Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
File: VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft (raw, json)
Hash identifier: phZRKQ3xV+GBiaaywkKZnv1xAxpJAM4ADtlSYArX1UI=
Subject key identifier: B9:BB:51:70:D8:62:52:3E:AA:D7:D6:F5:C0:36:42:0A:EC:F6:18:7D
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 01A10211E5536B53F407A309D524DAF870F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
Manifest number: 160C
Signing time: Sat 03 Oct 2026 14:01:29 +0000
Manifest this update: Sat 03 Oct 2026 14:01:29 +0000
Manifest next update: Sun 04 Oct 2026 14:01:29 +0000
Files and hashes: 1: T6MezzPBlD-bbmhzKmNPFwNmIv8.roa (hash: jsp4P2nEZMpmduMvRYgQ1VyIcfvVAi62rpnHCVogH+g=)
2: VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl (hash: Qo3vTCMH8B1yKYwTxnkEyfSUOdZMbFt0MjqnHAgtXPY=)
3: mcJa5BsloYm8JusCxlLHO776lHs.roa (hash: HbfY+iVV1KBbAx/qXvr16mnDJ38KJqAs31bIwxnI0SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:11:e5:53:6b:53:f4:07:a3:09:d5:24:da:f8:70:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Oct 3 14:01:29 2026 GMT
Not After : Oct 4 14:01:29 2026 GMT
Subject: CN=b9bb5170d862523eaad7d6f5c036420aecf6187d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4b:70:8b:52:e6:29:47:2e:9e:20:27:5b:ab:
c2:c3:09:7a:d9:d0:78:ed:4c:90:19:be:24:b2:18:
7f:f2:fd:d1:a4:44:66:bd:e5:7e:22:65:52:1b:65:
d5:2e:62:c8:ec:68:d5:9f:93:f6:15:d7:a8:a0:9d:
eb:6e:3e:86:38:eb:d2:3b:1b:f8:08:5c:eb:fa:38:
6a:95:60:32:9f:37:70:d6:60:22:41:fd:4f:36:73:
ab:1d:db:62:ce:44:03:da:9e:91:3b:a0:a5:e5:b7:
d1:80:49:56:64:b5:f0:55:28:fe:f4:9d:20:2f:f5:
b0:25:1c:86:e0:d9:cf:79:b2:53:94:0d:64:21:b2:
12:4a:25:4d:3f:5b:1f:dd:4c:98:2e:7c:58:de:4c:
23:e1:03:73:f5:37:a0:2c:c9:62:e2:38:6a:11:41:
22:ac:75:fc:53:cd:41:b8:bf:b3:c4:1c:39:82:d9:
de:a0:50:ee:aa:41:f5:5a:3a:fd:83:55:9e:45:33:
94:cf:e7:7a:7d:a9:b5:2a:47:50:89:ba:c2:5f:07:
b4:e9:58:42:f8:13:a3:33:cf:46:9a:cb:2b:0f:71:
d8:28:27:2b:37:ec:04:ce:0e:ac:76:53:e7:a9:5c:
26:ff:6c:e5:fb:74:39:18:c5:7b:f3:6b:04:18:2d:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BB:51:70:D8:62:52:3E:AA:D7:D6:F5:C0:36:42:0A:EC:F6:18:7D
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:16:0d:14:13:8f:9e:1b:87:65:5d:d6:6f:42:ce:18:5e:e8:
7a:25:35:a9:63:4e:d1:4a:25:a5:aa:d7:10:14:c4:46:78:fd:
6e:b5:eb:f2:aa:d9:28:36:ce:c2:3d:b0:35:9a:07:79:0d:2a:
86:c9:e0:d4:f2:11:61:3a:55:82:62:4d:02:df:c4:cf:a9:d5:
fe:41:c7:d2:bb:6d:c6:38:fa:1c:b0:b2:15:66:92:f9:70:c9:
83:8a:68:d8:7b:ce:c8:a0:f1:94:b3:b3:fb:90:cc:4a:1c:7d:
e7:c6:f1:32:81:fa:44:3b:a7:00:e7:fc:7c:fa:7f:0e:1e:f6:
6c:60:be:d1:37:c6:87:48:be:ec:af:58:6e:cc:ec:55:c7:02:
f2:cd:e0:cd:47:11:2b:bc:a3:09:50:29:9b:77:37:c6:3b:b5:
ac:dc:1f:11:67:6b:d2:9d:a1:5b:a7:43:8b:0c:ee:22:e5:bf:
90:18:a7:9b:34:4c:83:28:b2:ca:48:9b:96:ff:fc:36:30:8b:
a9:38:d9:11:b0:8c:0c:4c:11:22:a4:35:71:2a:c8:5e:9d:be:
fb:97:05:ba:52:96:7a:b7:74:6c:11:51:dd:4b:53:c7:a4:b4:
e1:8e:99:06:44:68:4a:c8:f3:e6:f0:bf:e7:5b:4f:f9:03:6b:
9e:89:1c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:52:03 2026 by rpki-client