Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
File: VZxkpqxMSXatNiFBKhN0WeZJq54.mft (raw, json)
Hash identifier: g3m/6jC4FN54tYGFNz4ClWJnNVUhNe+Q+UitSAm6jJw=
Subject key identifier: C0:A5:EC:43:AC:A7:92:10:72:2C:15:B9:2D:A6:45:BF:37:1E:DC:F5
Authority key identifier: 55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
Certificate issuer: /CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Certificate serial: 019D38D2CF2202D26E601A310C85D38BD461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
Manifest number: 1427
Signing time: Sun 29 Mar 2026 09:00:32 +0000
Manifest this update: Sun 29 Mar 2026 09:00:32 +0000
Manifest next update: Mon 30 Mar 2026 09:00:32 +0000
Files and hashes: 1: OPRz51uzznqYUEPxfg90oEwb7MQ.roa (hash: eZ6pMS8abjtpitMERgpepOF6OAkDWhegDlYVypYAvp8=)
2: VZxkpqxMSXatNiFBKhN0WeZJq54.crl (hash: BI30SOkMRewFAUnic/LjTUUc/uaE3n0svvkF/DcP+f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:cf:22:02:d2:6e:60:1a:31:0c:85:d3:8b:d4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Validity
Not Before: Mar 29 09:00:32 2026 GMT
Not After : Mar 30 09:00:32 2026 GMT
Subject: CN=c0a5ec43aca79210722c15b92da645bf371edcf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d8:b2:ea:c3:d4:a3:b7:e1:1c:31:e9:44:4e:
23:0f:21:d1:95:75:7d:0a:c9:f7:71:70:11:cf:0f:
9c:78:95:2a:0f:1a:bf:41:0b:a8:40:65:36:7e:d6:
c6:12:4d:c9:03:4e:e4:2b:33:cb:a1:d2:d8:48:a9:
2f:26:c3:e0:eb:f8:bb:86:ee:9a:c5:cb:9a:c0:c3:
e4:e9:62:b3:b1:e0:0e:3d:53:2a:00:0c:18:05:96:
c0:42:6d:ae:75:33:65:86:f7:47:36:b7:2d:17:a6:
f8:27:7e:3f:70:54:c7:00:fb:0c:c2:93:51:86:f2:
d8:10:ff:7c:76:dc:a2:3b:6d:25:74:96:e0:8e:cf:
22:9e:8f:29:f7:fc:15:2c:ff:4b:61:44:7f:4f:a8:
be:c1:89:1e:05:4a:b6:3b:ea:47:14:3a:55:2f:a4:
b1:1e:71:b9:44:e7:7e:76:b2:61:aa:c8:7c:3c:d7:
59:a5:5a:12:1a:7e:de:fc:57:a3:b4:b1:5a:10:16:
bd:da:71:d5:f9:86:6e:a1:aa:8f:53:6b:05:e0:4f:
53:68:85:59:8a:11:6f:aa:11:69:bd:fd:1e:29:91:
47:23:50:97:f8:df:c4:35:ff:53:3d:6d:fa:ae:99:
3b:50:f6:33:43:61:16:67:bd:bd:b0:1a:d2:a7:05:
ca:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A5:EC:43:AC:A7:92:10:72:2C:15:B9:2D:A6:45:BF:37:1E:DC:F5
X509v3 Authority Key Identifier:
keyid:55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8c:8f:0c:ec:f2:ad:64:1e:df:c8:86:a6:8a:f5:ff:8a:45:
ab:b0:4e:cc:bb:ff:76:da:91:36:38:62:17:2d:53:91:df:c1:
e2:ef:f0:86:91:12:92:64:a3:44:2a:aa:5a:60:8d:6d:90:d1:
3b:c5:d2:f5:12:f7:21:5e:88:43:96:9f:9a:bf:ad:2f:ea:9b:
dd:df:e3:e1:45:d9:eb:20:6b:96:20:bb:92:9d:64:3d:ff:aa:
7e:5c:84:f2:c8:26:0b:a5:89:09:41:58:50:11:64:02:2b:1e:
1b:fc:00:3f:3a:16:a8:ce:26:7d:3d:51:6d:6f:50:a8:18:15:
3a:bd:c0:a4:c1:c6:6f:40:68:9f:c0:42:15:1b:b6:c6:8f:52:
cc:db:e2:4d:fa:56:2b:f8:3f:f6:b5:ed:c7:8a:42:81:d2:5f:
6b:60:e8:e0:2e:ce:2c:91:3a:d6:9a:63:7e:51:f0:b2:ad:f9:
b8:36:64:64:c5:1d:4d:73:88:bd:ca:9b:0c:47:dc:37:ac:78:
11:12:66:2a:69:26:95:de:5b:fa:84:f4:58:da:16:1f:9b:d8:
f2:8a:6c:e0:22:30:34:11:a1:7a:30:82:31:e2:17:97:0f:78:
17:9e:0d:c1:f1:e5:8f:c8:37:12:9e:ab:81:90:7c:13:3f:56:
82:17:fd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:48 2026 by rpki-client