Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
File: VZNJZEMjMV-AbcZMpNntlVd2J1c.mft (raw, json)
Hash identifier: gU2RjDxw9Zv214zzG3K1unKjNtf0eP+kBMWqmRROXx4=
Subject key identifier: 82:0D:3D:B1:B3:93:8B:4F:06:11:D9:3E:BC:6F:06:7E:59:0A:92:55
Authority key identifier: 55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
Certificate issuer: /CN=559349644323315f806dc64ca4d9ed9557762757
Certificate serial: 019D9850C20762B8B37441EB348C326BAC6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
Manifest number: 0D1B
Signing time: Thu 16 Apr 2026 22:02:02 +0000
Manifest this update: Thu 16 Apr 2026 22:02:02 +0000
Manifest next update: Fri 17 Apr 2026 22:02:02 +0000
Files and hashes: 1: LjJLqjcnZZvUB7mKjCH-7GZzeLM.roa (hash: A/qN/8X4NxsgNcRehmeeZdCg0e5U0+miw/dGRfft/VI=)
2: VZNJZEMjMV-AbcZMpNntlVd2J1c.crl (hash: MfrZrA66M5T50OVD7CosQDKs3RAdomvWRe6jzVCbVaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:c2:07:62:b8:b3:74:41:eb:34:8c:32:6b:ac:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559349644323315f806dc64ca4d9ed9557762757
Validity
Not Before: Apr 16 22:02:02 2026 GMT
Not After : Apr 17 22:02:02 2026 GMT
Subject: CN=820d3db1b3938b4f0611d93ebc6f067e590a9255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:75:45:78:7c:9e:46:d6:15:98:d7:55:43:48:
d7:e3:70:fa:26:fa:e1:42:69:51:1e:90:36:56:ee:
cf:f6:ae:23:e9:f6:63:04:2b:80:03:f8:5b:26:8f:
39:9a:b1:be:a5:92:51:d5:05:59:17:53:0a:ff:00:
f6:fc:4b:4f:11:7a:cd:94:9d:44:fe:a4:6f:2e:27:
cf:f4:94:52:d8:b0:d0:dd:35:a1:ab:fa:01:03:d3:
b8:8f:a7:73:ae:02:92:d5:93:01:e8:a3:e2:14:f2:
a9:13:fe:a1:6c:7b:77:97:7c:32:6a:b8:ca:89:07:
cf:a1:a2:b1:a8:dd:a0:a0:d0:3c:0b:e7:8b:85:df:
1e:98:dc:d6:ea:d0:4a:eb:ba:4f:85:e5:8d:1f:a1:
0c:82:0e:c6:05:b7:a2:e8:45:23:e9:76:39:df:50:
66:07:43:5d:ef:2e:8d:ab:1a:ed:ca:28:55:6b:f8:
81:bd:54:14:91:9f:a2:8f:af:df:16:5b:11:5b:d1:
9a:3a:5a:c6:7e:e8:d9:ae:0c:82:b3:f1:74:44:6b:
7d:cb:89:25:66:53:65:eb:7a:4c:65:8c:ef:59:05:
7f:e3:4d:8e:52:0a:ef:d1:15:fb:bc:b9:7e:04:c1:
1d:4c:d2:85:c7:6b:b9:a1:fb:80:73:69:f5:b3:cb:
63:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0D:3D:B1:B3:93:8B:4F:06:11:D9:3E:BC:6F:06:7E:59:0A:92:55
X509v3 Authority Key Identifier:
keyid:55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:14:9f:b2:80:c5:00:29:01:0b:d7:86:7c:aa:21:1e:61:ed:
4a:01:e5:45:d0:80:c8:62:92:1a:41:3d:ba:48:86:ac:1a:53:
38:db:4c:4a:b8:7b:b3:51:59:33:78:c0:2d:63:fd:b3:81:46:
4f:46:ba:4c:47:60:df:7b:d3:28:ed:07:5e:c8:82:8a:8f:44:
15:d3:c0:54:af:8b:88:40:57:62:9d:85:80:5f:3d:5c:5a:bb:
28:39:6c:98:a5:d8:bd:96:4c:84:ab:79:62:38:c9:1b:76:12:
77:84:28:cb:bd:bc:d6:d7:f4:e4:ed:cd:3d:93:89:6e:9d:a7:
af:84:8b:d8:16:94:f9:d3:5c:32:13:85:f4:b0:78:b7:e2:c3:
a1:8e:95:9f:7d:2d:04:2f:7a:b3:48:09:d2:54:b4:2a:7e:d1:
1f:be:52:38:d9:e2:c5:7a:a0:11:de:0b:02:66:be:e8:48:0d:
ac:c8:4d:03:dc:71:17:05:78:3d:02:e6:7f:3a:f9:b5:a7:d4:
7a:a6:e8:3d:60:c3:51:10:53:7e:b7:25:1f:2f:5b:36:3f:41:
a2:bc:cf:74:bf:22:38:54:db:06:89:4f:96:b0:54:e7:4a:87:
cc:f9:94:21:73:95:23:f0:c8:33:a3:7d:9e:28:10:94:ef:4c:
22:6b:15:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUMIHYrizdEHrNIwya6xtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OTM0OTY0NDMyMzMxNWY4MDZkYzY0Y2E0ZDllZDk1NTc3
NjI3NTcwHhcNMjYwNDE2MjIwMjAyWhcNMjYwNDE3MjIwMjAyWjAzMTEwLwYDVQQD
Eyg4MjBkM2RiMWIzOTM4YjRmMDYxMWQ5M2ViYzZmMDY3ZTU5MGE5MjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHVFeHyeRtYVmNdVQ0jX43D6Jvrh
QmlRHpA2Vu7P9q4j6fZjBCuAA/hbJo85mrG+pZJR1QVZF1MK/wD2/EtPEXrNlJ1E
/qRvLifP9JRS2LDQ3TWhq/oBA9O4j6dzrgKS1ZMB6KPiFPKpE/6hbHt3l3wyarjK
iQfPoaKxqN2goNA8C+eLhd8emNzW6tBK67pPheWNH6EMgg7GBbei6EUj6XY531Bm
B0Nd7y6NqxrtyihVa/iBvVQUkZ+ij6/fFlsRW9GaOlrGfujZrgyCs/F0RGt9y4kl
ZlNl63pMZYzvWQV/402OUgrv0RX7vLl+BMEdTNKFx2u5ofuAc2n1s8tj2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIINPbGzk4tPBhHZPrxvBn5ZCpJVMB8GA1UdIwQY
MBaAFFWTSWRDIzFfgG3GTKTZ7ZVXdidXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTIt
NjA2NmQ4OWYwNWI4LzEvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTItNjA2NmQ4OWYwNWI4
LzEvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxSfsoDF
ACkBC9eGfKohHmHtSgHlRdCAyGKSGkE9ukiGrBpTONtMSrh7s1FZM3jALWP9s4FG
T0a6TEdg33vTKO0HXsiCio9EFdPAVK+LiEBXYp2FgF89XFq7KDlsmKXYvZZMhKt5
YjjJG3YSd4Qoy7281tf05O3NPZOJbp2nr4SL2BaU+dNcMhOF9LB4t+LDoY6Vn30t
BC96s0gJ0lS0Kn7RH75SONnixXqgEd4LAma+6EgNrMhNA9xxFwV4PQLmfzr5tafU
eqboPWDDURBTfrclHy9bNj9BorzPdL8iOFTbBolPlrBU50qHzPmUIXOVI/DIM6N9
nigQlO9MImsVSA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:53 2026 by rpki-client