Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
File: VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft (raw, json)
Hash identifier: hqStZEKoAQpmpb3+Wgv8aFYttqhYVuiQsv/4OBGkSCE=
Subject key identifier: F3:D2:0B:6A:49:6C:21:47:8E:FF:FC:60:E2:FB:E9:43:E5:F0:C8:8A
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 019CA9B3CDDC6465DF3BE53E538647E629F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
Manifest number: 13C8
Signing time: Sun 01 Mar 2026 14:00:58 +0000
Manifest this update: Sun 01 Mar 2026 14:00:58 +0000
Manifest next update: Mon 02 Mar 2026 14:00:58 +0000
Files and hashes: 1: CZLgI1TrOoXIuuR8mtRn5Oxdnrc.roa (hash: aPXgiMnEH0aukIEV+u/T5KK1iHMqS2/X9emnoyzGOAM=)
2: SLZtN31ceYrOky3sUddoMo-Zyd0.asa (hash: Mg1W7yj5mjt/I157Chfa/2ODdFHcKS2JBnmxs2U+y/4=)
3: VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl (hash: D+VTukMWAkA5VhHkHBK66ibC3MYXq7RWO9I3JYe3098=)
4: YhZ9fwff9w4xgatIGpRL14zM3PM.roa (hash: iA9BHQGCf6MQBqEfoa7a5mJjbUujB8oZXq8R3pndWb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:cd:dc:64:65:df:3b:e5:3e:53:86:47:e6:29:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Mar 1 14:00:58 2026 GMT
Not After : Mar 2 14:00:58 2026 GMT
Subject: CN=f3d20b6a496c21478efffc60e2fbe943e5f0c88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:97:8b:e3:c1:fc:fd:ae:ff:70:c0:7b:9e:39:
ce:8e:34:f2:76:9e:ea:ba:75:f4:f4:f1:4e:f4:c4:
72:73:6c:ba:b0:54:95:bf:5a:4a:8a:5b:69:f7:8c:
64:a3:31:24:39:ce:35:68:52:cc:e2:7f:21:2a:f1:
6b:97:a3:0c:63:51:7a:3c:01:3d:46:2b:37:d8:7d:
1c:61:db:c0:3a:de:fc:99:96:d6:96:a6:e5:8c:38:
50:d5:6a:ce:da:a9:b4:d9:87:d1:42:95:a7:ec:d0:
17:bb:e7:25:95:db:81:dd:41:b6:2c:f3:4d:80:28:
0f:22:b9:db:83:eb:c5:97:74:7f:40:28:05:76:bf:
aa:85:b3:d4:b2:14:d4:05:98:e1:f3:03:73:34:c3:
7d:c6:44:72:a1:9a:a8:dc:e2:6f:24:82:38:c6:74:
c8:15:bb:33:60:be:61:1e:86:d6:71:74:f5:d4:b0:
9c:fc:c4:e7:b7:63:ae:07:cb:78:80:a8:2a:32:8b:
cf:0d:8e:5e:2f:36:f3:1c:d5:6a:82:ab:af:ad:5a:
46:e9:53:89:91:0a:82:48:82:f4:1a:2a:32:77:60:
54:de:35:bb:29:5a:b9:11:20:cf:41:e3:13:8a:b2:
6f:74:ee:a4:02:f2:c5:7b:46:98:54:29:92:93:9c:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D2:0B:6A:49:6C:21:47:8E:FF:FC:60:E2:FB:E9:43:E5:F0:C8:8A
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:a0:9e:a4:7e:c2:72:4e:e1:6a:0a:e6:6e:0c:5e:07:3a:9d:
8c:59:d5:ef:7c:e4:7f:08:51:41:0b:dc:34:86:c6:15:2c:83:
a8:be:97:8a:b2:9f:d7:fa:9d:87:4d:08:6b:b7:50:0a:a5:f0:
1f:a9:07:81:03:e4:22:ed:4f:71:16:d3:60:c6:7c:6f:78:9a:
d1:24:8c:b3:83:76:a6:36:49:9f:f4:d4:42:04:1e:16:7d:72:
32:14:63:7d:e5:6a:ae:bb:90:ec:63:00:dd:1b:55:15:7c:b1:
4d:fd:97:74:bb:e4:40:46:57:e4:35:7b:c4:83:26:10:cf:f3:
dc:48:29:d8:4f:83:33:16:df:c3:e2:54:70:46:9a:42:73:a0:
3b:87:ed:da:52:64:66:f3:eb:6f:5d:9b:93:e0:50:05:48:08:
ac:7e:c7:1d:71:6f:5c:19:12:9b:cf:df:f0:32:02:04:cb:a6:
88:eb:10:4b:67:0c:56:1a:f7:69:37:92:66:5b:77:f3:fb:13:
95:08:7d:b4:12:28:38:de:22:11:d8:2c:45:27:4c:9e:4f:c9:
4f:bf:ed:28:b2:61:ca:68:f0:b7:35:02:28:26:ae:a6:95:55:
a6:6c:e9:b4:0b:08:e2:05:35:cb:78:a1:55:98:cb:d3:bd:2c:
5f:d9:f9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:06 2026 by rpki-client