Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
File: VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft (raw, json)
Hash identifier: nWW/f4umWXQI4v8aeJQ4MtKPd22TlZk9T15e6NCb8ro=
Subject key identifier: 20:5B:66:0F:F1:66:E6:AB:3A:3C:41:7C:55:49:60:58:F7:79:DD:F3
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 019D254CA9335130CC98E582AFEDC8B209B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
Manifest number: 1408
Signing time: Wed 25 Mar 2026 14:01:14 +0000
Manifest this update: Wed 25 Mar 2026 14:01:14 +0000
Manifest next update: Thu 26 Mar 2026 14:01:14 +0000
Files and hashes: 1: CZLgI1TrOoXIuuR8mtRn5Oxdnrc.roa (hash: aPXgiMnEH0aukIEV+u/T5KK1iHMqS2/X9emnoyzGOAM=)
2: SLZtN31ceYrOky3sUddoMo-Zyd0.asa (hash: Mg1W7yj5mjt/I157Chfa/2ODdFHcKS2JBnmxs2U+y/4=)
3: VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl (hash: q4DxdjzFtyMB8g4A+fgpGzGlynC73Ua53ggrJ+n6n8k=)
4: YhZ9fwff9w4xgatIGpRL14zM3PM.roa (hash: iA9BHQGCf6MQBqEfoa7a5mJjbUujB8oZXq8R3pndWb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:a9:33:51:30:cc:98:e5:82:af:ed:c8:b2:09:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Mar 25 14:01:14 2026 GMT
Not After : Mar 26 14:01:14 2026 GMT
Subject: CN=205b660ff166e6ab3a3c417c55496058f779ddf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:93:65:ff:7f:77:27:42:d4:f2:ae:8a:8b:
82:15:89:de:08:af:3c:8f:c3:46:af:76:41:c9:e8:
98:e5:0c:cf:cd:c6:63:f2:9f:bc:7e:7c:12:db:0f:
fb:84:d6:a9:ea:f2:0b:bb:24:6a:e8:0b:75:2d:8b:
68:ea:c4:79:e8:c5:13:1c:81:e0:61:fc:a3:3c:91:
dc:ac:75:ce:3d:8f:05:d9:d4:65:d2:3a:b8:bd:45:
37:02:01:14:46:e9:c9:11:a5:ca:d5:35:77:87:f9:
6e:fb:a1:8d:62:61:0d:73:f9:1a:a1:fb:71:80:8a:
ca:80:54:bc:6e:68:36:45:26:f4:ba:59:b8:e4:31:
79:9d:f9:69:c4:e0:58:0b:55:30:95:b6:26:3d:e4:
91:90:bf:1a:a9:83:49:23:cc:1e:40:ea:f3:af:50:
fa:4f:39:56:50:bd:09:f3:68:ae:22:77:84:b6:13:
05:2a:77:5e:9e:62:c9:5f:36:4c:eb:32:89:42:2b:
31:ff:53:99:d1:ce:ac:29:b6:a2:f5:20:bf:e4:de:
18:3f:21:db:56:4f:d0:03:39:9e:f8:96:43:52:aa:
92:1a:2d:5c:2c:0b:96:89:fa:9c:4d:af:e2:27:ce:
dc:f9:0f:1a:cd:a9:88:db:ed:d7:44:34:7a:0e:42:
f1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5B:66:0F:F1:66:E6:AB:3A:3C:41:7C:55:49:60:58:F7:79:DD:F3
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7a:78:25:98:9d:da:49:fe:cd:0a:78:20:9f:ae:0d:9c:e9:
e1:52:f3:8d:e8:73:bc:1e:e4:56:bc:6b:76:c1:b7:69:af:4a:
4d:76:bc:31:99:48:d7:5f:e2:01:86:d9:b8:d1:db:0e:6f:95:
96:97:69:3d:22:18:d1:78:5c:15:e1:6c:6d:0e:ac:8f:e5:7d:
f4:0b:c6:ec:3a:2b:e1:ab:d4:a3:44:b5:5a:47:04:cd:06:cc:
ec:8f:8d:f9:22:23:23:17:94:f8:55:f0:fd:ba:04:48:13:97:
d6:97:36:f7:bc:a4:b7:08:71:46:f0:90:0e:7e:51:52:4a:fa:
f3:20:e5:bd:c2:e5:4c:02:76:fd:10:58:c9:d3:1c:06:f3:b6:
2b:7e:51:e8:ea:75:10:21:30:89:87:91:51:54:80:1c:ce:b7:
06:74:d5:ab:c9:94:20:85:88:70:b0:72:5f:99:f0:d5:08:eb:
3a:6d:2a:c3:9e:cd:48:29:4c:32:f4:38:d1:a8:b7:6f:f6:e6:
b8:46:19:cd:93:9f:e7:1d:eb:c6:7a:da:06:15:a7:9f:ca:c6:
96:09:fa:1a:28:82:19:db:e8:b8:88:64:e3:90:71:b6:fd:1c:
be:97:e8:aa:13:a1:62:ed:f1:e6:1c:de:15:c4:39:2b:28:aa:
96:18:e4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:19:30 2026 by rpki-client