Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
File: VzzskGOoh0GEGQiwxSl_zbtDlTA.mft (raw, json)
Hash identifier: wsaw1Yn2W3Z4YjziDtphABfLBZa1eCE3iM6DpTuMBug=
Subject key identifier: 65:B4:AD:5C:9F:76:C9:E7:52:D8:97:F1:EC:89:C0:6D:A6:CE:C0:26
Authority key identifier: 57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
Certificate issuer: /CN=573cec9063a88741841908b0c5297fcdbb439530
Certificate serial: 019D25F1F0EDA7BF9DE9A146F8C3E0F687BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
Manifest number: 01A2
Signing time: Wed 25 Mar 2026 17:01:45 +0000
Manifest this update: Wed 25 Mar 2026 17:01:45 +0000
Manifest next update: Thu 26 Mar 2026 17:01:45 +0000
Files and hashes: 1: VzzskGOoh0GEGQiwxSl_zbtDlTA.crl (hash: kVbpVQpyO7QdH+8EUA2p2rRZc0/TkJHrB13ofwsEtfs=)
2: ZLc3hqqFoBFC9frMdPPPbRsPPRU.roa (hash: pd4K3nJ6Nw5wAHsdgLg8h3X1zrFnNuvfNOPXjKOzRnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:f0:ed:a7:bf:9d:e9:a1:46:f8:c3:e0:f6:87:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573cec9063a88741841908b0c5297fcdbb439530
Validity
Not Before: Mar 25 17:01:45 2026 GMT
Not After : Mar 26 17:01:45 2026 GMT
Subject: CN=65b4ad5c9f76c9e752d897f1ec89c06da6cec026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:73:88:76:e3:64:5e:99:10:4f:35:e4:a0:
49:f5:45:fd:b0:f6:18:1b:a6:9b:81:f4:a1:56:b8:
e6:f5:37:cc:e9:87:ef:ba:38:25:8b:ec:f0:b0:b2:
fd:f1:aa:a0:bf:82:16:0d:e1:5c:c8:86:47:6c:73:
28:2d:0e:20:24:9d:7e:db:3a:ea:7d:d3:90:df:a7:
63:73:df:17:25:fd:a8:07:ea:38:0f:93:f6:7b:b1:
f5:36:d1:16:55:70:2e:94:b1:75:07:94:48:4f:40:
80:b0:96:ba:29:5c:3b:e6:1e:96:10:db:83:4a:27:
85:60:8c:76:9b:30:f8:45:c2:30:ff:62:78:20:39:
2a:fd:bd:e6:fc:b7:0e:01:23:52:e8:88:50:e6:e3:
90:de:a4:35:d9:f3:27:dd:1a:85:18:2f:f5:a2:76:
8f:f4:ee:aa:be:bc:8e:32:dc:21:01:8a:e3:06:e1:
df:dd:ae:4b:49:5b:3e:9f:f8:89:6e:75:a0:70:7b:
dc:85:74:c2:5f:40:29:9a:8b:17:74:ee:cb:e6:16:
66:07:fa:31:ec:1b:74:88:9b:dd:46:11:fe:11:5c:
de:61:ff:36:29:1a:62:96:39:26:ee:20:91:44:79:
57:16:af:cb:14:ca:dc:24:4e:86:e3:cf:4a:ae:00:
bc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B4:AD:5C:9F:76:C9:E7:52:D8:97:F1:EC:89:C0:6D:A6:CE:C0:26
X509v3 Authority Key Identifier:
keyid:57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:86:5a:73:2c:ec:24:2f:67:3d:49:1d:d3:1d:cd:6c:d2:fe:
d4:51:5a:b4:3c:70:4c:50:2a:de:b3:8f:ae:da:cf:5e:16:2c:
f3:88:ca:24:89:b2:a4:03:4f:4f:36:f5:49:b2:3e:c2:1f:ff:
df:7a:84:43:e5:52:55:0c:43:80:ca:bb:14:f6:1a:cf:45:e3:
22:5f:f5:11:0c:3f:d4:a5:c1:a9:a3:d9:93:5f:87:a3:3b:05:
57:9c:e7:d0:6d:c0:3b:9f:d9:7f:bc:e4:5b:c0:d3:e8:d1:09:
95:ed:fc:9b:76:f4:97:85:6e:7b:3f:98:0f:3e:e4:93:a2:2d:
03:72:61:66:28:22:7e:0d:99:3a:f1:65:0e:48:e4:ac:85:ed:
c5:dc:e2:2a:e4:0e:17:56:07:46:31:32:bc:41:26:0e:4c:f0:
69:e8:16:a7:d2:00:a3:0b:ce:85:75:71:64:3a:3b:6a:3a:a0:
82:cc:96:80:20:4c:47:84:52:c2:f5:9e:6f:cc:d4:c0:24:bf:
94:14:80:47:32:4e:53:1d:c7:ee:e8:0c:83:b2:96:00:df:5d:
84:9b:00:4e:5c:08:59:4c:26:55:ab:59:ce:03:19:04:3b:6a:
0e:f4:33:d3:dd:d1:4b:ba:bd:db:11:dd:d4:9a:73:a0:f8:56:
fe:c2:b5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:54 2026 by rpki-client