Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
File: VzoAKcURHfnMLPUxgnfwEbwpEKk.mft (raw, json)
Hash identifier: cAaTBSFBKv/ovGwjXKA3w3XPcNjPy+gfRveTUVwjPSk=
Subject key identifier: 51:01:C5:A6:00:9C:8C:63:0A:68:1C:04:91:65:2D:00:E4:2A:35:E6
Authority key identifier: 57:3A:00:29:C5:11:1D:F9:CC:2C:F5:31:82:77:F0:11:BC:29:10:A9
Certificate issuer: /CN=573a0029c5111df9cc2cf5318277f011bc2910a9
Certificate serial: 01A08E6A59DBD43A332BC6D6B60DB7373C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzoAKcURHfnMLPUxgnfwEbwpEKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
Manifest number: C3
Signing time: Fri 11 Sep 2026 03:02:09 +0000
Manifest this update: Fri 11 Sep 2026 03:02:09 +0000
Manifest next update: Sat 12 Sep 2026 03:02:09 +0000
Files and hashes: 1: Hw6fDQFRFN_Ls3115aFzf0vRck8.asa (hash: OsI8RtgpTzCj0b88FzzXfilbNxRb3Sb0tKlLzKAD5M8=)
2: VzoAKcURHfnMLPUxgnfwEbwpEKk.crl (hash: O4xIAQyqdky/l6YY7c6h5El94+5JMjtodmHTF4hyZos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzoAKcURHfnMLPUxgnfwEbwpEKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:6a:59:db:d4:3a:33:2b:c6:d6:b6:0d:b7:37:3c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573a0029c5111df9cc2cf5318277f011bc2910a9
Validity
Not Before: Sep 11 03:02:09 2026 GMT
Not After : Sep 12 03:02:09 2026 GMT
Subject: CN=5101c5a6009c8c630a681c0491652d00e42a35e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:a1:c6:0c:53:ef:32:da:73:29:81:fd:6f:
b5:14:73:9a:06:1a:9e:f1:90:9f:59:13:6c:1b:7d:
c7:ec:71:18:6f:f8:14:ae:f5:76:29:9c:2d:f9:31:
21:8e:0a:76:80:06:bf:0a:d3:50:cc:26:77:68:0d:
7e:c0:3b:8a:ed:dd:e8:1c:7b:6c:82:15:a6:14:be:
7c:10:ba:d4:a9:13:04:1d:76:98:d0:3d:2b:bc:4b:
40:04:0b:b1:04:1b:32:62:5a:b5:56:bb:6c:b6:2b:
be:78:5b:57:38:c4:f4:16:d8:94:ee:e5:f0:2d:46:
fa:7c:7d:f0:c5:5b:e8:63:88:29:8c:ba:12:f9:ed:
c9:59:8e:a1:de:47:5b:35:8f:5f:53:50:74:c2:a9:
47:02:58:26:63:77:a5:97:f0:81:b0:0b:3a:95:4e:
0a:1e:07:59:01:43:d9:db:2c:0e:56:e0:0c:82:85:
a9:ab:a2:e5:f1:70:22:13:a7:c2:42:91:2a:65:3a:
c8:ff:b8:ce:84:16:e0:c1:38:5c:b3:6e:64:06:e6:
f9:99:bd:93:96:26:bb:07:dc:c5:b2:a1:e4:ac:07:
b2:1b:3f:2e:34:92:8c:2c:71:a3:7c:2e:85:f6:a9:
0e:fc:c6:eb:57:e8:5f:24:18:22:da:86:ac:76:49:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:01:C5:A6:00:9C:8C:63:0A:68:1C:04:91:65:2D:00:E4:2A:35:E6
X509v3 Authority Key Identifier:
keyid:57:3A:00:29:C5:11:1D:F9:CC:2C:F5:31:82:77:F0:11:BC:29:10:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzoAKcURHfnMLPUxgnfwEbwpEKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:02:58:8a:a1:84:eb:7f:05:8a:fc:54:f9:cc:ee:bd:f0:40:
bf:32:88:38:cd:94:44:ce:5f:08:79:39:a6:58:62:8f:fe:99:
56:3f:15:97:27:89:40:1f:e3:b7:ff:fc:f7:a0:b3:76:a9:ad:
24:18:33:f8:43:2a:01:aa:fd:62:c3:d0:2d:a2:a3:e9:a6:4e:
d0:08:48:3c:c9:5c:10:89:0b:14:04:6d:84:3f:84:76:d8:91:
76:9e:f5:73:e1:f5:3b:8a:87:53:24:1b:8a:3e:d1:95:18:c3:
a1:38:92:7d:41:b3:08:43:8e:40:3d:e4:37:d9:7f:68:ce:29:
21:34:14:b5:ae:fe:06:02:a5:c2:b9:19:9c:97:e9:ab:da:3f:
a7:83:98:05:ba:70:27:36:f9:f1:58:35:f8:a3:1d:0b:84:92:
93:cc:87:d9:ad:9d:fe:21:b8:a8:51:71:35:32:3e:82:fd:c2:
df:b1:02:be:7e:7d:98:30:08:e4:34:cf:2b:5e:14:de:32:1f:
b3:9a:31:cd:89:7e:3e:0f:f6:cb:46:cf:22:1e:53:fc:16:eb:
50:dc:47:5e:01:b3:a3:4a:3e:1f:ef:ab:f4:14:9c:91:46:94:
90:b7:76:2d:10:e6:50:4b:ce:6e:87:c6:06:23:85:35:18:b6:
e5:bb:3c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:29 2026 by rpki-client