Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
File: VRNzP1CmpEqRS5-Pjr941_pOqaA.mft (raw, json)
Hash identifier: zG+7CnnC2BkSxURibI807QRhmvSIOsRvxaCxTSl8W50=
Subject key identifier: 68:CA:D7:B0:95:2B:D4:2D:C3:CB:75:A5:82:19:8B:A1:B3:3B:E6:EB
Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
Certificate issuer: /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Certificate serial: 019CAAFD7670A9B97BD1D348A7321F677443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
Manifest number: 1571
Signing time: Sun 01 Mar 2026 20:01:03 +0000
Manifest this update: Sun 01 Mar 2026 20:01:03 +0000
Manifest next update: Mon 02 Mar 2026 20:01:03 +0000
Files and hashes: 1: EbkxoK1QXwqI38zvOWRCOw9jxso.roa (hash: pmUSfoLfwZaf8O7+LH3+yh3+ipYKHNuavjj2SJ+pnpk=)
2: VRNzP1CmpEqRS5-Pjr941_pOqaA.crl (hash: w+FjvS5516rEUkDK2QNJLfG2pxylxtApe7MtaRLo9og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:76:70:a9:b9:7b:d1:d3:48:a7:32:1f:67:74:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Validity
Not Before: Mar 1 20:01:03 2026 GMT
Not After : Mar 2 20:01:03 2026 GMT
Subject: CN=68cad7b0952bd42dc3cb75a582198ba1b33be6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:04:91:6b:fc:2c:03:41:ad:75:e3:10:f0:1b:
59:b0:79:85:f4:aa:78:3b:ac:d2:45:01:12:e6:df:
54:4f:ce:a9:c8:67:f4:81:22:77:62:18:a1:6c:a7:
c3:1f:f4:62:85:9e:5d:a9:44:ab:07:a1:be:a0:8f:
18:87:a1:37:ee:39:35:9f:31:fd:c4:84:48:75:35:
b3:31:24:5b:02:24:87:01:20:cc:94:62:53:ef:df:
c6:d4:cd:b6:8e:b2:2a:a4:c3:59:bc:f8:13:11:b8:
a2:2d:fe:6a:a9:84:8f:80:75:4d:00:57:0b:22:d5:
4e:39:53:3e:2c:df:59:e4:f2:c2:e8:da:31:3c:b1:
08:8c:ca:c5:4b:6c:c8:cc:6f:db:e0:5f:a1:ed:84:
da:dc:90:e9:57:ba:ca:3c:89:96:d2:e7:2a:93:bd:
cd:a2:86:17:d6:76:5e:de:6c:25:a7:e9:5c:4a:6b:
40:53:d5:85:d2:48:b1:c8:09:9b:a9:74:1e:16:fd:
d1:40:5b:11:eb:8b:39:db:d8:0b:06:44:2e:08:80:
24:84:95:f9:f2:7c:8d:25:77:78:a8:0f:53:09:ad:
c5:d0:d5:39:ca:bb:e9:31:84:e7:77:db:11:97:74:
39:78:38:fd:6d:3a:b2:f9:11:67:08:e9:01:ae:eb:
0c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CA:D7:B0:95:2B:D4:2D:C3:CB:75:A5:82:19:8B:A1:B3:3B:E6:EB
X509v3 Authority Key Identifier:
keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:52:f4:2a:b7:18:9e:86:6a:53:87:af:06:40:99:66:1a:59:
a2:1c:47:38:e4:e1:ea:c2:b8:75:d9:c3:e3:0c:77:4a:09:1d:
ac:60:96:ce:ed:7d:a4:98:20:af:94:f4:06:04:d1:21:8e:a2:
d2:73:64:e1:7c:8a:dd:df:35:0d:04:c6:fc:b0:e6:58:1d:a9:
ee:fc:bb:e9:15:63:8f:80:27:dc:50:d2:09:46:c8:69:28:a3:
99:6e:a4:e2:56:63:4b:1a:7b:3a:52:5d:cd:b6:63:a7:b4:54:
8f:95:02:27:21:5c:8e:d5:cb:7a:06:6b:9b:53:2f:82:5b:db:
ff:17:90:35:c0:7a:35:6e:7a:43:02:30:51:08:88:3c:89:be:
53:68:46:b8:d9:41:19:e1:fd:ab:61:92:3c:35:3b:94:78:40:
3b:47:3c:a9:e3:11:91:72:42:b1:e0:6d:6e:25:5d:ce:58:5c:
85:ce:24:64:00:46:73:fd:32:ee:1c:82:e8:d0:87:ee:ad:bf:
87:21:c4:fe:0e:ff:89:2b:61:cc:1f:5e:68:54:7d:7b:81:bf:
e8:f2:6b:88:95:c0:96:e1:e4:ef:e1:bc:bf:88:c6:1d:9e:e3:
b7:fc:98:95:1a:53:d2:e9:80:f7:c1:b2:d6:51:6a:1d:13:ea:
ff:00:b3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:51 2026 by rpki-client