Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json)
Hash identifier: ApBaOw+K6sUrVHl8zjib+Q5AUmrOeB37uPpp/EXEDZ0=
Subject key identifier: CD:2A:86:F6:32:EA:AC:FC:CC:07:5E:69:30:04:CC:27:5B:AF:36:A9
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial: 01A0E5F5E58ADF58A65D14F5FDB2EDBBF71C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
Manifest number: 0B85
Signing time: Mon 28 Sep 2026 03:01:32 +0000
Manifest this update: Mon 28 Sep 2026 03:01:32 +0000
Manifest next update: Tue 29 Sep 2026 03:01:32 +0000
Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: BHffgiUxoEKVKUfkIjWY/35ofnmSfYGFnbYOiqbJGmI=)
2: gng50Ziqb6xrb3gKYd3mPMqKi20.roa (hash: Qgx/fSQr4uTOuIoJO8P5gUwe6l71dGbPdS6w5iyet3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:f5:e5:8a:df:58:a6:5d:14:f5:fd:b2:ed:bb:f7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Validity
Not Before: Sep 28 03:01:32 2026 GMT
Not After : Sep 29 03:01:32 2026 GMT
Subject: CN=cd2a86f632eaacfccc075e693004cc275baf36a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:63:02:91:98:52:34:50:37:e5:dd:58:80:
95:02:18:9e:8d:2d:89:62:24:ce:d4:e4:d2:f3:17:
aa:3c:bb:b3:d4:58:fd:e2:78:76:d9:d8:f2:04:39:
d7:58:37:d7:97:53:ab:f8:4e:a1:6d:4b:63:68:89:
4f:50:6e:d2:8f:f1:e0:c8:57:8a:5c:cf:63:3a:24:
6e:87:d0:b5:ef:b0:91:da:07:4f:f4:68:92:96:b7:
68:2c:88:46:92:fd:be:d4:0e:30:b4:28:b1:04:39:
6a:7f:55:d2:1f:7f:3f:97:35:31:42:ae:44:a8:07:
65:af:e8:93:4d:2f:52:6a:8a:06:54:34:f0:45:88:
ee:56:16:68:7b:e3:1a:a6:7b:f6:08:25:09:e7:6d:
c1:1b:3b:88:3c:f9:4c:ed:bb:31:c9:44:ed:f2:51:
ca:36:70:c1:99:48:38:f0:82:5e:4f:9c:da:da:14:
83:9e:f2:b4:26:08:bb:4b:9c:0e:30:48:ab:d1:4a:
26:07:36:68:c7:c3:57:9b:20:c7:7d:eb:53:49:18:
20:d1:a6:83:1a:7c:de:c8:27:88:8e:31:3d:82:d1:
f6:dd:78:94:4c:d9:27:15:df:40:a5:7f:34:b5:76:
1c:9f:ad:ca:29:7e:cc:51:5b:bc:a0:fb:bb:45:90:
e4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2A:86:F6:32:EA:AC:FC:CC:07:5E:69:30:04:CC:27:5B:AF:36:A9
X509v3 Authority Key Identifier:
keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:cd:c4:a1:7b:32:a2:ed:ab:8f:7f:f0:70:5a:b1:3f:83:93:
79:b4:f0:b2:16:8a:d4:b0:6f:2f:88:f1:17:7d:3f:11:46:86:
22:b4:95:b2:49:4f:7d:f2:b1:d8:16:8a:09:7d:50:8d:5f:ee:
00:07:19:df:a4:ac:e6:cc:c8:f8:55:e8:cc:bd:e5:6a:23:36:
25:49:d9:01:b2:d9:0e:fa:0e:a7:be:11:35:8f:34:f6:ed:c8:
37:fe:fc:d1:45:0e:19:b3:0b:59:27:14:64:24:68:92:3b:1b:
48:64:c9:30:7f:c6:5d:7e:af:59:2c:7d:3e:22:2e:7c:06:a2:
d6:0f:1b:31:8c:0c:d0:c7:64:c4:41:39:a6:46:e1:c5:db:cc:
9f:1f:81:d9:c6:18:0a:2b:5a:1a:6a:48:00:bc:0c:f2:d6:74:
ca:c3:fb:8f:cd:28:51:77:2e:5d:cc:b5:d4:c3:f6:f4:06:6d:
e5:dd:54:91:18:9e:40:ac:00:f9:cb:7d:99:25:bd:59:7e:53:
c3:69:7c:c8:55:aa:e3:c2:60:ba:1c:7d:9b:6e:15:2d:13:c3:
8e:56:86:a2:bd:1c:30:b3:52:6a:50:30:d0:8a:03:e3:9e:e3:
b6:93:26:a0:c7:84:71:b8:02:86:1e:c5:75:bf:54:08:78:e3:
6a:ec:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:19:20 2026 by rpki-client