Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
File: VzCjLzFiRs4LFHu4lejN8K7UPtY.mft (raw, json)
Hash identifier: cktyVJjFzVdLiuv/BhclWtcXg1dV94A17JA+HCksIq0=
Subject key identifier: B7:10:91:F8:26:78:12:DA:AC:1C:FF:ED:EC:FE:C6:4F:29:B7:65:E0
Authority key identifier: 57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
Certificate issuer: /CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Certificate serial: 019CAB345F56753D69020C1D3E7C2102E888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
Manifest number: 0AF5
Signing time: Sun 01 Mar 2026 21:01:02 +0000
Manifest this update: Sun 01 Mar 2026 21:01:02 +0000
Manifest next update: Mon 02 Mar 2026 21:01:02 +0000
Files and hashes: 1: OIQ7KotgSfCre3ojigAVW-uj7lY.roa (hash: 2fHntqMDtZ1kaQHeRQmuVhi7S0ZWG3DjRdqxqMJ0p6U=)
2: VzCjLzFiRs4LFHu4lejN8K7UPtY.crl (hash: e4PizdTqh6g53OZyRJgumaEI0Qpk4HY9ix/UDEi3hvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:5f:56:75:3d:69:02:0c:1d:3e:7c:21:02:e8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Validity
Not Before: Mar 1 21:01:02 2026 GMT
Not After : Mar 2 21:01:02 2026 GMT
Subject: CN=b71091f8267812daac1cffedecfec64f29b765e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:28:16:12:30:a6:cc:71:f9:76:32:c2:0d:21:
0a:0d:1c:83:cf:d0:7b:c3:28:e8:5d:5f:1b:e2:fc:
d8:75:99:ef:e8:f3:68:82:1f:32:04:4b:7a:be:d3:
dd:df:12:00:35:49:e5:c3:60:94:35:ef:4c:35:dd:
cd:e3:8d:74:71:50:8a:d5:42:32:6a:0a:c0:8d:2d:
cd:c0:ef:40:aa:f9:96:cc:2b:99:66:48:e8:d0:1c:
8c:08:f5:9d:a5:62:1e:78:0a:c1:74:02:c9:ce:64:
bf:a3:cc:80:83:15:d0:40:01:7d:9a:a9:b2:34:8f:
de:1c:76:bb:c7:f9:92:ef:dd:75:eb:66:84:2c:e3:
9c:8e:88:df:64:c0:1d:d3:ab:0e:e0:6b:87:99:37:
31:ba:b3:4c:2a:32:1e:c2:0d:b5:46:91:dd:02:55:
fa:dc:3d:06:06:dd:ec:4f:7c:79:99:09:c8:b2:14:
e1:53:10:ed:70:62:e6:40:94:77:fa:d7:6f:02:8f:
f8:56:5f:bc:de:ab:24:cd:18:4f:e4:43:95:f6:c9:
41:64:67:32:7c:f3:93:57:bf:83:a2:32:b8:4e:6b:
53:99:41:28:e0:55:27:8a:04:4e:47:82:97:b0:d7:
bd:36:b0:94:f2:a9:93:08:df:b4:69:d3:97:a9:7e:
fc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:10:91:F8:26:78:12:DA:AC:1C:FF:ED:EC:FE:C6:4F:29:B7:65:E0
X509v3 Authority Key Identifier:
keyid:57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6c:2c:c6:9b:62:89:32:15:3a:d2:67:3d:68:7a:01:ff:0e:
4c:75:ec:f1:b0:10:5d:1c:c4:55:39:fd:62:56:aa:45:e3:53:
97:65:ed:f1:69:ef:9d:15:48:ab:cd:0f:85:6b:0b:da:47:3f:
d1:de:15:c3:72:67:fa:62:f8:90:8e:cf:fc:0e:cb:60:4a:b3:
7a:40:f9:59:7e:78:75:1f:5b:b7:8a:17:96:65:01:d3:5b:6b:
59:e1:31:5b:38:af:53:3d:80:81:68:1b:d7:2d:b4:33:a0:63:
50:e2:b6:57:5d:bc:49:4b:e0:34:b9:10:2d:a8:a3:f4:00:17:
c3:3a:81:5c:66:a5:25:4b:7c:fe:9e:ab:8c:1f:17:9a:0d:5e:
3e:59:3e:8f:17:12:3a:45:dd:e0:f3:fd:ab:85:63:d5:a3:21:
71:8f:5e:0c:ed:7f:01:f4:9e:94:08:9f:8f:cc:82:e7:df:17:
de:64:12:13:ef:d8:fc:1e:34:76:c7:81:fe:ac:99:71:50:cd:
36:17:7c:97:59:4c:cf:a9:57:59:9b:15:82:a2:53:80:b3:87:
2f:12:24:24:30:41:32:36:cc:7a:33:6b:33:c8:0d:50:a9:5f:
47:b5:9b:3b:49:56:c9:56:41:5f:81:03:42:85:5e:f8:2c:bb:
85:95:28:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:25 2026 by rpki-client