Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
File: vz3ogsJhnWgPLX_mALkBbaKHqNM.mft (raw, json)
Hash identifier: +kJfWK0R0/+RDoYDLtaYgUl+eBsCkCzblp9TS64kWyc=
Subject key identifier: D3:88:AA:16:95:1D:E9:63:DC:EC:BB:1A:0E:F3:B1:D9:BA:CA:95:6E
Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
Certificate issuer: /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Certificate serial: 019D326385A68AAB59E39972E7B49D5133F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
Manifest number: 16E3
Signing time: Sat 28 Mar 2026 03:01:16 +0000
Manifest this update: Sat 28 Mar 2026 03:01:16 +0000
Manifest next update: Sun 29 Mar 2026 03:01:16 +0000
Files and hashes: 1: GG89hAoixp0ZJE8Ef-5VuRyD-Wg.roa (hash: fpAmvEh19YQT+8W5VCcnDo3VDNg2kVBnOH7P5uACyqA=)
2: vz3ogsJhnWgPLX_mALkBbaKHqNM.crl (hash: lXNkfvRwD2EQK5AKqNZLJwUnqhC6e77vxb3CqerHfRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:85:a6:8a:ab:59:e3:99:72:e7:b4:9d:51:33:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Validity
Not Before: Mar 28 03:01:16 2026 GMT
Not After : Mar 29 03:01:16 2026 GMT
Subject: CN=d388aa16951de963dcecbb1a0ef3b1d9baca956e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:e9:46:ad:e1:c0:d9:1f:05:33:1a:c3:fc:
19:24:92:54:c0:c1:f3:76:fb:b6:64:62:19:e7:78:
a2:d7:7d:4e:2d:d4:13:55:cc:d0:a5:dc:3f:7f:91:
dd:eb:09:5e:28:ce:75:04:34:2d:b3:58:64:3e:3c:
77:ea:53:48:5f:43:11:00:5f:57:7b:8f:a2:a8:96:
6a:08:2b:d3:d7:45:2f:7c:f4:6c:47:6f:64:dd:69:
99:47:55:d0:48:0b:7d:1a:cb:9e:1a:7c:62:3a:c6:
64:79:99:35:54:e2:4f:48:0d:f7:b1:ae:f1:6a:04:
7b:0e:0c:7c:7a:9d:5e:d9:98:ec:dd:0a:ba:c6:86:
84:35:98:d1:cf:40:95:65:18:f5:fd:fd:5e:9e:00:
d4:61:1e:5d:47:6a:b3:94:06:45:e1:9f:e7:77:2c:
27:4f:bc:5a:cc:68:3a:f3:23:60:74:25:8a:8b:97:
e9:71:d2:85:81:01:ee:33:3b:cc:22:1d:07:20:1c:
53:af:70:de:7d:e9:89:a6:82:85:22:83:c5:b8:54:
02:c6:30:1c:9e:8f:99:81:05:51:7f:32:08:72:13:
fe:17:2c:bc:a2:f3:02:11:57:4e:57:49:fe:68:bd:
ca:ca:2c:25:23:44:6a:70:19:84:e2:93:89:2d:fa:
d1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:88:AA:16:95:1D:E9:63:DC:EC:BB:1A:0E:F3:B1:D9:BA:CA:95:6E
X509v3 Authority Key Identifier:
keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f3:d6:70:4b:5c:ae:2b:49:be:f3:c0:b9:7d:1a:1b:e1:86:
9b:67:23:cf:09:ab:13:bc:27:85:0f:ba:93:ce:2a:74:82:d8:
d7:e7:99:fb:53:30:3a:8d:cf:e0:0a:38:cb:f9:ee:b6:96:40:
20:19:3e:cf:f8:00:0c:25:2d:6c:67:8f:16:d4:a9:d5:c6:5b:
89:31:3a:c7:e9:c7:4a:6b:a0:89:ad:78:18:2d:28:74:40:02:
9b:80:0b:fa:56:42:fc:65:4d:11:04:b0:c1:82:f8:0d:a9:db:
af:a4:29:97:e4:e6:67:9e:7d:71:40:72:90:0b:30:0d:a6:03:
e3:d5:be:a8:ae:4d:e3:38:35:02:6b:e1:f8:8d:c2:80:e5:4f:
61:dc:b8:c5:60:37:0a:e4:08:2f:13:91:6e:ed:3f:78:0a:2f:
7c:59:63:b3:ed:1c:29:51:f0:e2:c9:78:28:a1:2a:d8:d1:33:
bc:8b:e8:65:da:3a:59:7d:e9:68:db:87:df:aa:06:ad:a6:79:
71:9f:b3:c5:8b:c3:00:95:b5:6d:df:dc:7d:fc:e3:78:09:12:
3b:d8:3e:4f:25:b5:38:e9:0e:b3:c5:e0:4d:ca:f9:7d:d4:70:
ef:1b:70:2f:1e:94:47:03:8f:de:59:1a:ca:a6:90:96:64:28:
70:1d:9f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:40:52 2026 by rpki-client