Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json)
Hash identifier: 6udZIo256SOR/3MOwHNTUFVB63ZuJzibKDnomgZPlD8=
Subject key identifier: A8:0F:48:2F:68:49:E7:E1:28:17:C9:C0:DC:97:9A:E1:D6:E4:34:7D
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial: 019D2A0459F95BC0E091588F83E8A0D3C6E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
Manifest number: 0996
Signing time: Thu 26 Mar 2026 12:00:21 +0000
Manifest this update: Thu 26 Mar 2026 12:00:21 +0000
Manifest next update: Fri 27 Mar 2026 12:00:21 +0000
Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: BHQA96PpllbxLkzatmfy9Wr5+t3uJHIeWYjE+MhSFdQ=)
2: gng50Ziqb6xrb3gKYd3mPMqKi20.roa (hash: Qgx/fSQr4uTOuIoJO8P5gUwe6l71dGbPdS6w5iyet3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:59:f9:5b:c0:e0:91:58:8f:83:e8:a0:d3:c6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Validity
Not Before: Mar 26 12:00:21 2026 GMT
Not After : Mar 27 12:00:21 2026 GMT
Subject: CN=a80f482f6849e7e12817c9c0dc979ae1d6e4347d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:89:ee:d1:35:36:37:c5:e6:ba:1c:96:1a:
3d:94:54:88:7d:e7:fa:47:b6:2b:2a:ec:5c:7c:0d:
35:82:d1:d3:3e:79:48:90:a3:19:00:dc:d7:78:d6:
18:e5:e6:2a:6a:7d:b2:a7:4e:a7:6d:f0:1c:da:cc:
24:dd:6f:08:a5:b3:cf:1c:48:10:4c:1f:72:54:4f:
22:e8:c0:dc:69:92:0b:a0:c5:e8:84:d8:11:94:5c:
2e:5f:8a:c2:c6:af:fb:67:48:0d:33:20:2e:b9:19:
e2:0b:bd:8a:8c:fc:c5:f3:7c:50:26:e0:b6:7b:ae:
2e:54:82:7e:f8:de:fd:a1:69:6e:a1:fa:e0:0e:8b:
7d:96:00:cb:bd:55:83:dc:c6:95:e3:41:0e:91:bc:
ef:f4:94:aa:65:1c:a6:4e:b2:79:b2:4c:b0:da:f1:
ae:b0:7c:76:fd:2e:5f:5e:79:7e:db:0e:b6:3d:b9:
42:1f:eb:0d:cd:ae:6a:a5:6a:ef:ae:1d:86:7d:7e:
fb:0e:83:f5:58:61:db:83:f8:99:f1:43:44:e2:4f:
56:eb:c0:27:5c:fb:d4:30:b9:7d:72:45:11:08:ed:
b6:26:61:2d:63:84:9e:57:52:b1:a9:52:02:52:df:
13:f0:bb:80:bf:27:72:45:e6:79:ba:1d:e0:f7:db:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0F:48:2F:68:49:E7:E1:28:17:C9:C0:DC:97:9A:E1:D6:E4:34:7D
X509v3 Authority Key Identifier:
keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:92:dc:c1:93:5f:d5:3e:c9:18:19:70:f2:3d:0c:c0:5d:11:
65:68:c4:a6:be:4d:bf:89:63:8d:29:e8:2c:50:45:bd:8f:6e:
ff:b3:82:3f:ba:55:26:85:e4:14:0d:a8:bc:f4:28:26:12:9a:
23:9f:69:17:7f:ab:cf:04:e3:ca:1a:c0:eb:3d:8a:32:d0:00:
07:b6:7b:0c:e6:bd:e1:dc:c2:09:1e:f5:89:1c:1a:7a:3b:6d:
4d:09:49:b3:6e:41:a3:20:43:a7:67:99:fe:14:21:76:8b:60:
8c:62:9b:b2:e1:a2:30:3f:b8:a9:8f:80:a8:b2:a1:35:0c:f8:
f0:0c:bb:df:1a:2c:74:83:78:ff:c1:18:e5:2a:f3:e4:3a:91:
5f:51:b0:0c:16:c5:e4:44:73:65:fc:33:f1:3c:80:d3:6e:1e:
68:21:0f:1e:a7:09:7f:5c:42:01:53:66:e5:6d:96:49:27:bd:
66:69:3c:44:f4:93:d1:f3:e6:da:b3:af:64:5d:69:69:1a:cf:
09:a6:dc:14:ea:8c:87:53:3f:83:23:0e:85:c8:8f:a8:2d:0c:
19:32:50:90:73:e9:ce:9f:a4:26:69:1b:4d:d3:9c:1e:f6:b9:
67:db:ff:d5:96:5b:28:33:8f:34:53:4f:e8:76:95:8d:c9:40:
67:27:bd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:10:10 2026 by rpki-client