Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File: VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier: Uq21ASfQ+DHKJPW4s3K+M/wxVMiSZDb7F+zUOdCSz7Y=
Subject key identifier: F8:39:65:B2:31:B9:53:14:39:FD:13:AC:48:92:8F:48:89:53:87:09
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial: 019D2A047E285296998DFDE8D1C105AE5B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number: 05D0
Signing time: Thu 26 Mar 2026 12:00:30 +0000
Manifest this update: Thu 26 Mar 2026 12:00:30 +0000
Manifest next update: Fri 27 Mar 2026 12:00:30 +0000
Files and hashes: 1: 2a9VKo9Dygu2NWBsV6PkIP0GLhw.roa (hash: Pbqfh39q7ebmoTqxhZo7XwgfRkdtMrqgxhzD81aDOFo=)
2: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: D0O3lCGESeygYBFyzejoyfCRnzO25NEZ3RUvLClLKTs=)
3: sFbjjm9G4nIcCl6eddoCOU60Adg.roa (hash: s7stSepgHsyCZyovoxvn1tgIewGdFX/4iFQZDg8eOb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:7e:28:52:96:99:8d:fd:e8:d1:c1:05:ae:5b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Validity
Not Before: Mar 26 12:00:30 2026 GMT
Not After : Mar 27 12:00:30 2026 GMT
Subject: CN=f83965b231b9531439fd13ac48928f4889538709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:38:96:d3:ee:5b:31:63:02:48:ba:1c:7b:
c5:42:5c:42:9d:d9:f7:d2:7a:b4:0f:ba:50:d4:73:
ab:0c:f9:56:c6:8c:c9:bb:eb:f5:20:03:7c:3a:aa:
86:9e:a7:1b:63:95:b9:80:55:f7:2b:7b:90:f0:72:
02:8d:56:4f:0b:d1:97:17:8d:9d:21:6a:d7:f5:c6:
73:74:74:23:ab:3b:90:24:d1:e5:b5:1f:ce:9e:75:
c7:19:cf:2a:b3:56:04:4a:28:44:26:76:f0:ff:36:
a8:52:97:08:09:c8:50:5c:ab:43:94:db:92:74:8f:
15:f3:fa:49:fd:b1:b7:65:fe:bf:92:9a:a8:ae:35:
47:9d:68:b7:d4:c2:34:43:08:f7:bd:56:15:2b:9c:
4c:d9:ea:99:7e:e4:b3:f5:64:77:e1:35:6a:5e:5f:
21:c9:c2:1e:43:35:ba:85:f8:1a:03:76:24:f7:7c:
4c:bb:1b:bb:47:e7:2f:72:df:00:e7:ed:95:76:ab:
12:cb:ac:0d:f4:eb:96:5f:54:a0:85:da:08:41:12:
d0:94:b6:da:1a:90:e1:3b:a9:2d:aa:ee:91:d0:73:
be:e6:70:fb:11:88:e4:89:8d:42:89:6b:71:06:45:
91:b4:8d:b8:e6:e1:3a:27:49:a8:bb:ff:02:b5:e1:
4b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:39:65:B2:31:B9:53:14:39:FD:13:AC:48:92:8F:48:89:53:87:09
X509v3 Authority Key Identifier:
keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:62:97:d8:0c:0a:17:4d:d5:11:94:cb:ef:50:a6:19:b7:1d:
a8:88:49:4b:f6:76:a4:bc:05:ab:d6:c0:8e:05:90:08:8b:07:
68:05:d1:78:1c:57:3f:25:21:1b:1d:87:40:e7:3c:49:45:7a:
3b:bd:dc:9b:ec:bc:56:75:31:ed:6a:28:d3:87:9b:1f:01:d5:
77:fc:3c:4a:56:5c:a1:96:4c:40:a1:ec:c0:46:12:9d:2e:1c:
2b:0d:d2:05:58:d9:6b:80:22:9b:3d:cf:b6:97:e6:75:65:4e:
1c:ce:ab:8c:18:1e:ca:3f:1a:8f:5b:67:01:38:98:a7:cc:c2:
95:7a:2d:d5:74:d6:6d:27:88:c9:c8:f2:67:0c:07:0a:91:3c:
a8:47:bc:9e:af:7e:59:ef:68:7e:64:de:91:dc:15:ee:12:f3:
b3:55:70:a6:46:58:02:24:70:c5:8a:dc:e6:31:cf:9a:ed:c5:
0e:a0:c9:e1:03:7f:fb:1e:d6:2e:d2:c6:14:9c:8d:7c:fe:91:
d6:4a:e1:ac:cd:b7:32:60:32:6d:59:c8:34:eb:b2:9b:10:34:
99:f6:86:76:50:2e:23:bc:c2:50:2c:8b:82:48:77:83:9a:e8:
29:de:b8:02:ec:37:e0:c3:b7:33:4d:8f:0d:1d:e7:73:94:c7:
05:eb:ed:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:17 2026 by rpki-client