Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json)
Hash identifier: UJ0P2a/jsVYEMx95ogs2/zQJ9u/Mx4Ul06webE1+lvM=
Subject key identifier: 12:21:8F:F4:05:65:9C:BA:52:D8:E1:62:C5:66:E4:AE:74:69:EE:34
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial: 019E905C14E08DD3DDFE5D9EC107F1E0CC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
Manifest number: 0DA5
Signing time: Thu 04 Jun 2026 02:00:14 +0000
Manifest this update: Thu 04 Jun 2026 02:00:14 +0000
Manifest next update: Fri 05 Jun 2026 02:00:14 +0000
Files and hashes: 1: QjH4ysMjhx-FRFJ5XuVwEV5hkKY.roa (hash: kDgabNMh+h4CdxorS3mXQ7X6CnKJc4jDSgDlwGVSsRw=)
2: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: RM8iYmGn2HJWTw6P31EP5OGzUjE8rQZOu1LqmrMTQTQ=)
3: lehyIJyS5t2gi3G0Aqa6xnw8WlU.asa (hash: 6aAqK2D28DLKSJ21dW5F1a+WDM8qLkyHEkDcgfiBl54=)
4: neH0ynm-9_WfGLcRwlNHULD4ons.asa (hash: hATUAyHrF7u0nM6hFtbEJpofhSi3SzzTsiFp4CpEf8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:5c:14:e0:8d:d3:dd:fe:5d:9e:c1:07:f1:e0:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Validity
Not Before: Jun 4 02:00:14 2026 GMT
Not After : Jun 5 02:00:14 2026 GMT
Subject: CN=12218ff405659cba52d8e162c566e4ae7469ee34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:ad:8c:59:a5:2c:8a:5d:a1:75:d3:14:d6:
02:af:ab:cd:f2:8b:7c:7b:cd:df:1f:fc:a9:4e:31:
0b:97:d0:2e:44:10:f7:0c:38:d8:8f:6d:15:88:88:
07:01:75:ba:4e:49:dc:0a:20:84:fe:02:65:a4:79:
85:1c:2c:3d:de:3e:0d:db:61:74:83:c6:9e:f3:12:
b8:18:39:bd:39:44:8d:a5:e6:9c:b7:23:08:41:7e:
64:ad:df:23:04:d2:1c:01:c4:a8:3d:0f:b8:0a:0d:
6f:6a:67:25:cd:2b:1d:5a:ad:92:50:75:5f:cf:28:
46:dd:10:4f:13:45:3e:76:6e:ff:9f:29:f5:cc:29:
9a:bd:5d:ba:c9:e0:d2:dc:0e:8c:77:60:30:6f:b4:
01:e1:f1:46:6e:0d:35:b3:1d:82:42:73:fd:85:42:
75:e1:c3:93:43:d5:66:97:b4:87:40:a4:54:1e:0c:
4e:f9:86:d8:16:c5:87:41:fd:0a:4f:39:b0:e5:97:
7f:b3:84:dc:56:bf:26:bf:46:d9:83:4e:99:ea:db:
37:75:aa:18:59:cf:00:1d:3b:0e:2c:84:72:90:c1:
a7:02:14:f6:6b:5d:a7:f6:29:bc:21:df:75:75:b3:
f6:22:de:69:a6:c4:e5:11:17:10:2c:4f:cd:9e:7a:
53:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:21:8F:F4:05:65:9C:BA:52:D8:E1:62:C5:66:E4:AE:74:69:EE:34
X509v3 Authority Key Identifier:
keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:87:21:7a:29:77:ca:96:78:bc:1e:97:8b:22:6b:69:82:e6:
91:19:1a:4e:f2:99:25:47:81:76:a7:e6:42:a3:54:85:c0:53:
ba:58:0e:4a:c4:b4:76:60:ad:cb:17:0f:69:c1:4f:fb:d2:08:
7a:38:25:47:eb:c9:dd:cb:5f:3a:0e:72:b4:fd:59:37:7f:84:
60:a3:c6:c8:65:15:07:b6:f0:5c:ef:0c:a1:bb:86:8f:78:fa:
30:5d:87:7c:4b:f3:30:5b:ef:84:48:92:d1:99:46:62:4a:77:
cd:c8:34:93:51:82:5c:12:f4:03:10:c3:95:74:6b:29:a7:b6:
1a:1e:ae:f2:b7:a4:b1:14:e6:19:6a:2b:52:fc:bc:99:f6:bd:
db:f1:d6:ca:83:63:6d:08:47:ca:0f:6f:93:8e:91:bc:6f:50:
58:9c:48:ee:7b:a2:fe:15:5a:83:fa:d6:f6:df:c9:b7:67:9c:
70:1c:a2:8a:12:78:ab:7d:0f:53:cc:ad:82:03:19:02:45:43:
2b:ab:c1:fd:07:8f:01:fa:46:79:c3:dd:92:3e:a8:ec:c7:d7:
8d:4f:62:91:2e:61:18:0f:6a:bb:8e:2e:16:7f:df:8e:ec:f7:
9b:84:a5:e3:7b:48:8e:7f:4b:97:80:b8:35:d6:f0:28:a8:dc:
46:ca:f8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:03:36 2026 by rpki-client