier:
keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a2:3f:b0:84:71:07:04:b8:8e:1a:b8:6c:83:a5:ec:b9:eb:
61:f6:60:8a:b3:34:54:ce:4f:c6:ba:68:dc:c6:2f:c6:41:52:
6a:4b:c8:d8:22:db:51:57:69:03:3c:9a:76:90:aa:3e:a4:7b:
3c:ab:88:cc:d5:15:5e:2b:80:b0:74:5a:13:44:d7:1b:13:d2:
bb:3d:fc:01:b8:22:81:4d:27:0a:0d:09:bd:58:91:e6:e1:da:
d0:7d:9f:99:c0:49:f8:cf:b6:75:de:5e:f6:72:32:85:95:05:
ca:8f:dc:49:2f:1f:82:ae:10:c5:31:26:21:dd:d0:b6:fc:b1:
48:fc:92:c9:85:60:e5:ac:54:6d:a5:c2:1d:7a:8e:36:be:5f:
ca:72:29:c9:51:c4:e7:b7:ed:13:3f:81:fe:73:b0:53:d6:60:
b3:de:d1:50:f5:b8:4f:8b:95:1f:f9:08:94:d9:02:fb:dc:83:
3f:c2:ff:88:a4:52:f7:72:83:90:14:36:6c:ec:66:e2:df:92:
5f:4d:ae:da:6d:2c:0b:ee:b5:b9:4a:9c:bc:4f:6a:54:64:78:
10:00:94:2b:c9:3b:66:7b:80:88:bc:a0:0c:84:51:99:6f:ae:
04:9a:01:7d:20:0c:49:b8:a2:a9:42:00:7e:96:b3:f0:dc:75:
65:99:f1:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfQPq9IlcZ/0jthTdbjr8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MzBjNTBjOGZkNDRhZDE5NmJmMTA1N2VlMmE2ZmE0MDQx
YzdlNGUwHhcNMjYwMzAxMTMwMTA4WhcNMjYwMzAyMTMwMTA4WjAzMTEwLwYDVQQD
EyhiOGM3OTFmYmE4YjU0NmUwYzliZmUxZGE5NmU1MDM1NjRhZWZlZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHgoHo7iBwDU1tMhQdRM64FkIazE
BBXg3u/t0d1+s2wCFH+y93j8gH6jS9ProlFDT9Te6lDCOWR8YQ9ICsVFLNePy200
IAeqF3MHZ1ec489uULUaEOOMXWnz/eALpdJIN6IgHWZeS8FDh0+86+qXxpwOYXKi
KzBoGeQD28Vm0TKC/4ByyCBeJ08CGaPckS7xqtRMQgbQj2A10r38Es3tqatux3WG
9MmSFQlGx3wmAUzI0SroFCr2YeKVTp+3A68/+x7Id7wlkQR9n63AsCeNIDoPtcRW
Rr/o4DNgB6Qm2pgnkNc1mmYmg0NWOKCPmL5AIGNVqC/LGM/wbld5De2a2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjHkfuotUbgyb/h2pblA1ZK7+3yMB8GA1UdIwQY
MBaAFFcwxQyP1ErRlr8QV+4qb6QEHH5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQt
Zjc1YzExNjNmYjFlLzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQtZjc1YzExNjNmYjFl
LzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaI/sIRx
BwS4jhq4bIOl7LnrYfZgirM0VM5Pxrpo3MYvxkFSakvI2CLbUVdpAzyadpCqPqR7
PKuIzNUVXiuAsHRaE0TXGxPSuz38AbgigU0nCg0JvViR5uHa0H2fmcBJ+M+2dd5e
9nIyhZUFyo/cSS8fgq4QxTEmId3QtvyxSPySyYVg5axUbaXCHXqONr5fynIpyVHE
57ftEz+B/nOwU9Zgs97RUPW4T4uVH/kIlNkC+9yDP8L/iKRS93KDkBQ2bOxm4t+S
X02u2m0sC+61uUqcvE9qVGR4EACUK8k7ZnuAiLygDIRRmW+uBJoBfSAMSbiiqUIA
fpaz8Nx1ZZnxBQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:20 2026 by rpki-client