Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
File: vzrHIKEXt01NE8Jj95R3kp7btLw.mft (raw, json)
Hash identifier: z9EfjWmejSaWdo+jKNpGZM/Pw6fQ5bPx6oDpnyMxg1w=
Subject key identifier: 7F:A1:16:53:F8:3F:D7:0A:8A:37:CD:5D:02:9C:F4:3E:72:7F:12:B1
Authority key identifier: BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC
Certificate issuer: /CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
Certificate serial: 019D273AFC9F2930897F5B4BEBCC8BF2C948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
Manifest number: 0670
Signing time: Wed 25 Mar 2026 23:01:10 +0000
Manifest this update: Wed 25 Mar 2026 23:01:10 +0000
Manifest next update: Thu 26 Mar 2026 23:01:10 +0000
Files and hashes: 1: jshUcB9xo_4UjMSMpv_Atyyty9w.roa (hash: An++hrgldtP3cS4PiEwsT48K4V8iq3LI6SDvvL0nHOE=)
2: vzrHIKEXt01NE8Jj95R3kp7btLw.crl (hash: YOCut+4+BACqTkUnGlKPpAoX5E5TzAzW/1R5GP6EsAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:fc:9f:29:30:89:7f:5b:4b:eb:cc:8b:f2:c9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
Validity
Not Before: Mar 25 23:01:10 2026 GMT
Not After : Mar 26 23:01:10 2026 GMT
Subject: CN=7fa11653f83fd70a8a37cd5d029cf43e727f12b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:11:9a:02:e7:9e:22:9c:46:0c:9b:e7:5d:
33:aa:e4:a0:9f:5a:d0:d6:97:a8:59:32:c4:25:c2:
d3:ac:22:62:17:7a:87:38:25:c7:30:bd:ef:c2:cf:
46:14:5f:da:54:1d:b4:c8:c0:21:0e:3c:83:e7:6f:
8f:ca:bf:69:e2:6c:e2:8f:ea:63:ff:13:58:8c:e5:
e1:7c:49:55:e1:50:1b:18:17:31:87:38:f0:20:45:
fb:17:5f:12:5d:39:59:0d:7b:1e:2a:f4:bc:d0:ce:
26:5b:f9:f5:c0:f6:29:87:cb:e3:e3:d5:7f:1d:76:
6a:64:ee:a8:09:03:41:73:88:bb:35:f4:99:04:4a:
d8:cd:0e:ac:0b:d3:df:f1:86:e6:88:ea:1c:0a:35:
df:9a:a1:d5:40:f5:6f:29:67:0d:a0:bd:6d:b5:d7:
6f:cc:78:47:86:39:78:ad:36:15:c5:62:ab:ee:0c:
12:68:1f:d5:81:3e:e4:9b:af:86:4d:c1:bd:41:13:
ab:8d:06:d1:fa:00:6f:53:65:c4:7f:ed:44:f4:65:
6e:92:d9:35:da:d7:9d:96:91:6c:68:8a:66:68:f2:
98:1a:ff:7f:42:89:03:27:4c:04:f2:26:e3:39:4b:
7b:1f:56:96:95:7b:7c:42:1f:52:a5:9f:5b:d7:da:
ff:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A1:16:53:F8:3F:D7:0A:8A:37:CD:5D:02:9C:F4:3E:72:7F:12:B1
X509v3 Authority Key Identifier:
keyid:BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a6:5d:bd:9e:06:7d:91:0f:45:97:8f:09:a9:6d:34:21:d8:
fe:db:be:99:e0:e4:af:3e:9d:da:1e:1e:a0:6c:5e:91:34:a3:
a5:3d:6d:6c:eb:d6:df:9e:59:af:28:53:5c:e4:a0:e5:8c:f3:
84:ea:5e:36:32:50:50:d7:7f:02:ba:15:28:7c:56:96:b1:ce:
1d:04:52:43:4c:7f:8b:a5:6a:4a:5b:40:bb:c2:72:93:65:ea:
bb:af:84:31:cc:43:9f:44:1b:1e:99:7e:38:d2:a4:23:49:da:
00:59:c5:f8:aa:78:01:e8:82:71:a7:b5:d4:09:93:19:e4:36:
a7:d2:91:90:7b:07:de:57:85:1b:c8:74:a3:75:be:89:05:ca:
61:fe:bf:ec:aa:62:65:5d:d2:8a:d9:6c:c4:0a:f0:6a:d4:f7:
21:8c:7e:7a:44:80:2d:f9:42:91:b1:c6:2b:c5:0c:d4:92:6c:
b1:c8:80:a8:cc:12:ce:f8:31:a2:ae:9d:84:41:3a:8c:03:4a:
03:15:d9:6d:50:df:91:bb:89:e4:72:4c:d1:16:64:94:8c:02:
cf:91:50:04:a3:f2:47:aa:14:da:3f:9b:86:e1:67:5a:ea:75:
95:8b:59:22:91:81:ec:57:61:3e:36:c2:dc:1e:a4:a8:d3:80:
f0:12:32:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:41:43 2026 by rpki-client