Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
File: VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft (raw, json)
Hash identifier: XnSXN8qYJmp1m5pIBtJjO8g1gK7euAduCdDfiS8QH0o=
Subject key identifier: 5B:7F:CC:F6:E5:C7:AC:95:B6:6E:A1:23:92:4D:DA:99:2B:43:3B:DA
Authority key identifier: 55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
Certificate issuer: /CN=559a769412d2d963b491ebe31d44111dcafccc94
Certificate serial: 019CADC82D6A9CC4FAB38DA8ECE8F86FB7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
Manifest number: 072B
Signing time: Mon 02 Mar 2026 09:01:43 +0000
Manifest this update: Mon 02 Mar 2026 09:01:43 +0000
Manifest next update: Tue 03 Mar 2026 09:01:43 +0000
Files and hashes: 1: VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl (hash: VRvwx6fWkVDHMDOaAIFgHRZ0MUVlV9unmsvRMRY0gVc=)
2: tq6kMgziYFoXho7XVp0bBOLTUsY.roa (hash: O9FhMzBttczXakVkdlx4+Fgz/P4MA/RrEi2IBCBaSDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:2d:6a:9c:c4:fa:b3:8d:a8:ec:e8:f8:6f:b7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559a769412d2d963b491ebe31d44111dcafccc94
Validity
Not Before: Mar 2 09:01:43 2026 GMT
Not After : Mar 3 09:01:43 2026 GMT
Subject: CN=5b7fccf6e5c7ac95b66ea123924dda992b433bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:1f:8d:f9:d5:e2:ea:f8:0e:eb:4a:32:cb:
63:cc:8d:6d:1e:23:9d:3a:ae:dd:73:24:a8:58:dc:
d9:16:00:2e:b0:e2:93:e7:92:10:e5:70:61:23:ee:
fb:9f:7e:91:44:9e:8f:06:47:7e:c6:b8:d9:06:fa:
8b:52:c6:7c:45:80:46:dc:04:0c:80:96:a4:d2:99:
dd:0d:f7:1b:e4:6b:ad:ad:94:18:8b:c0:d2:bb:25:
7b:a2:91:b4:df:df:0a:c2:dc:76:72:0c:26:cc:60:
9b:52:46:51:bc:0a:9b:5b:a6:69:68:8e:3c:d8:1b:
60:92:d8:af:bf:ed:d2:de:49:c6:8f:9b:c7:7d:aa:
c7:cf:1a:89:43:fd:21:60:a5:c9:dd:89:a5:2b:b7:
3b:b0:75:9e:31:54:9d:af:da:5f:86:d6:7b:3b:48:
13:03:82:cf:0c:f4:48:94:db:85:75:b7:73:5f:16:
21:17:08:ef:0a:2f:64:f5:b5:1c:98:66:08:a5:9d:
84:c5:9f:45:b3:64:10:54:8b:cf:0e:f2:2e:14:e8:
6c:f2:b2:f5:35:07:84:f9:66:3b:1a:98:ef:63:ec:
ff:0e:4e:c9:46:06:7a:2f:4c:82:88:90:33:e9:ca:
14:5e:2b:21:af:41:45:6a:f4:d6:b6:01:24:e7:6c:
b9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7F:CC:F6:E5:C7:AC:95:B6:6E:A1:23:92:4D:DA:99:2B:43:3B:DA
X509v3 Authority Key Identifier:
keyid:55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c5:20:41:d8:fc:76:0b:e3:8d:53:c1:2f:2a:2f:08:23:30:
dd:bd:b5:ab:04:d4:7a:ba:90:22:53:6d:ae:b0:64:22:dc:63:
0e:b6:d9:4d:cd:07:5a:f4:ff:35:76:93:31:8e:16:64:79:99:
71:80:ee:6c:3a:1c:59:a0:14:b9:11:0b:0d:6e:6c:4b:c2:da:
ee:e1:d9:51:28:f9:36:2a:a9:00:1a:bb:d2:44:22:b6:bf:56:
4b:2d:7a:44:41:6b:9e:b2:b7:32:40:e5:10:a6:ce:7f:92:d1:
40:c5:5a:97:95:53:fd:e5:74:5e:38:97:6f:c8:50:41:fe:e5:
a1:b8:98:2f:df:6d:9a:84:65:95:bb:db:ad:c2:1f:93:8f:2e:
e3:d6:8e:db:70:39:2b:a8:23:7e:e3:20:ee:91:c5:5c:71:96:
f2:d7:89:b0:9e:1f:91:21:99:4c:1c:03:a4:5b:3c:35:09:c7:
80:73:b3:7e:8b:d5:ce:a6:08:92:16:76:d7:f3:e0:f8:20:84:
07:a3:e4:41:93:3e:94:8a:cc:9d:78:18:31:89:1a:9a:85:6d:
14:9f:eb:a4:94:aa:9d:0b:ce:e9:77:1e:54:b0:46:e9:19:fc:
8e:27:25:82:e1:e7:74:a7:7f:18:6b:1d:99:14:6e:47:15:b5:
13:8d:8f:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytyC1qnMT6s42o7Oj4b7fRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OWE3Njk0MTJkMmQ5NjNiNDkxZWJlMzFkNDQxMTFkY2Fm
Y2NjOTQwHhcNMjYwMzAyMDkwMTQzWhcNMjYwMzAzMDkwMTQzWjAzMTEwLwYDVQQD
Eyg1YjdmY2NmNmU1YzdhYzk1YjY2ZWExMjM5MjRkZGE5OTJiNDMzYmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFIfjfnV4ur4DutKMstjzI1tHiOd
Oq7dcySoWNzZFgAusOKT55IQ5XBhI+77n36RRJ6PBkd+xrjZBvqLUsZ8RYBG3AQM
gJak0pndDfcb5GutrZQYi8DSuyV7opG0398Kwtx2cgwmzGCbUkZRvAqbW6ZpaI48
2Btgktivv+3S3knGj5vHfarHzxqJQ/0hYKXJ3YmlK7c7sHWeMVSdr9pfhtZ7O0gT
A4LPDPRIlNuFdbdzXxYhFwjvCi9k9bUcmGYIpZ2ExZ9Fs2QQVIvPDvIuFOhs8rL1
NQeE+WY7GpjvY+z/Dk7JRgZ6L0yCiJAz6coUXishr0FFavTWtgEk52y5nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFt/zPblx6yVtm6hI5JN2pkrQzvaMB8GA1UdIwQY
MBaAFFWadpQS0tljtJHr4x1EER3K/MyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlpwMmxCTFMyV08wa2V2akhVUVJIY3I4ekpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNDVkM2YtNTdhZC00Y2ExLWI4ZGYt
N2UyNTNlNjM5OGU1LzEvVlpwMmxCTFMyV08wa2V2akhVUVJIY3I4ekpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9kNDVkM2YtNTdhZC00Y2ExLWI4ZGYtN2UyNTNlNjM5OGU1
LzEvVlpwMmxCTFMyV08wa2V2akhVUVJIY3I4ekpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMUgQdj8
dgvjjVPBLyovCCMw3b21qwTUerqQIlNtrrBkItxjDrbZTc0HWvT/NXaTMY4WZHmZ
cYDubDocWaAUuRELDW5sS8La7uHZUSj5NiqpABq70kQitr9WSy16REFrnrK3MkDl
EKbOf5LRQMVal5VT/eV0XjiXb8hQQf7lobiYL99tmoRllbvbrcIfk48u49aO23A5
K6gjfuMg7pHFXHGW8teJsJ4fkSGZTBwDpFs8NQnHgHOzfovVzqYIkhZ21/Pg+CCE
B6PkQZM+lIrMnXgYMYkamoVtFJ/rpJSqnQvO6XceVLBG6Rn8jiclguHndKd/GGsd
mRRuRxW1E42PHA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:55 2026 by rpki-client