Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
File: vmWzDa10rHadS1syMS2o-oGrM9E.mft (raw, json)
Hash identifier: Z//ApLamviufVBsCXsR8OwVsStyLu1tKvfjWah3gwTw=
Subject key identifier: F6:C2:C1:72:EA:68:D5:9D:2F:64:7C:75:46:07:F2:4F:43:9C:C2:34
Authority key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
Certificate issuer: /CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Certificate serial: 019CE447A046D6B4D4991BB95FDFC10DF64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
Manifest number: 0DBC
Signing time: Thu 12 Mar 2026 23:00:25 +0000
Manifest this update: Thu 12 Mar 2026 23:00:25 +0000
Manifest next update: Fri 13 Mar 2026 23:00:25 +0000
Files and hashes: 1: t1JXKPULVgSgvQ0I80otAQ7Epzg.roa (hash: sx0p3fASYGJ0JSBWFt0pc+jsNHZgbTF+OTJo6DFYN9A=)
2: vmWzDa10rHadS1syMS2o-oGrM9E.crl (hash: 82HrKaeqkPJdBMRy1Us/AE9HFMgza6W+eaJJLf9+0Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:a0:46:d6:b4:d4:99:1b:b9:5f:df:c1:0d:f6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Validity
Not Before: Mar 12 23:00:25 2026 GMT
Not After : Mar 13 23:00:25 2026 GMT
Subject: CN=f6c2c172ea68d59d2f647c754607f24f439cc234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:db:e4:21:be:cb:31:6f:09:59:ca:d9:6f:
be:b3:d1:b4:75:a4:15:b0:5d:e8:77:20:de:b4:d1:
c8:c2:64:ba:68:3b:8a:c3:3a:ce:8b:8a:6e:79:fc:
6d:ff:21:8f:35:2b:b7:a6:90:b4:d3:93:36:fd:c5:
26:b5:fd:8a:03:9e:94:a5:17:c3:1b:e0:45:d4:74:
7d:73:38:9d:72:74:73:96:c3:cd:21:98:4a:b3:4b:
4b:87:e3:45:82:61:3e:04:91:df:3a:da:bc:87:28:
8e:60:64:27:f6:03:24:b5:55:2a:7e:6b:5f:d6:94:
04:a4:b7:a2:8a:ac:40:36:ed:e7:78:80:51:6d:56:
a1:9a:42:00:57:f0:95:da:f0:82:49:8b:09:18:84:
c8:59:c8:96:66:90:89:a8:58:5a:c9:b0:cd:d6:83:
12:4c:4e:da:52:ba:2d:74:6f:cf:0e:c5:40:dd:cb:
8d:c4:d7:59:02:90:41:5c:f0:ca:ea:06:31:a6:6d:
3b:2b:27:54:ac:b1:15:94:c0:73:6b:fc:38:21:a4:
b2:6c:78:b3:09:9c:23:86:02:84:a8:ad:a6:49:a4:
ca:b4:85:2c:8f:6a:a0:ca:41:6c:3d:e5:da:94:8c:
7b:ad:a6:42:54:18:5f:19:52:99:12:71:be:b5:ac:
c9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C2:C1:72:EA:68:D5:9D:2F:64:7C:75:46:07:F2:4F:43:9C:C2:34
X509v3 Authority Key Identifier:
keyid:BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f3:d1:7c:76:ea:98:22:e8:71:15:78:36:42:d4:84:73:f5:
2e:6f:94:70:78:09:22:6e:fd:2e:db:e3:03:4f:59:e2:8b:3c:
44:7d:d7:97:28:e6:29:14:fb:ce:46:24:4d:5b:9d:5a:75:af:
74:3f:2e:aa:6b:22:33:71:36:29:f1:40:79:10:65:f1:b5:90:
19:d5:1c:d6:74:a7:cd:d1:4c:1e:b0:5c:52:03:fd:12:ac:27:
3b:13:5d:f6:fa:8b:31:46:bf:c8:c7:63:9c:f5:f2:1c:43:fd:
81:9e:10:f5:d8:08:cc:f8:02:c2:da:22:c6:30:33:e7:41:32:
fc:20:2a:b3:e6:3a:36:5b:e8:6a:ce:c0:83:ca:4d:de:7e:a3:
26:74:19:92:8d:13:60:91:e1:8b:63:61:97:87:c6:40:62:1f:
9f:b5:c4:33:b2:a1:ff:77:02:ca:8e:0c:bc:9c:05:d4:d8:b7:
47:63:ac:97:b3:e9:a8:e9:75:d9:d6:c1:90:59:34:a2:77:55:
9c:61:a6:24:4d:74:ba:5a:2c:dd:cb:3a:92:65:67:6c:7f:cd:
a6:f1:4e:69:1f:5b:22:fa:4c:eb:20:33:f2:92:a4:64:60:e6:
e9:02:ac:83:be:ac:48:18:a0:8a:de:6f:ed:95:02:58:23:6f:
5d:6b:89:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:59:45 2026 by rpki-client