Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
File: VzzskGOoh0GEGQiwxSl_zbtDlTA.mft (raw, json)
Hash identifier: F4G6N5hRgkYC42azSlYdr0+ho7QWPy7E3b5Mig3yzGI=
Subject key identifier: 58:E0:5D:23:79:46:59:B1:DF:87:D2:00:06:AC:3D:57:58:B9:12:60
Authority key identifier: 57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
Certificate issuer: /CN=573cec9063a88741841908b0c5297fcdbb439530
Certificate serial: 019CAF7E7A2C101F45D1D6879C80E2C49E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
Manifest number: 0164
Signing time: Mon 02 Mar 2026 17:00:27 +0000
Manifest this update: Mon 02 Mar 2026 17:00:27 +0000
Manifest next update: Tue 03 Mar 2026 17:00:27 +0000
Files and hashes: 1: VzzskGOoh0GEGQiwxSl_zbtDlTA.crl (hash: d4qyQA9lUhOx79mNvBszfVFuzdfa4IklR4+prajAkfk=)
2: sny-DSij_0G02Lh_gSi3PXS_fzc.roa (hash: jOC+Zb741QRD+Vh6pgDFrc2lf9svv4hc8T4p5jQmTOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:7a:2c:10:1f:45:d1:d6:87:9c:80:e2:c4:9e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573cec9063a88741841908b0c5297fcdbb439530
Validity
Not Before: Mar 2 17:00:27 2026 GMT
Not After : Mar 3 17:00:27 2026 GMT
Subject: CN=58e05d23794659b1df87d20006ac3d5758b91260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:45:93:63:7c:b9:ba:95:8a:d4:68:f4:35:
2e:44:eb:ac:e6:3d:27:d6:8a:94:c7:83:ed:6e:af:
99:e6:ff:f5:2f:bc:68:ed:3a:aa:08:b8:b1:a8:70:
0f:66:87:e7:c4:81:f7:19:8d:2b:02:45:27:eb:4b:
91:2d:da:46:27:ca:d5:e7:f6:25:1d:7a:e8:04:ed:
11:c7:be:03:25:fa:d8:56:ce:87:3a:05:d7:4a:a9:
11:2f:39:c7:fe:0a:fe:36:0b:c9:45:bc:16:dd:7f:
0e:10:84:5d:dc:07:5e:9f:2a:74:24:98:cd:6d:8f:
6e:a3:6c:30:13:4d:d2:a7:17:6e:65:db:f6:26:d0:
0d:b5:e9:ad:a8:a1:e0:12:49:20:b6:26:ba:d9:4b:
28:e2:48:83:90:21:e9:50:0f:8f:f9:e7:24:7e:e8:
86:13:9e:c2:73:19:60:b6:f4:4b:4f:a2:8d:8d:08:
01:ed:27:15:36:84:c4:82:5f:43:ad:82:f6:ab:0d:
2a:b8:75:84:2a:0d:b3:61:85:5f:3a:2c:ec:24:2e:
31:d2:94:b6:a7:00:09:f3:c3:1c:43:1b:50:26:de:
fa:b5:69:c5:48:eb:82:46:1b:a1:65:21:d7:34:33:
f7:fc:42:8e:fe:77:64:b9:b0:a9:82:e1:1f:29:6d:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E0:5D:23:79:46:59:B1:DF:87:D2:00:06:AC:3D:57:58:B9:12:60
X509v3 Authority Key Identifier:
keyid:57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e2:75:a3:6d:be:3d:65:c0:6d:5f:c1:4b:d6:cc:59:0d:07:
b1:b6:33:0c:04:31:f8:d0:02:65:4e:04:f9:62:86:58:3f:b7:
25:07:78:78:8f:91:1c:d3:5f:e9:2c:df:ca:bc:44:75:e6:e3:
5f:1e:d9:cb:e1:69:ba:c6:2f:4f:00:98:73:a7:f4:42:3b:a1:
df:be:80:ec:bc:f8:a6:ff:6d:51:2d:78:38:c5:b9:cf:33:59:
d9:98:80:ec:da:73:45:03:d7:48:9a:34:37:05:00:ff:d1:8d:
e9:6b:05:64:5c:56:e5:3a:b2:72:dd:a2:a9:0e:f9:fc:14:5b:
3e:a0:5c:35:22:48:ee:22:05:b7:89:a9:28:3f:93:a8:77:3c:
48:65:57:42:12:5b:f8:56:73:1e:1a:cc:f5:bf:9d:b9:e9:8a:
c2:f8:89:82:9a:bd:f4:d9:df:7f:60:84:7f:51:b7:43:80:44:
60:79:b4:c6:24:14:21:be:ba:c0:9e:31:d3:55:7a:2a:ec:2d:
48:a2:ca:5f:f8:50:95:6b:ab:99:c5:5e:96:c8:32:6f:05:19:
6a:67:57:4a:20:5c:90:55:14:56:17:20:5d:8a:3c:18:81:e8:
1c:ee:61:c3:4e:ca:57:05:28:44:0c:4a:c6:cd:e5:31:2b:3e:
6e:2c:79:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvfnosEB9F0daHnIDixJ5BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3M2NlYzkwNjNhODg3NDE4NDE5MDhiMGM1Mjk3ZmNkYmI0
Mzk1MzAwHhcNMjYwMzAyMTcwMDI3WhcNMjYwMzAzMTcwMDI3WjAzMTEwLwYDVQQD
Eyg1OGUwNWQyMzc5NDY1OWIxZGY4N2QyMDAwNmFjM2Q1NzU4YjkxMjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurNFk2N8ubqVitRo9DUuROus5j0n
1oqUx4Ptbq+Z5v/1L7xo7TqqCLixqHAPZofnxIH3GY0rAkUn60uRLdpGJ8rV5/Yl
HXroBO0Rx74DJfrYVs6HOgXXSqkRLznH/gr+NgvJRbwW3X8OEIRd3Adenyp0JJjN
bY9uo2wwE03SpxduZdv2JtANtemtqKHgEkkgtia62Uso4kiDkCHpUA+P+eckfuiG
E57CcxlgtvRLT6KNjQgB7ScVNoTEgl9DrYL2qw0quHWEKg2zYYVfOizsJC4x0pS2
pwAJ88McQxtQJt76tWnFSOuCRhuhZSHXNDP3/EKO/ndkubCpguEfKW2rAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjgXSN5Rlmx34fSAAasPVdYuRJgMB8GA1UdIwQY
MBaAFFc87JBjqIdBhBkIsMUpf827Q5UwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wN2RkNTgtMmQyZS00MjZlLTllMWEt
NTQ1NGU1YTE2ZjQyLzEvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wN2RkNTgtMmQyZS00MjZlLTllMWEtNTQ1NGU1YTE2ZjQy
LzEvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuJ1o22+
PWXAbV/BS9bMWQ0HsbYzDAQx+NACZU4E+WKGWD+3JQd4eI+RHNNf6SzfyrxEdebj
Xx7Zy+FpusYvTwCYc6f0Qjuh376A7Lz4pv9tUS14OMW5zzNZ2ZiA7NpzRQPXSJo0
NwUA/9GN6WsFZFxW5Tqyct2iqQ75/BRbPqBcNSJI7iIFt4mpKD+TqHc8SGVXQhJb
+FZzHhrM9b+duemKwviJgpq99Nnff2CEf1G3Q4BEYHm0xiQUIb66wJ4x01V6Kuwt
SKLKX/hQlWurmcVelsgybwUZamdXSiBckFUUVhcgXYo8GIHoHO5hw07KVwUoRAxK
xs3lMSs+bix5lQ==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:28 2026 by rpki-client