Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
File: VZcyBKNpaAWG3if5RvyBZlYyqoM.mft (raw, json)
Hash identifier: HUCvYe+aKz9VzqH4s5ltnYuZz7wseUq9buWIp/DrQKw=
Subject key identifier: 0C:FD:34:AF:95:D7:13:3A:EB:B1:E4:64:EA:27:B7:42:D8:D2:EA:38
Authority key identifier: 55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
Certificate issuer: /CN=55973204a369680586de27f946fc81665632aa83
Certificate serial: 019D284E3491D579E5F44E1011F47B94C74F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
Manifest number: 03A7
Signing time: Thu 26 Mar 2026 04:01:47 +0000
Manifest this update: Thu 26 Mar 2026 04:01:47 +0000
Manifest next update: Fri 27 Mar 2026 04:01:47 +0000
Files and hashes: 1: VZcyBKNpaAWG3if5RvyBZlYyqoM.crl (hash: 8x47k95yMcwrZeumVpMEJognkFnxGnQYprcH1ymkzME=)
2: p7xlQ5fQEJFr9otgIpR7QV4leo8.roa (hash: pzJT1nif0fL8arEey872KnfNwYpzD/Gw+qoudSccqg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:34:91:d5:79:e5:f4:4e:10:11:f4:7b:94:c7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55973204a369680586de27f946fc81665632aa83
Validity
Not Before: Mar 26 04:01:47 2026 GMT
Not After : Mar 27 04:01:47 2026 GMT
Subject: CN=0cfd34af95d7133aebb1e464ea27b742d8d2ea38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:d3:86:8c:f1:a2:a4:1b:df:0d:26:52:e7:
66:c3:ec:75:0c:ec:3a:0b:c4:56:e8:ab:c8:94:40:
d7:a7:d6:82:e3:0c:e3:06:64:c2:16:3f:5b:1e:69:
df:c3:70:2d:8a:80:82:31:3f:51:e2:25:e5:c4:f2:
dc:ca:52:a4:e2:cc:e7:cc:88:95:c3:51:f7:16:ad:
5c:38:50:31:69:95:60:8f:29:0a:16:4d:d0:7b:c1:
3f:c7:6e:af:94:70:d3:90:91:b8:76:30:f5:a6:93:
12:59:70:a1:e7:72:8f:c3:77:03:43:2f:96:dd:d4:
6c:61:3f:42:c4:be:6a:6c:4f:2e:77:2b:4e:24:bc:
f9:b1:b7:1b:3b:2c:89:bc:fe:c8:c9:5f:5b:38:0d:
62:00:0d:ee:d8:75:3b:e8:95:36:26:ea:9d:fb:4e:
2a:76:c7:a6:a2:4c:88:9d:ab:8c:ab:8e:17:97:47:
c4:15:b6:fd:15:f9:c3:5e:19:b4:c9:72:31:d1:c0:
2b:f1:da:d4:d5:04:e0:c4:e6:c8:ad:97:96:56:a8:
6f:bb:a7:e2:50:a5:54:3f:ce:bb:a3:a0:a6:61:c9:
3d:75:73:af:69:a7:3a:e4:56:ff:e5:26:08:9f:5c:
17:8f:a6:02:b8:38:89:38:8e:8f:dd:74:f1:bf:ea:
d4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FD:34:AF:95:D7:13:3A:EB:B1:E4:64:EA:27:B7:42:D8:D2:EA:38
X509v3 Authority Key Identifier:
keyid:55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:29:01:a1:0d:32:2b:5b:82:14:4f:ce:62:d7:e9:a9:b2:97:
d7:59:35:df:a6:cd:d9:4c:12:38:e7:a1:02:6f:07:0f:f7:a7:
65:88:15:51:b7:6d:7c:b3:78:36:09:d8:54:d2:42:35:d6:cb:
b0:19:f0:c7:0d:81:54:09:2b:8e:28:ba:b0:b9:de:ca:84:07:
d8:5b:23:c9:ee:a2:bd:0c:b4:e3:33:d7:97:4d:7a:fa:fd:92:
87:c6:21:6e:5e:16:f0:5f:ce:d2:3e:d9:2b:93:3c:dc:15:aa:
dc:98:eb:89:ea:27:59:27:2b:55:5c:4f:80:5e:c4:3a:d6:e2:
e9:3a:9d:92:92:d6:55:9f:cc:f8:81:c3:04:e4:fb:0d:56:69:
8c:dd:2e:05:3a:79:88:7b:07:fe:70:fa:b6:c1:36:4b:9a:7f:
bb:66:e6:58:93:7b:09:4c:04:73:18:01:e0:08:9e:c2:1b:09:
1e:a0:a8:96:68:78:45:e4:c9:99:69:e8:da:d8:03:87:8b:45:
51:59:d2:6d:50:f3:98:8c:ab:58:57:d6:8c:b5:55:3c:a9:0d:
f9:2d:47:4c:5a:f7:15:ab:6c:d1:b1:6b:ba:28:ba:c5:f4:b0:
0d:eb:1d:a2:28:5a:7f:81:5d:35:10:0e:39:d6:e9:d8:e2:8c:
8b:83:7a:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTjSR1Xnl9E4QEfR7lMdPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OTczMjA0YTM2OTY4MDU4NmRlMjdmOTQ2ZmM4MTY2NTYz
MmFhODMwHhcNMjYwMzI2MDQwMTQ3WhcNMjYwMzI3MDQwMTQ3WjAzMTEwLwYDVQQD
EygwY2ZkMzRhZjk1ZDcxMzNhZWJiMWU0NjRlYTI3Yjc0MmQ4ZDJlYTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhzThozxoqQb3w0mUudmw+x1DOw6
C8RW6KvIlEDXp9aC4wzjBmTCFj9bHmnfw3AtioCCMT9R4iXlxPLcylKk4sznzIiV
w1H3Fq1cOFAxaZVgjykKFk3Qe8E/x26vlHDTkJG4djD1ppMSWXCh53KPw3cDQy+W
3dRsYT9CxL5qbE8udytOJLz5sbcbOyyJvP7IyV9bOA1iAA3u2HU76JU2Juqd+04q
dsemokyInauMq44Xl0fEFbb9FfnDXhm0yXIx0cAr8drU1QTgxObIrZeWVqhvu6fi
UKVUP867o6CmYck9dXOvaac65Fb/5SYIn1wXj6YCuDiJOI6P3XTxv+rUeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAz9NK+V1xM667HkZOont0LY0uo4MB8GA1UdIwQY
MBaAFFWXMgSjaWgFht4n+Ub8gWZWMqqDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlpjeUJLTnBhQVdHM2lmNVJ2eUJabFl5cW9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iMzcyMTYtM2VhNi00ZjkwLTk4M2It
MDljODE0OGJkMjNmLzEvVlpjeUJLTnBhQVdHM2lmNVJ2eUJabFl5cW9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iMzcyMTYtM2VhNi00ZjkwLTk4M2ItMDljODE0OGJkMjNm
LzEvVlpjeUJLTnBhQVdHM2lmNVJ2eUJabFl5cW9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4CkBoQ0y
K1uCFE/OYtfpqbKX11k136bN2UwSOOehAm8HD/enZYgVUbdtfLN4NgnYVNJCNdbL
sBnwxw2BVAkrjii6sLneyoQH2Fsjye6ivQy04zPXl016+v2Sh8Yhbl4W8F/O0j7Z
K5M83BWq3JjrieonWScrVVxPgF7EOtbi6TqdkpLWVZ/M+IHDBOT7DVZpjN0uBTp5
iHsH/nD6tsE2S5p/u2bmWJN7CUwEcxgB4AiewhsJHqColmh4ReTJmWno2tgDh4tF
UVnSbVDzmIyrWFfWjLVVPKkN+S1HTFr3Fats0bFruii6xfSwDesdoihaf4FdNRAO
Odbp2OKMi4N6IQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:40:06 2026 by rpki-client