Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
File: VZhirROQ5Nv4grUie8kzUPLYBxM.mft (raw, json)
Hash identifier: ktNG1VldzjuZHrIlSRzzrR9D0yRYWmd66Mhb6Nyeyhk=
Subject key identifier: 88:D3:98:67:0D:1E:98:8A:DB:A5:00:1C:4A:BD:46:AE:06:28:73:F8
Authority key identifier: 55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
Certificate issuer: /CN=559862ad1390e4dbf882b5227bc93350f2d80713
Certificate serial: 019D2771D97A3636AA06E40B2CF4D293CEE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
Manifest number: 09B5
Signing time: Thu 26 Mar 2026 00:01:05 +0000
Manifest this update: Thu 26 Mar 2026 00:01:05 +0000
Manifest next update: Fri 27 Mar 2026 00:01:05 +0000
Files and hashes: 1: VZhirROQ5Nv4grUie8kzUPLYBxM.crl (hash: AozPLW2OLjNPfFavf6cnYAACraJo9vbECKKvsVAr5vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d9:7a:36:36:aa:06:e4:0b:2c:f4:d2:93:ce:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559862ad1390e4dbf882b5227bc93350f2d80713
Validity
Not Before: Mar 26 00:01:05 2026 GMT
Not After : Mar 27 00:01:05 2026 GMT
Subject: CN=88d398670d1e988adba5001c4abd46ae062873f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b6:e5:c3:f7:c0:db:3d:7a:68:49:c9:fc:3a:
f1:61:6b:dc:60:1e:7e:ab:d5:36:46:4e:2f:0b:ca:
6a:3e:ab:ea:a4:d6:0d:e3:d5:43:a5:af:ef:d0:bc:
d3:ca:94:1b:36:98:e9:43:56:16:ea:3b:49:7d:ba:
f9:54:b1:94:e4:f6:84:3b:35:50:3b:0f:e2:54:d3:
7b:67:91:8d:44:70:4f:1a:d8:2e:2d:69:72:96:3b:
86:e9:ea:9f:a2:74:f7:04:6d:4a:79:5e:6f:5a:18:
b7:cb:f5:3f:00:f2:98:ba:55:58:63:87:e0:18:1e:
64:3f:b5:4f:80:11:fd:9d:02:7e:a4:b8:86:a1:8b:
59:c3:a4:16:8c:3f:44:00:cf:93:63:c4:92:35:a8:
51:36:65:d7:e2:b4:66:35:93:66:a6:5e:23:44:00:
1b:09:11:fd:59:b2:81:5d:ab:f7:00:90:b5:8b:1b:
38:51:9d:b5:cd:eb:de:20:91:61:33:fa:17:ff:3f:
b5:49:18:cb:63:05:6c:ff:bf:8f:62:30:83:2a:9c:
59:ab:a1:c3:8f:15:a3:61:c5:b6:68:ed:71:2b:f4:
d3:68:ff:b7:1a:20:53:f6:b4:f3:8d:48:b4:0f:36:
64:90:38:bb:e8:a9:12:3b:5d:00:f7:d8:47:31:83:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D3:98:67:0D:1E:98:8A:DB:A5:00:1C:4A:BD:46:AE:06:28:73:F8
X509v3 Authority Key Identifier:
keyid:55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:de:be:9c:86:68:1d:9d:83:da:55:cb:ab:a9:b6:42:3c:e9:
1b:89:ee:97:da:b6:1d:cb:32:88:96:f5:94:08:44:a9:8f:47:
61:6a:0f:cb:4c:e0:8c:3d:d1:c5:a6:91:94:93:84:77:44:e3:
71:7d:0e:4e:26:a9:78:b9:76:df:64:7c:d6:dc:c6:dc:da:7e:
4e:65:2f:84:26:38:cc:94:02:25:64:75:ba:47:cc:f9:63:06:
8d:01:00:b0:f6:d2:4a:33:14:99:26:a4:0e:36:84:fb:8b:13:
35:98:d0:35:7b:b0:f5:e4:1b:cb:0f:17:aa:d6:f2:95:29:50:
2a:86:99:61:eb:d0:ec:c4:04:a5:11:69:17:f5:ae:11:1e:ee:
3d:15:f4:fa:a4:a2:28:d6:cb:26:e3:71:a9:22:64:1e:61:28:
75:c5:fd:e7:65:3b:e7:86:58:e4:9c:62:e0:59:25:5d:02:5c:
fd:5d:7b:5c:5e:78:68:98:55:2c:12:bc:95:bc:61:67:11:82:
a5:e8:66:5b:ec:6e:63:f1:e6:06:7d:26:3a:13:0a:f6:df:a9:
0f:f8:c8:5d:2f:53:6a:19:6b:ff:74:51:da:2c:87:d0:eb:1a:
bb:b8:7c:e3:39:33:f6:9e:65:dc:1c:42:bb:27:1d:5b:54:32:
59:b4:f9:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncdl6NjaqBuQLLPTSk87kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OTg2MmFkMTM5MGU0ZGJmODgyYjUyMjdiYzkzMzUwZjJk
ODA3MTMwHhcNMjYwMzI2MDAwMTA1WhcNMjYwMzI3MDAwMTA1WjAzMTEwLwYDVQQD
Eyg4OGQzOTg2NzBkMWU5ODhhZGJhNTAwMWM0YWJkNDZhZTA2Mjg3M2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7blw/fA2z16aEnJ/DrxYWvcYB5+
q9U2Rk4vC8pqPqvqpNYN49VDpa/v0LzTypQbNpjpQ1YW6jtJfbr5VLGU5PaEOzVQ
Ow/iVNN7Z5GNRHBPGtguLWlyljuG6eqfonT3BG1KeV5vWhi3y/U/APKYulVYY4fg
GB5kP7VPgBH9nQJ+pLiGoYtZw6QWjD9EAM+TY8SSNahRNmXX4rRmNZNmpl4jRAAb
CRH9WbKBXav3AJC1ixs4UZ21zeveIJFhM/oX/z+1SRjLYwVs/7+PYjCDKpxZq6HD
jxWjYcW2aO1xK/TTaP+3GiBT9rTzjUi0DzZkkDi76KkSO10A99hHMYO6AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjTmGcNHpiK26UAHEq9Rq4GKHP4MB8GA1UdIwQY
MBaAFFWYYq0TkOTb+IK1InvJM1Dy2AcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlpoaXJST1E1TnY0Z3JVaWU4a3pVUExZQnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi82MmVkMGYtYTgxZi00MzRmLWI5NzUt
MDcxZmIxZjNiOTg1LzEvVlpoaXJST1E1TnY0Z3JVaWU4a3pVUExZQnhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi82MmVkMGYtYTgxZi00MzRmLWI5NzUtMDcxZmIxZjNiOTg1
LzEvVlpoaXJST1E1TnY0Z3JVaWU4a3pVUExZQnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAON6+nIZo
HZ2D2lXLq6m2QjzpG4nul9q2HcsyiJb1lAhEqY9HYWoPy0zgjD3RxaaRlJOEd0Tj
cX0OTiapeLl232R81tzG3Np+TmUvhCY4zJQCJWR1ukfM+WMGjQEAsPbSSjMUmSak
DjaE+4sTNZjQNXuw9eQbyw8XqtbylSlQKoaZYevQ7MQEpRFpF/WuER7uPRX0+qSi
KNbLJuNxqSJkHmEodcX952U754ZY5Jxi4FklXQJc/V17XF54aJhVLBK8lbxhZxGC
pehmW+xuY/HmBn0mOhMK9t+pD/jIXS9Tahlr/3RR2iyH0Osau7h84zkz9p5l3BxC
uycdW1QyWbT5kQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:26 2026 by rpki-client