Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
File: VzoAKcURHfnMLPUxgnfwEbwpEKk.mft (raw, json)
Hash identifier: MbGjPATe5sjBVS6qIsZhyt+fL1H8HUtSKGqdfsG6U78=
Subject key identifier: A1:12:E0:6F:22:29:15:58:31:32:26:F4:73:C2:87:79:C6:52:18:6D
Authority key identifier: 57:3A:00:29:C5:11:1D:F9:CC:2C:F5:31:82:77:F0:11:BC:29:10:A9
Certificate issuer: /CN=573a0029c5111df9cc2cf5318277f011bc2910a9
Certificate serial: 01A18D53CFCC0F4EBCA8763010E9C2398693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzoAKcURHfnMLPUxgnfwEbwpEKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
Manifest number: 0147
Signing time: Fri 30 Oct 2026 15:00:42 +0000
Manifest this update: Fri 30 Oct 2026 15:00:42 +0000
Manifest next update: Sat 31 Oct 2026 15:00:42 +0000
Files and hashes: 1: Hw6fDQFRFN_Ls3115aFzf0vRck8.asa (hash: OsI8RtgpTzCj0b88FzzXfilbNxRb3Sb0tKlLzKAD5M8=)
2: VzoAKcURHfnMLPUxgnfwEbwpEKk.crl (hash: 7sDq05coB9gyCfSTYIwE+AHewZDrc4R38XHbrMW9bLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzoAKcURHfnMLPUxgnfwEbwpEKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:53:cf:cc:0f:4e:bc:a8:76:30:10:e9:c2:39:86:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573a0029c5111df9cc2cf5318277f011bc2910a9
Validity
Not Before: Oct 30 15:00:42 2026 GMT
Not After : Oct 31 15:00:42 2026 GMT
Subject: CN=a112e06f22291558313226f473c28779c652186d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:89:71:56:74:3d:da:f0:48:cb:28:99:49:
0a:e9:0f:9d:e0:a8:42:4d:33:4e:68:91:da:52:dc:
3e:0b:b5:6d:40:37:9f:26:7f:4e:ca:4e:5c:42:d6:
d0:c5:3a:e7:48:70:38:19:4e:ed:00:6d:1c:7b:31:
6c:8f:6a:77:94:6a:b4:91:91:f4:71:d9:0f:21:04:
33:2c:47:2e:2e:ba:27:d1:56:fc:f2:95:d1:dd:8f:
15:9d:22:ed:17:8f:0a:a5:e6:d1:e8:dd:c3:13:1c:
a3:bf:9a:e1:13:c6:d2:d8:07:47:d8:e5:f5:aa:4f:
58:cb:1c:72:ba:e3:08:5b:8f:f0:0d:4b:58:46:3a:
ed:0f:6d:cb:15:63:d7:ea:a3:5e:7a:8d:33:b9:ff:
74:52:19:5c:5b:65:b4:a0:3a:b5:f0:86:75:c5:e7:
f5:9c:d8:10:1e:66:0b:f3:d5:00:6b:f0:d0:6f:48:
c3:d6:92:db:08:f9:2a:4e:b3:ed:5c:52:c4:10:01:
18:d6:8b:0c:f8:5b:59:e7:cb:61:da:16:d3:06:9c:
9a:a0:31:88:7d:e6:2c:8f:8d:22:07:eb:18:eb:74:
c5:87:e9:76:10:25:f0:d7:3c:fc:19:3e:23:15:6e:
73:1f:9a:6a:b5:03:b9:01:bf:64:0e:84:24:13:c6:
e1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:12:E0:6F:22:29:15:58:31:32:26:F4:73:C2:87:79:C6:52:18:6D
X509v3 Authority Key Identifier:
keyid:57:3A:00:29:C5:11:1D:F9:CC:2C:F5:31:82:77:F0:11:BC:29:10:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzoAKcURHfnMLPUxgnfwEbwpEKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:03:88:d2:42:d6:6c:c7:58:ee:cb:a8:4e:8a:9d:68:0b:6b:
b5:e2:08:92:94:70:72:17:5b:d1:6d:f9:76:0c:82:f7:16:8e:
b5:dd:dd:79:10:40:c2:66:c6:7e:14:b0:37:1a:09:01:19:4d:
96:e2:b9:f3:20:18:ce:56:e8:76:e3:8d:79:24:a7:57:fb:74:
36:82:aa:eb:12:98:1e:59:2a:06:90:88:d3:e1:b0:ea:e7:c5:
31:a7:e6:9b:57:bb:ab:d6:e8:44:91:20:96:9f:d8:ba:42:ea:
26:12:ba:ca:72:65:71:72:e4:0a:0c:55:34:2f:3f:86:ff:97:
32:48:88:c9:29:90:0f:50:6c:11:2d:4e:4d:5f:56:09:49:1d:
95:12:64:a5:71:e9:d1:ac:77:49:64:e8:ef:4d:52:cd:6b:a7:
e1:09:d2:d5:8b:8d:7c:f8:e7:f0:6e:b9:8b:20:dd:57:3f:c9:
a0:17:ce:b2:27:6e:88:d6:d0:84:9b:c2:7d:75:15:f4:39:fc:
32:75:23:85:6b:52:24:ce:9a:a4:fb:2b:45:68:e7:78:9d:34:
ce:a7:a4:4d:7e:c1:c2:e8:df:02:c0:11:09:c1:cc:ed:8c:70:
05:1a:05:1e:a1:0a:4d:8a:90:cc:f8:23:91:9d:6e:af:f8:a2:
94:54:ae:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 01:09:01 2026 by rpki-client