Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json)
Hash identifier: 6f1V/ReCI9nc2hjToKhcCFJwScgMspHzgEk6jWr9u6A=
Subject key identifier: 71:AB:4A:1A:45:80:6E:65:60:A7:80:D4:BF:44:DA:F0:9F:AC:3D:34
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial: 019CED150DC9CC3307B974A6F0E4EBADB725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
Manifest number: 0CCB
Signing time: Sat 14 Mar 2026 16:01:45 +0000
Manifest this update: Sat 14 Mar 2026 16:01:45 +0000
Manifest next update: Sun 15 Mar 2026 16:01:45 +0000
Files and hashes: 1: QjH4ysMjhx-FRFJ5XuVwEV5hkKY.roa (hash: kDgabNMh+h4CdxorS3mXQ7X6CnKJc4jDSgDlwGVSsRw=)
2: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: 3Rbvk+w66AW06pYNoJ6N0t+PUpbby3K0KT+lNAmBkPs=)
3: neH0ynm-9_WfGLcRwlNHULD4ons.asa (hash: hATUAyHrF7u0nM6hFtbEJpofhSi3SzzTsiFp4CpEf8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:15:0d:c9:cc:33:07:b9:74:a6:f0:e4:eb:ad:b7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Validity
Not Before: Mar 14 16:01:45 2026 GMT
Not After : Mar 15 16:01:45 2026 GMT
Subject: CN=71ab4a1a45806e6560a780d4bf44daf09fac3d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:8e:7a:a4:2a:d7:38:2d:87:47:14:6d:3e:
35:1e:9d:d4:97:82:7b:fa:22:b7:7e:48:7a:f8:90:
50:ef:a3:46:e7:ab:9f:fd:66:b6:82:62:3b:43:7a:
84:bf:58:49:33:0f:83:35:d0:4b:64:d9:2e:f9:6d:
f8:aa:eb:86:1c:33:fd:cb:0b:74:ca:c1:9f:9f:2b:
bd:10:33:bb:0e:d3:26:fb:da:5e:fc:d7:af:25:18:
8f:02:52:b6:aa:87:94:ad:02:bd:06:75:6f:62:40:
2e:8a:cf:96:bc:4e:1d:4d:a6:c0:2b:bd:f9:b7:a0:
13:f0:90:a5:be:09:76:77:ee:a3:ad:af:4c:1a:de:
f7:af:7f:6a:dc:a9:4f:c3:d9:32:75:1e:ea:31:9c:
3d:5b:5a:dc:42:bd:e0:8e:a4:cf:49:c2:6b:33:3d:
0d:4d:6a:1f:6a:c6:b3:0c:cb:72:8c:81:6e:76:b8:
e3:77:f6:b2:11:ad:66:31:4a:4b:51:27:85:7f:27:
10:d5:98:14:66:42:cd:c5:82:be:cb:94:94:38:d0:
7a:5e:98:6f:3f:a4:c9:d4:5d:36:d4:cd:b9:d2:1e:
10:9f:34:93:f8:8b:b1:3d:91:78:f1:77:54:e2:5e:
79:10:fa:bf:e8:1d:1a:c9:03:70:b8:6b:3b:14:6d:
98:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AB:4A:1A:45:80:6E:65:60:A7:80:D4:BF:44:DA:F0:9F:AC:3D:34
X509v3 Authority Key Identifier:
keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:76:c6:98:64:f7:7e:7c:ca:9b:5b:0b:57:cb:c0:0f:40:07:
e1:42:24:72:2b:43:ff:48:73:00:c2:4e:de:32:92:fe:e3:21:
be:3a:34:1b:50:b4:92:01:f8:00:46:1e:1a:41:4b:b4:91:e8:
73:24:2c:b0:e9:cf:f8:71:de:aa:3c:4b:2b:c8:15:7b:55:a0:
59:3b:a4:ad:50:ba:e7:e7:74:8d:16:7a:81:a4:0f:1a:87:ba:
12:37:7a:64:c5:9f:4d:1b:4b:ec:5d:3e:cf:2e:10:b9:d4:72:
29:fe:8f:02:2a:d6:c9:07:fe:cb:36:c6:b3:85:38:ae:ff:0a:
ff:8a:5f:aa:5f:35:fd:7a:a0:4f:32:60:39:71:10:0c:0a:2f:
74:25:69:77:3a:8c:a8:26:c1:8e:01:57:a8:63:ee:be:a6:68:
d1:5d:49:d6:3d:8c:aa:f7:c9:54:b2:f8:18:f2:52:ae:2c:79:
38:86:4b:0c:b4:51:41:9b:10:4f:06:26:dd:48:27:bb:a0:3a:
b8:52:07:79:e4:9a:f3:87:db:ab:3b:58:40:54:3b:53:9d:3a:
4e:b3:8e:4e:14:69:83:00:3e:63:e5:d7:17:b7:5f:cf:40:ca:
f3:25:02:95:14:c4:80:60:c7:89:48:07:fc:80:76:48:f4:87:
87:f1:7f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:48:05 2026 by rpki-client