Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
File: VZNJZEMjMV-AbcZMpNntlVd2J1c.mft (raw, json)
Hash identifier: zKJuLfS1VmE7fe3h4hyWXMkgOy41vcddy1EH5s9JT5Y=
Subject key identifier: 52:20:B8:C4:B9:BF:27:99:56:9D:1E:E5:A6:1C:D8:A6:BB:43:CB:21
Authority key identifier: 55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
Certificate issuer: /CN=559349644323315f806dc64ca4d9ed9557762757
Certificate serial: 019D284E254FBE2BAB358E445F5276935942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
Manifest number: 0CE1
Signing time: Thu 26 Mar 2026 04:01:43 +0000
Manifest this update: Thu 26 Mar 2026 04:01:43 +0000
Manifest next update: Fri 27 Mar 2026 04:01:43 +0000
Files and hashes: 1: LjJLqjcnZZvUB7mKjCH-7GZzeLM.roa (hash: A/qN/8X4NxsgNcRehmeeZdCg0e5U0+miw/dGRfft/VI=)
2: VZNJZEMjMV-AbcZMpNntlVd2J1c.crl (hash: zNBBTSkn62OI1vgMgCX/2hoh/jnoEBaDeT5lsmGmnCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:25:4f:be:2b:ab:35:8e:44:5f:52:76:93:59:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559349644323315f806dc64ca4d9ed9557762757
Validity
Not Before: Mar 26 04:01:43 2026 GMT
Not After : Mar 27 04:01:43 2026 GMT
Subject: CN=5220b8c4b9bf2799569d1ee5a61cd8a6bb43cb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:27:54:da:eb:2c:a4:8f:53:f5:89:2f:e3:
35:e7:63:fc:d8:e8:53:e8:7c:65:3a:82:83:05:db:
cb:57:d0:8e:71:86:61:7f:91:73:06:da:9f:b7:a0:
a8:82:13:73:25:46:12:eb:46:96:eb:b8:ae:69:d8:
cf:a8:a0:c5:be:c5:b9:99:45:55:d2:2a:42:6b:85:
96:93:e8:71:a0:ed:45:c4:50:db:5d:0a:54:52:c7:
b8:88:6d:8f:e0:a0:a4:d2:c7:49:db:55:5d:8f:39:
32:50:87:40:07:0f:4f:a5:d0:60:78:70:84:03:19:
03:f5:37:35:7e:30:d9:36:89:16:15:4a:ab:88:f9:
48:38:de:3f:d3:16:cb:e9:b9:f3:ed:00:fb:ca:17:
dd:ac:a2:7d:0b:fa:94:a4:b9:66:88:0a:24:53:b2:
0f:98:0f:4a:a4:97:61:f7:82:1a:e4:cf:29:d7:e8:
65:30:a7:02:8d:ff:ab:cc:c2:02:2c:94:97:d1:88:
e6:c4:03:ad:77:21:b9:e5:80:3d:d8:06:2f:ab:d9:
a1:af:26:b4:b2:bb:21:ed:fc:26:62:4a:57:2f:99:
5f:90:f2:ac:42:67:14:f3:fc:26:2c:c3:1e:5d:a5:
47:47:cb:10:05:15:be:2c:8c:a9:d6:37:b9:d6:86:
fe:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:20:B8:C4:B9:BF:27:99:56:9D:1E:E5:A6:1C:D8:A6:BB:43:CB:21
X509v3 Authority Key Identifier:
keyid:55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:dc:19:06:3d:98:d3:aa:6b:fc:a9:9b:d5:ca:71:11:00:41:
d7:a5:23:33:0d:f4:1e:0f:c8:7f:51:9d:5b:06:26:fc:b9:39:
87:ee:9b:53:97:d1:74:ce:ba:8b:d6:9e:fd:3a:2b:f5:d4:e3:
41:b4:93:80:3f:8d:17:08:c9:68:5d:b4:c9:78:70:73:a6:a6:
05:72:c8:3f:09:a8:a8:80:29:64:bf:8e:d0:5b:0f:58:2f:29:
42:51:21:31:df:99:7d:6a:44:df:0b:6f:10:e6:37:b2:09:4f:
4d:02:83:32:79:c2:7c:a0:0d:b3:63:aa:0f:98:25:0c:b3:67:
8a:33:2e:ad:2e:fc:a4:2d:2f:31:24:bc:e6:57:b0:a9:a1:a6:
a3:b0:e3:d8:ac:57:d6:b4:39:fb:50:08:40:3b:76:70:a7:8a:
8b:60:37:7a:c1:e6:ed:c0:41:09:8a:47:a2:da:f1:1f:52:b1:
72:70:bb:40:47:21:6d:fc:c6:03:63:b9:7a:8b:ca:08:07:2f:
94:0d:dd:fc:db:2a:86:3c:bd:0c:ce:88:1b:70:75:c0:b0:cb:
b8:61:c6:50:7d:c2:5f:66:10:c4:ef:eb:12:19:2a:9e:4b:d8:
4e:a8:41:26:94:cf:58:48:5c:b6:17:2c:21:85:ab:27:a1:05:
ec:e8:72:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTiVPviurNY5EX1J2k1lCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OTM0OTY0NDMyMzMxNWY4MDZkYzY0Y2E0ZDllZDk1NTc3
NjI3NTcwHhcNMjYwMzI2MDQwMTQzWhcNMjYwMzI3MDQwMTQzWjAzMTEwLwYDVQQD
Eyg1MjIwYjhjNGI5YmYyNzk5NTY5ZDFlZTVhNjFjZDhhNmJiNDNjYjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BMnVNrrLKSPU/WJL+M152P82OhT
6HxlOoKDBdvLV9COcYZhf5FzBtqft6CoghNzJUYS60aW67iuadjPqKDFvsW5mUVV
0ipCa4WWk+hxoO1FxFDbXQpUUse4iG2P4KCk0sdJ21VdjzkyUIdABw9PpdBgeHCE
AxkD9Tc1fjDZNokWFUqriPlION4/0xbL6bnz7QD7yhfdrKJ9C/qUpLlmiAokU7IP
mA9KpJdh94Ia5M8p1+hlMKcCjf+rzMICLJSX0YjmxAOtdyG55YA92AYvq9mhrya0
srsh7fwmYkpXL5lfkPKsQmcU8/wmLMMeXaVHR8sQBRW+LIyp1je51ob+DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIguMS5vyeZVp0e5aYc2Ka7Q8shMB8GA1UdIwQY
MBaAFFWTSWRDIzFfgG3GTKTZ7ZVXdidXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTIt
NjA2NmQ4OWYwNWI4LzEvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTItNjA2NmQ4OWYwNWI4
LzEvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddwZBj2Y
06pr/Kmb1cpxEQBB16UjMw30Hg/If1GdWwYm/Lk5h+6bU5fRdM66i9ae/Tor9dTj
QbSTgD+NFwjJaF20yXhwc6amBXLIPwmoqIApZL+O0FsPWC8pQlEhMd+ZfWpE3wtv
EOY3sglPTQKDMnnCfKANs2OqD5glDLNnijMurS78pC0vMSS85lewqaGmo7Dj2KxX
1rQ5+1AIQDt2cKeKi2A3esHm7cBBCYpHotrxH1KxcnC7QEchbfzGA2O5eovKCAcv
lA3d/Nsqhjy9DM6IG3B1wLDLuGHGUH3CX2YQxO/rEhkqnkvYTqhBJpTPWEhcthcs
IYWrJ6EF7Ohy/A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:33 2026 by rpki-client