Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json)
Hash identifier: PyR8/tWSZiNXzhDa1BXfAtIIX1t077v3iAO6/37FSGk=
Subject key identifier: CF:D2:05:DE:D2:20:67:67:88:FC:E2:A3:63:C0:88:2C:4B:DA:1B:D3
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial: 019D9BF556BDA835C759F5A61B33075FF8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
Manifest number: 09D1
Signing time: Fri 17 Apr 2026 15:00:40 +0000
Manifest this update: Fri 17 Apr 2026 15:00:40 +0000
Manifest next update: Sat 18 Apr 2026 15:00:40 +0000
Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: /O3T56UQpxQO93iASGGjV1Wu2lKGaDS7PUTm4IZzms8=)
2: gng50Ziqb6xrb3gKYd3mPMqKi20.roa (hash: Qgx/fSQr4uTOuIoJO8P5gUwe6l71dGbPdS6w5iyet3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:56:bd:a8:35:c7:59:f5:a6:1b:33:07:5f:f8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Validity
Not Before: Apr 17 15:00:40 2026 GMT
Not After : Apr 18 15:00:40 2026 GMT
Subject: CN=cfd205ded220676788fce2a363c0882c4bda1bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:a6:70:75:87:8f:5b:83:b4:9a:ed:59:fd:
7f:23:42:25:3c:a9:6c:67:73:5b:a9:56:34:78:fe:
1d:5b:a9:53:47:6b:1d:1c:70:6b:1b:cb:43:68:29:
3e:08:f5:0a:ab:ae:16:78:c0:33:9e:2e:72:fe:a0:
5b:b2:d9:d8:5a:1a:53:a4:e7:fd:c9:04:7e:e6:1d:
f5:99:e0:b3:4f:02:95:a7:80:9b:8f:51:bc:eb:a2:
dc:d4:27:c7:47:ba:1b:a3:35:29:86:f0:2d:32:b2:
6d:bf:1d:b3:ce:ea:b2:c9:84:49:30:b2:63:75:34:
ff:0f:4e:a1:1c:a9:38:29:27:d1:17:aa:d5:ed:25:
46:ed:58:22:55:eb:74:9a:5d:e3:20:d0:80:11:19:
54:b5:16:ac:02:fe:15:22:71:70:57:ee:2c:5e:c7:
cb:fe:31:a3:e1:0b:82:1d:44:f2:5b:e8:39:f2:7e:
55:cc:cb:29:8c:29:8b:41:c9:ef:07:42:30:fc:96:
6e:c8:2f:f4:67:87:73:90:12:df:78:b9:2a:09:80:
94:33:0b:48:70:93:b3:87:52:79:c4:c4:3a:95:b4:
f8:88:d2:96:f8:45:a7:37:ab:d2:95:5d:94:5f:11:
08:79:84:5b:f9:94:3d:e9:fd:e0:ba:2d:70:57:88:
00:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D2:05:DE:D2:20:67:67:88:FC:E2:A3:63:C0:88:2C:4B:DA:1B:D3
X509v3 Authority Key Identifier:
keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:a0:6b:52:b7:c4:06:b5:57:b7:f2:a6:01:3e:91:79:38:e4:
e7:9f:0b:34:0a:0e:09:8a:36:ee:27:04:69:91:38:17:1e:1c:
8d:09:ba:4c:73:4e:77:13:06:93:75:a8:51:78:17:b0:2b:89:
d7:39:f9:b5:e3:a2:2e:a0:1c:a5:fe:3f:c7:2e:81:0b:8d:72:
c6:6d:ae:cb:8a:4d:d3:ab:81:1b:9c:c0:2e:6d:e8:b0:e2:a7:
a4:8d:aa:1e:03:d5:ab:48:65:8c:7a:75:08:01:d0:a1:37:de:
a7:52:b0:4f:0a:8e:86:73:92:24:3b:73:9a:47:9f:f1:76:d7:
11:ac:3c:e6:0c:da:bb:2b:f4:16:88:11:05:33:38:52:c7:3e:
bf:57:47:9d:5d:23:06:39:57:21:67:b9:9c:7f:5d:3e:f5:df:
3d:37:df:61:ed:4d:87:f3:96:f0:73:7a:24:f1:a1:7c:56:b3:
87:27:52:45:98:7e:19:22:ed:62:8c:51:6c:c5:70:73:07:16:
d1:8c:44:64:24:99:9b:fc:d5:ea:54:8f:44:12:30:54:d2:fb:
f6:b4:b1:c6:44:4b:12:d2:f6:b3:f5:99:ed:30:dd:9e:75:97:
84:9c:a6:bb:20:46:37:02:3d:cf:dc:1d:a9:be:d2:c3:80:2d:
4e:e2:d3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:10 2026 by rpki-client