Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
File: VZNJZEMjMV-AbcZMpNntlVd2J1c.mft (raw, json)
Hash identifier: gUNvJlhk1sCX5xtDKrL1/cT7ZqBwqvpHsYrBes5T/0E=
Subject key identifier: A3:C5:A9:63:87:9A:D5:7C:B8:31:4D:C2:08:26:1B:11:06:71:19:39
Authority key identifier: 55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
Certificate issuer: /CN=559349644323315f806dc64ca4d9ed9557762757
Certificate serial: 019CACB4F932BA11102CE79A34B55922566D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
Manifest number: 0CA1
Signing time: Mon 02 Mar 2026 04:01:07 +0000
Manifest this update: Mon 02 Mar 2026 04:01:07 +0000
Manifest next update: Tue 03 Mar 2026 04:01:07 +0000
Files and hashes: 1: LjJLqjcnZZvUB7mKjCH-7GZzeLM.roa (hash: A/qN/8X4NxsgNcRehmeeZdCg0e5U0+miw/dGRfft/VI=)
2: VZNJZEMjMV-AbcZMpNntlVd2J1c.crl (hash: IsccsHlk5MwGfr2EiQQ7Zr6buJARIDlfzE3xyS3hynA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:f9:32:ba:11:10:2c:e7:9a:34:b5:59:22:56:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559349644323315f806dc64ca4d9ed9557762757
Validity
Not Before: Mar 2 04:01:07 2026 GMT
Not After : Mar 3 04:01:07 2026 GMT
Subject: CN=a3c5a963879ad57cb8314dc208261b1106711939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:15:a4:a5:4a:78:29:f6:09:d1:96:22:64:
8d:1e:5e:a3:01:68:5b:23:ce:c2:62:13:41:d5:f9:
bf:cd:c3:7f:58:37:43:6f:30:63:91:2b:bd:b1:dd:
6f:15:de:84:bc:b0:78:1e:c5:15:e6:38:b3:7a:68:
6f:10:21:0e:23:df:88:1d:69:84:bb:ec:65:fb:27:
b3:03:d0:07:b5:27:33:78:5b:92:e7:8a:6e:4a:3d:
09:cc:3d:f8:69:0e:7e:00:99:db:62:77:65:1a:89:
f0:5b:8d:0e:67:3c:9c:a5:29:a7:a5:7f:a7:d9:b7:
50:58:4c:1a:d7:bd:10:f7:80:3e:0f:fe:f5:cb:48:
b1:04:d8:9a:88:61:ad:72:8f:21:6a:d5:21:63:91:
87:01:14:a9:83:1d:c6:a2:50:4b:87:2d:90:78:e8:
9f:ee:3e:49:e8:c6:f3:76:d8:b9:99:9f:6a:f8:cd:
b0:6c:e3:ea:73:2e:12:af:4a:81:77:78:7a:e9:35:
8c:99:c0:93:ab:16:4c:57:29:60:d1:d2:77:2e:83:
c3:d4:5b:22:b4:76:e2:7a:b7:21:79:1f:c8:57:44:
7f:88:ca:d8:c8:eb:86:6e:66:fd:6a:17:73:65:dd:
25:2f:90:8c:52:d9:f0:45:9d:99:61:cb:0a:c2:f2:
f1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C5:A9:63:87:9A:D5:7C:B8:31:4D:C2:08:26:1B:11:06:71:19:39
X509v3 Authority Key Identifier:
keyid:55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c9:56:82:38:1b:6a:ea:83:da:f3:f5:d0:db:e8:f0:dc:17:
53:98:d0:19:c2:f6:9b:f3:65:fa:9a:1f:a3:76:e0:06:06:ca:
42:9e:2e:23:7d:af:a3:9c:3e:c1:d7:f6:fc:ae:3f:94:19:34:
46:39:88:5c:1b:aa:96:53:55:b5:1a:7e:20:be:4e:f2:27:8a:
1d:1a:a9:9d:f3:fe:d9:42:9d:6f:c7:1f:41:5b:03:62:5c:87:
25:e1:f9:f3:74:a1:e3:d1:ab:eb:80:96:89:bc:98:70:ca:be:
77:02:20:34:9c:f4:14:01:ba:a6:57:44:3a:9b:12:bf:83:37:
5d:a4:ac:c4:68:a6:c1:07:4f:c5:05:5b:84:42:45:ec:de:a8:
65:53:4b:4a:24:b2:2d:13:98:26:fb:c4:32:25:70:a1:aa:70:
96:17:6b:fb:1c:0f:95:89:d3:b6:3f:81:77:67:58:34:62:64:
dc:82:0a:f1:1b:af:7e:b4:33:80:ab:d1:21:98:33:85:b3:04:
5e:32:44:0f:66:96:7e:d2:df:2f:82:de:83:a3:f7:3f:0e:6f:
1d:8d:0d:82:fc:dc:5f:40:94:8e:8b:97:d2:8b:b6:e9:f0:f3:
97:b3:db:b0:9d:44:f9:b6:37:f2:b3:cf:96:31:2d:b1:e5:36:
9b:67:e9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:25 2026 by rpki-client