Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json)
Hash identifier: dsCcVeSjbXzk68KA5B3NM1lrFHoXAGD5ALriM+hU03Q=
Subject key identifier: 17:84:29:BB:6E:29:84:E3:5D:81:E8:AB:3F:64:0D:5B:CD:36:95:11
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial: 019D2516546062716B482BC974D7DC299AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
Manifest number: 0CE8
Signing time: Wed 25 Mar 2026 13:01:53 +0000
Manifest this update: Wed 25 Mar 2026 13:01:53 +0000
Manifest next update: Thu 26 Mar 2026 13:01:53 +0000
Files and hashes: 1: QjH4ysMjhx-FRFJ5XuVwEV5hkKY.roa (hash: kDgabNMh+h4CdxorS3mXQ7X6CnKJc4jDSgDlwGVSsRw=)
2: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: 6e1js36WuIxBKNUnyvBfsvw7m0OCThqnSpLB21xpEcM=)
3: neH0ynm-9_WfGLcRwlNHULD4ons.asa (hash: hATUAyHrF7u0nM6hFtbEJpofhSi3SzzTsiFp4CpEf8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:16:54:60:62:71:6b:48:2b:c9:74:d7:dc:29:9a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Validity
Not Before: Mar 25 13:01:53 2026 GMT
Not After : Mar 26 13:01:53 2026 GMT
Subject: CN=178429bb6e2984e35d81e8ab3f640d5bcd369511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2f:d2:cc:b3:c2:5d:59:02:0f:ad:ed:e7:d7:
4d:9e:85:67:57:f1:90:4f:a8:33:bb:8b:fc:ee:fe:
80:02:4a:eb:63:6e:70:8e:89:4f:ff:4c:27:dd:59:
1c:7a:c6:76:f2:d8:d7:f3:da:d0:83:d1:d8:5c:96:
d6:80:24:11:86:8e:3d:68:ac:46:41:8f:38:59:bd:
86:48:43:85:1e:91:da:b8:9f:7f:79:60:f7:e7:c6:
cc:b3:d1:17:7f:4f:a2:79:30:7a:fe:e1:8f:b5:79:
f3:17:84:12:a8:98:5e:78:d7:52:d3:3b:c4:b7:2b:
5c:2c:73:c5:09:4e:58:e4:c4:73:ea:a6:71:8c:37:
22:f3:bf:5e:d1:fb:ab:af:05:a2:28:71:78:3b:9d:
bf:7f:a9:fa:a0:78:27:61:8a:75:7f:ff:54:68:ae:
02:12:7c:aa:14:80:54:f9:09:cb:92:74:c4:e4:a9:
04:1e:c3:ce:66:ef:bd:d7:c9:52:54:cf:b3:27:7d:
99:a3:24:0c:e4:63:d1:d3:f8:91:08:9c:42:6f:62:
4f:e9:8b:9c:26:6e:f8:6a:0f:35:e2:3b:81:77:ce:
94:21:47:09:b4:0f:80:71:8f:19:60:4e:7b:f1:54:
0a:88:41:30:09:61:e2:95:b1:6b:fc:bd:55:a8:cf:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:84:29:BB:6E:29:84:E3:5D:81:E8:AB:3F:64:0D:5B:CD:36:95:11
X509v3 Authority Key Identifier:
keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a0:73:ba:18:13:05:58:51:49:45:4e:cc:5e:a3:db:33:d6:
d0:a2:dc:c8:a1:b4:0a:ba:8a:01:81:56:7c:5e:d4:29:94:5e:
04:9a:51:34:65:3f:cc:68:ce:10:f3:b2:31:95:25:fa:44:eb:
59:74:cc:48:a1:f5:20:09:5e:b5:76:44:ee:02:24:fd:de:bc:
84:d3:f3:78:5b:f1:01:4d:89:3c:2d:cb:3f:48:9d:75:17:9d:
f3:80:fb:d9:e8:aa:0b:96:c1:97:d6:80:bc:53:fe:9a:f4:cc:
f5:6e:12:3e:cf:9d:3f:3b:37:28:27:d9:38:d6:ea:f5:4b:2b:
ca:93:e2:3a:4c:14:74:86:93:7a:3e:55:1a:2a:d0:de:48:0b:
f1:91:9e:68:c3:73:b7:08:d6:49:e0:04:56:89:5e:e9:a1:56:
31:7d:54:b4:6d:60:8b:5c:27:bd:11:30:73:49:16:83:8e:33:
4a:7e:94:da:03:0a:fc:25:35:6f:91:a3:d7:dd:75:78:a3:42:
bb:d6:c2:a2:30:65:13:0b:3d:d7:3e:75:a5:1b:6f:68:06:d0:
30:ce:7b:51:86:2d:73:d1:50:db:5d:d3:a3:15:d3:41:d7:c3:
21:40:f1:4a:bb:63:1b:ea:3e:7f:9f:e5:22:d7:d0:62:8b:ff:
ba:03:58:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:57 2026 by rpki-client