Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json)
Hash identifier: l0pHlJlO2vdyxQ5rVSYGf6Au2p9KdYVGQmGRogKJfFI=
Subject key identifier: A7:E2:2E:76:4A:5A:98:DA:1F:BC:1F:13:6F:BC:69:50:2C:00:7C:B7
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial: 019CAE6BE3B8DBCA1FC7A509EC229B3A6B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
Manifest number: 0956
Signing time: Mon 02 Mar 2026 12:00:32 +0000
Manifest this update: Mon 02 Mar 2026 12:00:32 +0000
Manifest next update: Tue 03 Mar 2026 12:00:32 +0000
Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: RE8CpCdrhDtLCTSZxDbycifKWTpqzzYykLBIV4DC/MQ=)
2: gng50Ziqb6xrb3gKYd3mPMqKi20.roa (hash: Qgx/fSQr4uTOuIoJO8P5gUwe6l71dGbPdS6w5iyet3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:e3:b8:db:ca:1f:c7:a5:09:ec:22:9b:3a:6b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Validity
Not Before: Mar 2 12:00:32 2026 GMT
Not After : Mar 3 12:00:32 2026 GMT
Subject: CN=a7e22e764a5a98da1fbc1f136fbc69502c007cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:3e:7e:6b:fb:68:21:e3:fc:30:01:42:7c:
6f:5c:d5:71:aa:2e:8e:b3:a3:32:0e:85:96:02:aa:
bd:19:ea:fd:bc:15:80:cb:c0:67:11:a1:8b:db:63:
d9:c5:33:20:9d:ec:19:de:13:2a:ca:13:31:fc:b8:
4d:af:07:ff:6b:cb:00:74:7b:8c:f6:2e:3c:9b:a4:
01:56:39:0a:0a:9b:8a:2f:89:77:cb:a8:d1:75:10:
ca:b0:2e:1f:e9:c0:f7:57:81:f3:30:3b:6b:c9:0d:
92:b8:63:2f:05:4a:c2:d6:4a:4d:a4:62:67:43:d6:
ca:8b:d0:fb:24:7c:6a:f3:30:ae:79:9c:1b:6c:26:
f3:c2:11:2a:20:e3:17:59:5e:ce:1d:31:8b:09:bd:
70:fc:8d:42:80:d7:21:f2:35:9c:76:b9:1a:b8:60:
a5:56:94:0f:e4:c2:ba:d7:5a:8f:8b:fa:ac:d1:e1:
1c:01:17:39:8c:6a:7c:c9:4a:1e:3f:b7:b2:74:e0:
3c:37:33:22:86:aa:0b:56:81:ee:6a:bf:3f:c0:75:
8e:bc:74:49:9d:8a:06:7a:e5:dd:0b:2d:dc:0d:da:
fe:59:54:c2:56:e7:72:7c:ba:7b:5e:f0:f4:1d:35:
f1:c0:ae:02:e2:c5:13:3b:9a:e0:df:e6:4a:e3:5b:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E2:2E:76:4A:5A:98:DA:1F:BC:1F:13:6F:BC:69:50:2C:00:7C:B7
X509v3 Authority Key Identifier:
keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:81:7f:cb:d0:a3:55:e7:76:75:95:41:54:18:72:aa:e0:0d:
2c:b5:86:cb:ff:95:84:8c:fa:7e:da:a5:54:58:26:fc:33:be:
6e:40:27:d8:41:a1:f7:20:ec:47:1e:5e:74:10:1f:1e:f6:58:
d6:d5:d2:f5:f7:04:1d:26:fd:e0:d7:a2:70:90:82:6f:d1:c4:
03:44:3c:c2:5d:4a:fb:61:2d:a3:d4:9a:d1:49:37:d9:14:63:
73:59:a5:24:18:04:b7:6d:bb:85:52:75:0d:05:24:38:c9:58:
48:a2:f7:f0:bd:96:67:3c:cb:fa:f5:ac:2d:12:d9:d1:ea:68:
95:ed:c5:2f:75:2f:a6:5e:63:5a:bc:70:ff:af:93:a2:1b:25:
29:e3:e3:d9:64:df:df:c0:ba:b8:f7:74:7e:4e:10:9d:b6:86:
2a:ba:46:2a:d9:6a:7e:2f:b5:a4:ed:0a:64:de:3e:d8:49:df:
69:0f:73:ad:70:55:00:5c:a9:75:cd:17:7e:83:7d:eb:d2:2b:
97:1e:87:45:d9:2d:e0:1f:d1:13:cc:4c:5f:09:0a:21:f6:fd:
02:c9:dd:2e:0a:d3:b5:7b:19:12:d2:67:42:13:65:e3:84:58:
68:84:8c:ed:99:0d:1e:e9:3f:67:c8:d8:62:28:1f:3d:ed:0e:
68:82:06:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyua+O428ofx6UJ7CKbOmsWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MzliYmQzZDYwNTY1ZmI1OTU4MDJlYzdjNjk3ZWEyMWFi
ZDk3ZTQwHhcNMjYwMzAyMTIwMDMyWhcNMjYwMzAzMTIwMDMyWjAzMTEwLwYDVQQD
EyhhN2UyMmU3NjRhNWE5OGRhMWZiYzFmMTM2ZmJjNjk1MDJjMDA3Y2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHg+fmv7aCHj/DABQnxvXNVxqi6O
s6MyDoWWAqq9Ger9vBWAy8BnEaGL22PZxTMgnewZ3hMqyhMx/LhNrwf/a8sAdHuM
9i48m6QBVjkKCpuKL4l3y6jRdRDKsC4f6cD3V4HzMDtryQ2SuGMvBUrC1kpNpGJn
Q9bKi9D7JHxq8zCueZwbbCbzwhEqIOMXWV7OHTGLCb1w/I1CgNch8jWcdrkauGCl
VpQP5MK611qPi/qs0eEcARc5jGp8yUoeP7eydOA8NzMihqoLVoHuar8/wHWOvHRJ
nYoGeuXdCy3cDdr+WVTCVudyfLp7XvD0HTXxwK4C4sUTO5rg3+ZK41ugFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfiLnZKWpjaH7wfE2+8aVAsAHy3MB8GA1UdIwQY
MBaAFFc5u9PWBWX7WVgC7HxpfqIavZfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTct
NWQ2Mjk1OWQxMDViLzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTctNWQ2Mjk1OWQxMDVi
LzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs4F/y9Cj
Ved2dZVBVBhyquANLLWGy/+VhIz6ftqlVFgm/DO+bkAn2EGh9yDsRx5edBAfHvZY
1tXS9fcEHSb94NeicJCCb9HEA0Q8wl1K+2Eto9Sa0Uk32RRjc1mlJBgEt227hVJ1
DQUkOMlYSKL38L2WZzzL+vWsLRLZ0epole3FL3Uvpl5jWrxw/6+TohslKePj2WTf
38C6uPd0fk4QnbaGKrpGKtlqfi+1pO0KZN4+2EnfaQ9zrXBVAFypdc0XfoN969Ir
lx6HRdkt4B/RE8xMXwkKIfb9AsndLgrTtXsZEtJnQhNl44RYaISM7ZkNHuk/Z8jY
YigfPe0OaIIG5Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:48:13 2026 by rpki-client