Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
File: VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft (raw, json)
Hash identifier: U79tGhS5CBPlRQCM8n097a1WNtgHnBR9oL2zcTdl02A=
Subject key identifier: 21:17:E0:19:F3:03:5D:6B:26:52:44:C7:7A:8F:BC:6B:28:80:8D:40
Authority key identifier: 55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
Certificate issuer: /CN=559a769412d2d963b491ebe31d44111dcafccc94
Certificate serial: 019D2B4E6AFE82366773EB5AA282CD8A22CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
Manifest number: 076C
Signing time: Thu 26 Mar 2026 18:00:52 +0000
Manifest this update: Thu 26 Mar 2026 18:00:52 +0000
Manifest next update: Fri 27 Mar 2026 18:00:52 +0000
Files and hashes: 1: VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl (hash: L+JvUM/zvjIIQMBbK1mLzV7EwG6UG4Q2VFaYvpyFv1U=)
2: tq6kMgziYFoXho7XVp0bBOLTUsY.roa (hash: O9FhMzBttczXakVkdlx4+Fgz/P4MA/RrEi2IBCBaSDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:6a:fe:82:36:67:73:eb:5a:a2:82:cd:8a:22:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559a769412d2d963b491ebe31d44111dcafccc94
Validity
Not Before: Mar 26 18:00:52 2026 GMT
Not After : Mar 27 18:00:52 2026 GMT
Subject: CN=2117e019f3035d6b265244c77a8fbc6b28808d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:da:7d:86:01:4e:d6:14:83:55:46:60:6e:86:
ab:66:c8:17:ff:9c:d2:de:06:74:0a:c1:26:3c:73:
0f:13:66:a4:89:5e:3b:dd:b7:26:42:7e:13:4a:cb:
82:64:06:1c:9e:4b:e9:aa:fa:84:b3:c7:e7:28:a0:
41:be:a9:ab:1f:73:37:e6:fd:c2:d8:8e:11:bb:6e:
ce:8e:92:99:4c:5a:59:92:97:80:49:a7:27:37:b3:
10:08:85:cb:63:88:72:73:cc:d6:10:28:76:0c:81:
83:09:00:db:47:37:ea:1e:cd:48:86:35:4b:b4:01:
e9:c3:d0:89:67:c8:3a:f5:11:24:03:0d:76:50:1e:
3d:28:0c:e9:4a:02:5f:13:49:73:7f:24:60:b8:33:
ce:36:eb:d2:95:63:5c:51:13:4c:f6:52:e8:57:79:
cd:96:bd:a8:b3:fc:59:55:fd:3d:e4:ad:a6:af:89:
7b:fc:62:b8:1f:08:17:30:21:f5:34:58:43:d4:2f:
27:fa:d8:6e:17:e1:19:a9:9d:b7:23:a1:b5:88:1c:
ab:01:58:2b:fb:3b:98:4d:60:67:29:bd:c7:f6:d1:
c6:ee:dc:00:41:83:bc:6c:5a:f9:b6:a8:6e:f0:2e:
88:2c:9e:ca:38:29:ad:f7:70:cf:47:aa:16:5c:f0:
63:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:17:E0:19:F3:03:5D:6B:26:52:44:C7:7A:8F:BC:6B:28:80:8D:40
X509v3 Authority Key Identifier:
keyid:55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b3:27:a8:3b:dc:39:b6:80:4d:c8:4c:1b:63:48:9b:76:7f:
f5:36:6c:91:31:f6:e1:4d:d9:30:3a:56:ea:a6:b2:92:ac:70:
ea:c7:1b:9f:f4:cf:e5:e8:02:e4:69:da:1c:d0:69:9e:14:c8:
38:5e:e4:e9:cc:12:a6:0f:ab:75:45:3e:da:7d:d0:70:e6:f8:
dc:08:d3:2a:cb:e3:07:e3:c3:10:df:aa:bd:64:95:12:9f:67:
05:cf:42:2e:13:8a:b9:90:f8:63:73:50:54:91:43:ba:84:14:
f9:0f:f2:0d:44:3e:41:38:92:bc:9d:69:0b:66:a6:0d:db:f6:
f4:5f:af:cb:d3:20:84:ba:ea:05:27:bc:7c:58:8f:a5:68:41:
8b:05:39:e4:ce:b5:b6:d9:34:82:c3:fd:60:47:62:f1:7a:4e:
2f:11:01:0b:f0:cc:a1:84:91:2b:51:2a:78:ed:75:ce:a5:75:
82:9e:35:ce:9b:eb:1c:e9:e4:45:41:fa:7c:50:ea:13:dc:f0:
d8:b0:fe:94:d2:1b:c4:79:34:27:06:d7:09:af:32:db:77:e2:
c6:08:43:e8:88:07:13:f2:6e:da:b7:18:ad:ec:ab:42:2a:da:
72:25:22:d8:b1:73:dc:7f:5c:91:43:27:1b:01:c2:7b:41:53:
a1:d1:af:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:37 2026 by rpki-client