Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
File: vz3ogsJhnWgPLX_mALkBbaKHqNM.mft (raw, json)
Hash identifier: dudEUxntN2YD55tHaJonIe3RV9eLJ00RksCjp99CDik=
Subject key identifier: 41:DC:03:E0:BF:1E:07:1F:F4:4B:09:91:65:A8:06:98:52:5E:38:A6
Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
Certificate issuer: /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Certificate serial: 019D98BD584929BB5A47E476D7EF1A529959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
Manifest number: 1718
Signing time: Fri 17 Apr 2026 00:00:38 +0000
Manifest this update: Fri 17 Apr 2026 00:00:38 +0000
Manifest next update: Sat 18 Apr 2026 00:00:38 +0000
Files and hashes: 1: GG89hAoixp0ZJE8Ef-5VuRyD-Wg.roa (hash: fpAmvEh19YQT+8W5VCcnDo3VDNg2kVBnOH7P5uACyqA=)
2: vz3ogsJhnWgPLX_mALkBbaKHqNM.crl (hash: CHFPgRptWFGR5KSuPI7ieLNGQIoDzkm72OOEO6ZnlNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:58:49:29:bb:5a:47:e4:76:d7:ef:1a:52:99:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Validity
Not Before: Apr 17 00:00:38 2026 GMT
Not After : Apr 18 00:00:38 2026 GMT
Subject: CN=41dc03e0bf1e071ff44b099165a80698525e38a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e1:ec:e0:71:b0:12:b7:7e:c0:7f:3f:60:55:
70:8e:01:97:2a:97:86:03:cd:bf:22:ba:64:fb:4f:
eb:12:38:0d:1c:5a:e9:ce:39:25:ec:4f:98:d8:a6:
0b:74:75:de:09:1a:e8:fb:61:63:0f:8d:8c:5c:b9:
4e:af:92:6b:1b:3c:8a:cb:7a:35:4e:cc:f7:84:6f:
13:65:b4:70:7e:bb:d8:11:40:d2:f8:d0:c1:d8:2e:
b3:92:43:f8:29:ef:99:d4:45:4d:4b:c7:45:b3:67:
cd:f4:be:71:ad:b9:a8:1a:1f:58:96:ae:00:1b:2a:
de:b6:1c:1a:ea:d2:34:22:03:01:3f:8f:35:25:8a:
fc:67:35:91:cf:ca:6f:34:cb:19:77:dd:82:64:a8:
f5:d5:dd:e8:28:af:64:8d:40:5e:57:c3:7e:27:8b:
c4:44:00:e5:22:eb:e2:44:ac:42:80:67:de:11:7a:
e1:69:0d:42:4d:cb:95:d7:68:d6:74:89:2e:24:94:
01:e3:9f:f5:e8:fb:9e:b9:7a:cd:e4:e4:b6:f9:30:
bb:86:65:78:03:cc:e4:8b:59:d3:6c:8a:11:11:e3:
74:0f:64:79:8d:cd:96:6a:8c:f7:07:b9:46:7e:9c:
95:52:18:34:db:47:f2:f2:97:48:9a:32:76:69:53:
8e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DC:03:E0:BF:1E:07:1F:F4:4B:09:91:65:A8:06:98:52:5E:38:A6
X509v3 Authority Key Identifier:
keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:de:0a:53:51:b2:d7:78:b4:11:99:fa:22:61:40:35:0d:2c:
3b:e1:fd:5e:38:4e:af:e0:43:4c:c4:99:8d:bc:c2:04:8c:41:
e7:91:72:d8:56:eb:bd:12:ab:08:64:4e:3e:83:52:35:c5:18:
00:da:0a:66:54:02:0a:9f:0d:b0:57:4f:04:6d:8d:6f:0c:eb:
c5:38:27:25:b7:9c:23:f3:ac:73:cb:ca:48:74:e9:db:7e:86:
9d:a6:82:b5:61:35:25:11:2c:05:55:78:4e:bb:9b:85:52:b8:
59:cd:6d:a6:b1:ed:2a:61:20:0d:79:49:51:fd:c5:a7:67:f0:
0e:d5:f1:1e:bf:d4:f0:85:fe:91:7b:63:61:9b:86:d2:d8:26:
29:b4:bd:50:eb:ec:c7:17:04:16:7b:00:56:2b:17:64:ef:df:
4b:08:fd:24:92:45:d1:c9:e7:87:25:aa:6d:2b:b4:d5:80:48:
8c:9d:51:e6:42:48:12:e6:7d:f2:6a:0d:23:f3:ec:86:21:78:
20:f5:d8:ba:4b:e8:04:65:3f:1c:3c:23:48:2a:3d:62:c6:06:
c0:31:e8:0b:77:e4:ea:eb:98:3a:6a:b0:75:e0:93:e6:62:7f:
5b:d4:5b:64:b1:05:79:01:9f:f6:b3:8f:a1:ff:ac:1d:eb:f6:
fb:ea:78:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:14 2026 by rpki-client