Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
File: VZnll39h5z8wSC2usaXy33LV7UY.mft (raw, json)
Hash identifier: yJxWkzfafRL6DzqvLzsMf80oGQL/vhHCGTLtR9hbZQY=
Subject key identifier: AA:A4:45:3B:D8:58:DE:7B:D8:08:3A:13:34:11:10:FB:28:14:EA:23
Authority key identifier: 55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
Certificate issuer: /CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Certificate serial: 019D3909D5080346FC4BCA4D3BDB814DA332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
Manifest number: 170E
Signing time: Sun 29 Mar 2026 10:00:38 +0000
Manifest this update: Sun 29 Mar 2026 10:00:38 +0000
Manifest next update: Mon 30 Mar 2026 10:00:38 +0000
Files and hashes: 1: VZnll39h5z8wSC2usaXy33LV7UY.crl (hash: awbtnmrozzfMo7rWAeIynirUhmZa5AbWEEucQDDTKGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d5:08:03:46:fc:4b:ca:4d:3b:db:81:4d:a3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Validity
Not Before: Mar 29 10:00:38 2026 GMT
Not After : Mar 30 10:00:38 2026 GMT
Subject: CN=aaa4453bd858de7bd8083a13341110fb2814ea23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:26:68:42:a3:ba:38:9e:c0:eb:74:ab:23:
ea:27:30:21:74:19:b2:42:b7:50:5a:0f:b0:da:47:
ce:67:17:1f:e9:07:3f:97:9b:37:a1:7e:c8:46:47:
dd:41:58:e2:4f:3a:db:de:6c:4b:a3:b4:e4:e9:99:
c0:f1:99:ba:ad:a5:40:84:90:db:6f:27:a9:16:e8:
49:b5:a5:83:58:a8:b4:30:67:99:6f:6f:dd:e7:3e:
f7:b6:a5:cc:a1:af:b5:9d:aa:c2:58:c3:88:74:dc:
c1:d3:cc:0d:41:23:35:b3:43:d6:80:a0:12:e7:de:
e7:b3:48:c6:09:f6:7a:bb:85:70:86:18:f7:9c:a9:
06:9c:2c:ac:f5:d3:a2:1b:5b:aa:9a:0a:fe:22:7e:
bb:fa:1d:ad:25:85:c7:3e:f3:d7:91:32:5d:1c:a1:
ff:06:6e:bf:25:65:07:ab:59:d6:7e:89:77:3d:0d:
7d:5f:20:ae:0b:12:6e:2b:a5:e8:5f:8a:f1:52:d0:
3c:74:ab:7c:86:6c:41:3b:b2:ae:82:9c:45:ae:2f:
4b:23:38:c6:53:39:35:f5:a2:84:90:c8:80:35:dc:
72:88:ee:2f:53:42:c0:64:7a:42:aa:28:43:03:7d:
c4:26:08:1d:85:5b:b0:19:77:80:0c:1a:e5:d0:4d:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A4:45:3B:D8:58:DE:7B:D8:08:3A:13:34:11:10:FB:28:14:EA:23
X509v3 Authority Key Identifier:
keyid:55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7a:03:83:f4:0b:9b:dd:9b:eb:88:52:dc:c4:d7:1f:96:97:
34:a5:f7:10:0a:4a:2d:10:af:9c:01:c0:84:81:dc:f3:44:7b:
c3:eb:3a:6c:e4:41:fc:84:3e:a6:e4:b2:56:41:52:81:fd:06:
f8:4d:d6:10:13:99:7b:96:9a:58:d6:43:fb:4c:68:5d:41:2a:
e4:08:06:b7:92:79:3d:e3:4c:c9:6b:9c:d9:b3:09:c4:be:3f:
6d:a8:5a:67:fd:36:0f:8a:83:d5:6d:c5:c7:30:5f:ab:da:8e:
62:58:09:da:0b:29:1d:66:09:1a:25:de:be:d0:f2:4a:95:34:
b8:04:50:16:5a:61:60:fe:1d:32:1d:ea:ca:73:10:26:e3:5c:
26:20:c7:10:4e:c1:94:8f:17:16:2d:62:b8:cd:9d:3c:d9:fa:
9f:1b:82:59:7d:4e:33:f0:02:6f:72:0d:9f:81:e0:8a:ef:45:
d5:d4:36:d2:a3:44:8d:ce:ec:99:05:27:2c:a5:81:e3:9b:1d:
eb:ef:8e:c7:b0:bf:46:2d:f4:2b:c6:5f:30:76:95:37:07:6a:
26:ea:98:2e:08:df:98:43:24:70:96:1d:b5:91:f0:6f:56:83:
26:5b:01:74:9b:32:73:7e:92:06:9f:8e:de:7c:70:95:f3:c8:
26:9b:bf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:07 2026 by rpki-client