Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json)
Hash identifier: CuQIs39E5srtBgptbgdWAf52CDTYlokkLwfgvZOLOY0=
Subject key identifier: F2:B9:0F:01:5D:E3:CE:11:12:CF:5C:0F:AB:6E:56:91:9F:EF:23:37
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial: 019FAD1AF5351664DCC05A616E98AA8AAA61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
Manifest number: 0AE3
Signing time: Wed 29 Jul 2026 09:00:52 +0000
Manifest this update: Wed 29 Jul 2026 09:00:52 +0000
Manifest next update: Thu 30 Jul 2026 09:00:52 +0000
Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: kaTgX9Pa4T6x1I50QMiKViRFVKy0T7q+8ZjVWij64n0=)
2: gng50Ziqb6xrb3gKYd3mPMqKi20.roa (hash: Qgx/fSQr4uTOuIoJO8P5gUwe6l71dGbPdS6w5iyet3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:f5:35:16:64:dc:c0:5a:61:6e:98:aa:8a:aa:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Validity
Not Before: Jul 29 09:00:52 2026 GMT
Not After : Jul 30 09:00:52 2026 GMT
Subject: CN=f2b90f015de3ce1112cf5c0fab6e56919fef2337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c5:ce:31:18:14:45:2c:db:3e:95:63:2a:c3:
f9:04:f8:ae:1a:19:3c:63:f1:20:e4:b5:65:83:20:
74:50:6b:b9:88:65:14:1f:4f:02:af:e8:90:15:ec:
c7:f4:9f:6e:05:23:3b:3c:33:cd:74:c7:3b:1b:b9:
26:ec:e0:a3:79:0c:74:4a:b7:41:90:5f:0e:9d:63:
5b:74:45:79:ac:79:09:63:cf:a2:89:1e:30:c3:f5:
52:90:e4:72:d7:86:a9:78:10:d6:45:b6:08:c9:f6:
48:27:1a:84:75:3b:a3:2d:d1:d3:86:6b:e5:7a:1d:
c3:f4:84:46:90:1a:24:af:86:3c:90:51:b8:cc:9b:
e3:7e:af:ba:ac:bb:f6:8c:de:e0:da:f7:31:0a:fc:
02:67:1a:93:3a:df:d9:99:f9:97:a8:db:d6:3f:79:
b5:b7:ee:1b:eb:e4:6f:6e:d1:5c:c7:25:ff:11:64:
35:74:2e:54:7f:3a:a8:23:62:dd:23:e8:57:04:37:
cc:2e:4f:8b:40:01:24:6e:a0:f5:83:b1:5a:3a:63:
b3:ed:dd:e3:39:2f:87:19:2e:ac:48:32:bc:43:38:
dd:26:93:3f:77:6c:92:0a:24:fc:04:17:da:87:b6:
ea:4e:7a:5d:38:b3:55:00:32:22:d0:a1:58:fa:61:
e9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B9:0F:01:5D:E3:CE:11:12:CF:5C:0F:AB:6E:56:91:9F:EF:23:37
X509v3 Authority Key Identifier:
keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ac:f9:6c:28:1a:93:64:36:9a:b1:68:aa:c2:5c:8b:f1:0c:
5f:1f:00:ae:79:6a:af:41:9e:d8:56:84:d0:5d:24:01:23:c1:
6d:9d:1d:93:7d:7d:a4:85:55:27:cf:b8:d4:a7:70:67:b5:8b:
a5:c8:72:df:ba:a3:91:c6:39:28:26:4a:55:5e:8e:14:5f:b3:
8a:0c:ec:0a:62:09:85:7e:a1:7e:16:aa:21:d1:6d:c8:3e:f9:
e7:70:65:60:b4:1b:1f:e0:79:e5:a6:13:dd:6b:e9:9b:b0:de:
c3:dd:31:f2:49:c4:1b:aa:9e:25:48:56:58:2a:f8:63:56:e9:
70:33:69:a6:e1:99:1f:b1:f4:68:1f:82:31:39:31:40:b7:b5:
54:27:1b:ca:b4:71:98:c4:87:aa:b5:dc:dd:f4:75:bd:78:8a:
39:95:6a:0d:50:0c:dd:ad:4e:cf:9f:be:8b:e7:14:10:04:d9:
fe:9b:da:84:1b:ad:4b:5a:d0:80:20:de:ac:a4:1c:1f:33:74:
55:5e:01:61:0f:a1:f3:43:a3:9b:d2:71:83:34:9b:6b:db:20:
ae:c6:6f:fc:81:1b:98:b4:15:52:75:65:cf:bc:92:5d:ba:f7:
90:cb:ca:f0:0b:3f:4e:ac:92:15:85:19:ab:6c:57:ae:6d:99:
42:b9:ff:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:55:52 2026 by rpki-client