Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
File: vmWzDa10rHadS1syMS2o-oGrM9E.mft (raw, json)
Hash identifier: ZmnnKcY4/h6lXrMVBF694YtNvQl+VoJkGnxnAkNDoo0=
Subject key identifier: 28:82:02:EA:55:8D:39:1E:29:01:75:09:83:A7:48:75:CD:E3:53:15
Authority key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
Certificate issuer: /CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Certificate serial: 019CAA58997D2CC0A6D3479091A370161B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
Manifest number: 0D9E
Signing time: Sun 01 Mar 2026 17:00:59 +0000
Manifest this update: Sun 01 Mar 2026 17:00:59 +0000
Manifest next update: Mon 02 Mar 2026 17:00:59 +0000
Files and hashes: 1: t1JXKPULVgSgvQ0I80otAQ7Epzg.roa (hash: sx0p3fASYGJ0JSBWFt0pc+jsNHZgbTF+OTJo6DFYN9A=)
2: vmWzDa10rHadS1syMS2o-oGrM9E.crl (hash: CC71r4MboUdcmlaVsEnm+P/3WP4wNYk0/RledIWIOYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:99:7d:2c:c0:a6:d3:47:90:91:a3:70:16:1b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Validity
Not Before: Mar 1 17:00:59 2026 GMT
Not After : Mar 2 17:00:59 2026 GMT
Subject: CN=288202ea558d391e2901750983a74875cde35315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:93:26:5b:a4:4a:11:57:4f:2b:8b:2b:4e:
01:79:80:64:2b:f9:55:25:41:22:6d:9c:d7:00:76:
66:cf:f7:c6:79:8b:98:61:7b:c8:0c:7f:57:da:d6:
7b:2c:6d:88:ac:bf:0b:40:9b:cb:34:8f:c5:d9:4b:
90:2d:0a:86:65:1f:46:41:91:9e:d5:1d:25:15:4c:
3b:1c:ed:03:0b:21:65:3c:e7:9c:95:46:cc:4f:49:
89:a7:35:e8:4c:a2:c6:6b:6f:24:e0:0f:bd:b4:65:
94:df:f3:8b:40:11:be:13:33:cb:38:72:cf:c3:53:
93:1e:00:19:22:35:87:f8:6f:f0:14:3e:70:8f:97:
16:32:6c:c5:58:84:8f:8a:1f:c4:db:3f:c2:42:96:
db:85:ea:70:3e:4a:50:9a:ae:b3:58:90:4a:79:47:
8d:f0:0d:cc:06:4b:8d:c6:e2:9c:22:2c:66:57:19:
03:7e:83:ec:2a:58:ed:0e:ee:5c:ad:90:cc:76:c6:
95:87:8e:c6:6d:d1:00:72:c8:33:dc:fc:c7:65:1e:
51:a3:56:a6:63:c3:6f:14:51:51:94:ca:b1:c3:59:
b5:95:f6:a6:23:6a:7f:4c:73:1d:fb:62:92:a8:e6:
88:2e:28:47:8f:eb:93:dd:da:8f:e9:a7:1e:b7:52:
dc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:82:02:EA:55:8D:39:1E:29:01:75:09:83:A7:48:75:CD:E3:53:15
X509v3 Authority Key Identifier:
keyid:BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:07:d0:ed:d4:2a:50:0e:06:32:2b:ae:3e:6b:20:92:43:60:
cb:31:5a:8e:5e:3c:a0:21:a8:f5:ec:86:2e:28:3a:06:9d:67:
e3:2e:5e:23:ad:d1:6d:b1:89:1b:5d:fe:e1:ac:4d:4a:14:95:
5e:e1:b9:f6:c9:86:6f:9c:e5:1b:5d:7b:d6:b4:43:69:f5:af:
f7:13:0c:57:50:de:bf:c5:76:6a:e4:d7:af:73:fc:b9:9d:de:
42:b2:89:35:61:a0:df:57:4b:7b:39:8b:ec:aa:83:80:2d:1a:
d0:8e:a5:a0:bd:86:e7:bc:0d:d1:98:ec:3d:0e:54:8c:24:7a:
46:20:20:eb:55:b8:6d:5c:79:69:6b:2a:f9:a6:a3:81:37:8c:
4d:22:74:a4:44:3b:14:d6:83:4f:11:12:f0:01:5e:41:e2:f6:
64:9f:d5:33:80:cf:de:f8:8d:19:e7:fa:4f:fd:e4:c9:e7:30:
31:a8:a9:bc:a5:8d:2e:51:29:ed:e4:8d:62:98:97:8d:18:7b:
71:78:9b:72:ac:3f:f7:df:61:6d:ef:93:3c:70:e8:33:90:78:
f8:d7:e0:2a:2e:fa:d9:e9:5a:4d:a3:ca:ef:e1:e9:69:c1:1e:
a4:28:a6:48:ce:50:42:5c:07:8a:d4:12:e9:c9:b4:f7:31:fa:
a0:f9:1f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:08 2026 by rpki-client