Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json)
Hash identifier: VUKZrzSXySUYG8tgqvMwtcD8/ZJwFoYcRoXg8xuEDVE=
Subject key identifier: 6A:FE:44:1C:D1:30:16:16:D9:53:F4:FD:57:57:7F:14:1F:F6:8C:42
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial: 019D3865C7EF981EE05FD011EC766E62D33E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
Manifest number: 0CF2
Signing time: Sun 29 Mar 2026 07:01:27 +0000
Manifest this update: Sun 29 Mar 2026 07:01:27 +0000
Manifest next update: Mon 30 Mar 2026 07:01:27 +0000
Files and hashes: 1: QjH4ysMjhx-FRFJ5XuVwEV5hkKY.roa (hash: kDgabNMh+h4CdxorS3mXQ7X6CnKJc4jDSgDlwGVSsRw=)
2: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: 96AbX43Eoja0HiwUw+8S+0OiaoBf57hH1mjMXv7c44s=)
3: neH0ynm-9_WfGLcRwlNHULD4ons.asa (hash: hATUAyHrF7u0nM6hFtbEJpofhSi3SzzTsiFp4CpEf8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c7:ef:98:1e:e0:5f:d0:11:ec:76:6e:62:d3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Validity
Not Before: Mar 29 07:01:27 2026 GMT
Not After : Mar 30 07:01:27 2026 GMT
Subject: CN=6afe441cd1301616d953f4fd57577f141ff68c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:73:6e:35:08:1d:f6:f8:1c:d0:f2:7a:74:
f4:a3:a2:3c:47:ad:d3:5e:11:5c:81:ad:0f:0f:71:
cc:d4:72:9d:ac:6d:e0:23:be:95:4d:c6:ea:2c:7b:
25:b7:0d:48:96:1c:73:7e:bb:78:c5:20:c8:b1:f7:
41:b2:a8:cd:6b:7e:22:bf:36:3d:2e:c7:12:fb:6a:
c3:b4:9f:b2:bd:6d:12:e9:8a:94:d2:5d:19:d4:8c:
fc:6e:43:d0:23:da:94:a3:b3:eb:e5:ad:ee:ba:d9:
db:75:97:13:c9:b7:a0:73:b6:2f:e9:0b:13:4d:14:
48:28:0f:1a:c3:04:77:79:60:2f:f5:dd:3b:9d:0b:
94:11:d3:ca:15:63:d4:a0:a6:68:93:c0:7e:f2:fd:
91:d0:ec:e5:21:6c:fd:6f:12:d2:53:4f:94:17:da:
b1:e3:91:e8:56:6f:b2:30:bc:f9:6e:f3:d7:67:1b:
70:de:5f:65:56:bd:02:9b:df:21:9a:23:ba:94:5d:
a8:d8:5a:5a:33:86:88:a3:bb:a3:f7:a7:4a:ac:19:
a4:8e:f5:0b:9c:44:dd:5b:9c:5d:f7:74:54:51:73:
f0:f1:2c:c8:4e:0b:dc:d7:27:37:6c:5e:48:1d:ed:
54:3c:9c:2c:9e:9c:38:59:39:42:c6:31:84:21:53:
8a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FE:44:1C:D1:30:16:16:D9:53:F4:FD:57:57:7F:14:1F:F6:8C:42
X509v3 Authority Key Identifier:
keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d0:cc:89:a1:e9:e1:00:63:ad:38:1b:81:d0:e2:eb:5d:62:
cd:eb:99:aa:e8:5c:32:10:1a:ef:9e:69:01:22:f8:ea:e1:40:
c1:7d:82:f3:e2:ce:15:b6:2d:20:76:cd:17:ca:d3:63:c2:0d:
b7:04:5f:48:b8:6a:78:8f:6b:f4:6d:36:1c:ff:0f:e0:ee:5e:
b1:68:cf:f2:c6:58:64:00:55:05:61:10:9b:7c:37:57:20:b9:
79:97:7e:37:d7:a4:49:d4:08:99:db:9a:cf:dd:0e:1c:cc:fe:
db:21:9e:c0:86:90:61:9b:a5:05:d4:20:7f:ea:4a:2a:1b:ae:
ac:11:46:54:e4:73:cb:f1:38:ff:2c:99:ba:b1:eb:3d:f2:12:
98:ae:f7:e1:5b:b3:08:e8:a6:1c:c4:47:90:d7:39:28:e1:97:
81:03:16:e9:a7:fd:83:46:cc:1a:be:b5:6f:a0:e9:8a:2f:9a:
41:64:e6:7f:90:7b:02:d5:47:9d:fe:be:95:78:53:05:74:3a:
b3:c6:45:ff:99:59:df:32:26:0e:f2:28:0e:4f:d4:04:1c:dc:
67:05:a8:1c:36:27:6f:1e:03:24:e1:d3:43:1c:6a:cb:7b:e7:
34:11:75:78:35:4e:c7:b2:80:18:33:8a:d4:6c:f8:a0:74:eb:
41:64:fd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:49 2026 by rpki-client