Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b945c0-4e29-4a15-bdf6-2f3be062858d/1/VzBZUuVZXOl-QzVLLv3cewc72ck.mft
File: VzBZUuVZXOl-QzVLLv3cewc72ck.mft (raw, json)
Hash identifier: 7bQKp12X1qiVrS2J3vN8Kkgyin5dtohTIBFhpioZD58=
Subject key identifier: 63:AA:23:FD:C1:2D:18:D5:19:47:F9:98:58:2A:81:2C:D0:7E:8A:6C
Authority key identifier: 57:30:59:52:E5:59:5C:E9:7E:43:35:4B:2E:FD:DC:7B:07:3B:D9:C9
Certificate issuer: /CN=57305952e5595ce97e43354b2efddc7b073bd9c9
Certificate serial: 019D26282113B0C20F9D231AAB6C0F14AF7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzBZUuVZXOl-QzVLLv3cewc72ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b945c0-4e29-4a15-bdf6-2f3be062858d/1/VzBZUuVZXOl-QzVLLv3cewc72ck.mft
Manifest number: 019F
Signing time: Wed 25 Mar 2026 18:00:57 +0000
Manifest this update: Wed 25 Mar 2026 18:00:57 +0000
Manifest next update: Thu 26 Mar 2026 18:00:57 +0000
Files and hashes: 1: VzBZUuVZXOl-QzVLLv3cewc72ck.crl (hash: V/o4RM0ep9CrrbnMhMMQQV1UzSScXYgXRSwGXx9VHIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b945c0-4e29-4a15-bdf6-2f3be062858d/1/VzBZUuVZXOl-QzVLLv3cewc72ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b945c0-4e29-4a15-bdf6-2f3be062858d/1/VzBZUuVZXOl-QzVLLv3cewc72ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzBZUuVZXOl-QzVLLv3cewc72ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:21:13:b0:c2:0f:9d:23:1a:ab:6c:0f:14:af:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57305952e5595ce97e43354b2efddc7b073bd9c9
Validity
Not Before: Mar 25 18:00:57 2026 GMT
Not After : Mar 26 18:00:57 2026 GMT
Subject: CN=63aa23fdc12d18d51947f998582a812cd07e8a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:10:dc:bb:22:1a:03:58:53:be:7c:8e:5a:cc:
b5:b9:23:63:bc:fd:1b:de:47:0a:f4:2b:5c:6a:46:
ce:82:b5:11:c4:9c:6a:a8:aa:56:e7:e0:7c:ec:6d:
80:97:0c:bc:43:43:7a:ff:fc:29:f0:fe:eb:4b:c2:
a2:47:4e:f3:6e:3e:77:ad:01:58:73:0e:10:cb:bc:
29:61:bb:35:24:32:94:42:40:52:68:bf:63:8d:7b:
0b:fd:63:4c:9f:94:f5:b6:3c:60:50:c4:59:70:95:
c1:c9:5f:24:f1:a2:4e:9a:f1:5c:47:f2:ba:a3:66:
7e:87:9f:3a:08:67:03:63:5c:8a:9c:e2:fa:e2:e4:
fd:ed:9f:1f:b6:c0:31:ee:2c:38:3f:6b:62:23:8a:
72:be:71:f0:f4:dc:61:91:87:c2:7c:18:f1:df:be:
29:74:7f:0b:cd:fa:5d:3a:7e:79:91:ca:f5:c8:0d:
2d:dc:ff:62:47:86:91:de:fb:73:d4:33:16:f7:a3:
2e:21:6e:dc:fc:b5:9a:75:9e:97:b8:60:5b:e6:95:
1d:ce:fa:4d:98:60:61:8f:db:7d:7d:c2:e4:e1:02:
07:27:d6:7a:e0:78:77:4c:0f:b8:bf:e8:ca:34:b5:
b0:b6:b4:8c:4e:fe:2e:00:99:a6:9f:9d:31:4d:15:
f3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AA:23:FD:C1:2D:18:D5:19:47:F9:98:58:2A:81:2C:D0:7E:8A:6C
X509v3 Authority Key Identifier:
keyid:57:30:59:52:E5:59:5C:E9:7E:43:35:4B:2E:FD:DC:7B:07:3B:D9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzBZUuVZXOl-QzVLLv3cewc72ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b945c0-4e29-4a15-bdf6-2f3be062858d/1/VzBZUuVZXOl-QzVLLv3cewc72ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b945c0-4e29-4a15-bdf6-2f3be062858d/1/VzBZUuVZXOl-QzVLLv3cewc72ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0b:16:79:f3:80:1e:2c:b5:9e:ec:da:52:14:b7:f2:ea:8c:
40:bc:c9:1c:2b:51:15:9c:03:0e:39:9b:d3:00:a2:8f:7d:96:
eb:bf:75:f7:0a:cd:40:c5:ad:aa:76:a7:6e:44:fc:db:62:85:
2a:af:99:bd:32:f1:96:3e:01:ce:18:70:16:69:a0:a4:46:02:
37:cd:7a:fe:be:88:d4:b1:0f:84:60:ce:b3:19:6b:69:a7:1f:
bb:7c:4e:d7:7a:1f:ae:04:5a:32:59:4c:e3:f5:38:4f:5b:1e:
a0:b6:d1:82:21:53:c9:71:c2:ec:8d:b6:93:45:f2:9a:55:03:
bc:e8:40:cc:fe:4b:d5:60:d1:33:6a:41:4b:fe:42:02:db:c1:
e6:a8:f7:6f:e3:77:1a:71:75:3c:dc:f1:49:88:9d:a8:bf:f9:
4c:4d:de:d9:1c:d2:06:88:8d:8c:2f:4b:8a:3b:15:41:7e:0a:
c1:16:d4:4d:1c:e8:81:f8:6c:86:ba:da:0c:9a:66:6e:eb:eb:
2f:00:5e:b5:98:60:75:63:27:6c:db:c7:de:db:67:7c:a8:a7:
81:93:c5:f4:55:38:eb:f1:01:f7:80:64:cf:fb:7c:da:6b:51:
ac:f1:95:4e:9a:2d:f8:3b:05:c8:eb:02:28:3b:70:f8:8b:61:
2b:1f:26:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKCETsMIPnSMaq2wPFK99MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MzA1OTUyZTU1OTVjZTk3ZTQzMzU0YjJlZmRkYzdiMDcz
YmQ5YzkwHhcNMjYwMzI1MTgwMDU3WhcNMjYwMzI2MTgwMDU3WjAzMTEwLwYDVQQD
Eyg2M2FhMjNmZGMxMmQxOGQ1MTk0N2Y5OTg1ODJhODEyY2QwN2U4YTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhDcuyIaA1hTvnyOWsy1uSNjvP0b
3kcK9CtcakbOgrURxJxqqKpW5+B87G2Alwy8Q0N6//wp8P7rS8KiR07zbj53rQFY
cw4Qy7wpYbs1JDKUQkBSaL9jjXsL/WNMn5T1tjxgUMRZcJXByV8k8aJOmvFcR/K6
o2Z+h586CGcDY1yKnOL64uT97Z8ftsAx7iw4P2tiI4pyvnHw9NxhkYfCfBjx374p
dH8LzfpdOn55kcr1yA0t3P9iR4aR3vtz1DMW96MuIW7c/LWadZ6XuGBb5pUdzvpN
mGBhj9t9fcLk4QIHJ9Z64Hh3TA+4v+jKNLWwtrSMTv4uAJmmn50xTRXzuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOqI/3BLRjVGUf5mFgqgSzQfopsMB8GA1UdIwQY
MBaAFFcwWVLlWVzpfkM1Sy793HsHO9nJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnpCWlV1VlpYT2wtUXpWTEx2M2Nld2M3MmNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iOTQ1YzAtNGUyOS00YTE1LWJkZjYt
MmYzYmUwNjI4NThkLzEvVnpCWlV1VlpYT2wtUXpWTEx2M2Nld2M3MmNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9iOTQ1YzAtNGUyOS00YTE1LWJkZjYtMmYzYmUwNjI4NThk
LzEvVnpCWlV1VlpYT2wtUXpWTEx2M2Nld2M3MmNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgsWefOA
Hiy1nuzaUhS38uqMQLzJHCtRFZwDDjmb0wCij32W67919wrNQMWtqnanbkT822KF
Kq+ZvTLxlj4BzhhwFmmgpEYCN816/r6I1LEPhGDOsxlraacfu3xO13ofrgRaMllM
4/U4T1seoLbRgiFTyXHC7I22k0XymlUDvOhAzP5L1WDRM2pBS/5CAtvB5qj3b+N3
GnF1PNzxSYidqL/5TE3e2RzSBoiNjC9LijsVQX4KwRbUTRzogfhshrraDJpmbuvr
LwBetZhgdWMnbNvH3ttnfKingZPF9FU46/EB94Bkz/t82mtRrPGVTpot+DsFyOsC
KDtw+IthKx8myg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:03 2026 by rpki-client