Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
File: VzCjLzFiRs4LFHu4lejN8K7UPtY.mft (raw, json)
Hash identifier: 7U6Zx2BzOf2eZp9MJ4aUWpxCfd3bhUTqYZ/LpP6toG8=
Subject key identifier: B3:74:FE:8C:83:BE:3D:16:BC:B7:56:B8:0F:93:1F:0B:D1:BD:B0:BA
Authority key identifier: 57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
Certificate issuer: /CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Certificate serial: 019D382E28704D2B07574BC14F59EF66466B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
Manifest number: 0B3E
Signing time: Sun 29 Mar 2026 06:00:42 +0000
Manifest this update: Sun 29 Mar 2026 06:00:42 +0000
Manifest next update: Mon 30 Mar 2026 06:00:42 +0000
Files and hashes: 1: OIQ7KotgSfCre3ojigAVW-uj7lY.roa (hash: 2fHntqMDtZ1kaQHeRQmuVhi7S0ZWG3DjRdqxqMJ0p6U=)
2: VzCjLzFiRs4LFHu4lejN8K7UPtY.crl (hash: SEs5U9wOLk3lZw/+u2r4ZifM/oGyUTJnbhSRY7EmqSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:28:70:4d:2b:07:57:4b:c1:4f:59:ef:66:46:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Validity
Not Before: Mar 29 06:00:42 2026 GMT
Not After : Mar 30 06:00:42 2026 GMT
Subject: CN=b374fe8c83be3d16bcb756b80f931f0bd1bdb0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:05:48:1b:49:f7:52:84:4e:7f:3f:54:85:52:
29:4f:1d:2d:03:1f:9e:c8:bf:14:d6:29:cd:d8:0a:
9e:41:d8:9e:a4:c8:9d:95:54:6e:96:b4:57:d3:f6:
06:05:a5:aa:95:7e:11:f9:5e:08:ac:76:1d:d5:17:
6a:9b:d4:14:62:3e:fb:b1:7a:60:34:b0:02:fc:8b:
a6:08:b0:63:11:04:c4:7c:03:95:70:e1:c8:2c:6c:
6c:7b:8f:a7:a5:41:5d:10:a0:10:72:66:45:ee:5f:
8c:0e:96:09:57:dd:bc:f8:86:e3:ec:69:f4:d9:0c:
d8:a6:98:24:dd:e5:e9:10:b6:8c:35:23:44:9f:96:
35:d6:7c:97:36:51:56:d8:00:e1:22:d2:7c:62:05:
d1:c2:68:75:7f:d4:7b:53:de:b3:94:c0:a9:57:ce:
50:e8:51:9e:22:34:9b:41:17:1e:c9:a1:b7:12:5d:
43:fc:18:62:34:a8:5d:e8:15:4d:f1:c8:28:c4:61:
65:30:2f:77:1a:b3:cf:a4:e8:c2:73:b0:74:12:07:
54:ae:ee:90:18:e2:e5:f3:06:69:cb:1c:42:67:21:
03:77:07:7b:af:37:31:a4:34:1b:45:aa:9d:5a:9b:
02:a0:16:f4:d8:67:ee:cd:52:5b:83:a6:55:99:e8:
ce:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:74:FE:8C:83:BE:3D:16:BC:B7:56:B8:0F:93:1F:0B:D1:BD:B0:BA
X509v3 Authority Key Identifier:
keyid:57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:39:af:bc:26:84:a6:a5:f0:88:f6:53:63:a4:9d:22:fe:81:
c5:30:9c:1c:9c:b5:8e:10:fd:2a:23:35:8d:c0:23:d4:01:ab:
7b:bc:69:a2:c9:8c:55:3d:53:78:b5:cf:b3:1d:59:24:50:ed:
06:6c:99:1d:5b:72:e7:25:84:64:ff:30:13:6b:12:75:4b:26:
3c:09:59:f3:a8:92:e2:02:81:15:06:be:a1:d2:cb:ca:fa:86:
a2:99:55:ea:b0:5f:1e:10:1a:2a:9a:8a:b9:c2:39:82:bd:f7:
49:cf:97:cb:69:5c:db:ba:11:f0:3a:8b:35:e3:4c:71:7c:2f:
d1:e4:25:7a:9b:66:a6:8c:6c:48:76:8f:44:c0:9d:47:75:0d:
8b:5f:96:6d:30:49:23:11:cc:74:03:e8:2b:65:55:33:38:f0:
67:30:68:0a:20:f4:14:b6:8f:87:dc:ba:0b:5e:f1:62:4a:13:
83:dd:a4:3e:c4:05:f9:9a:8e:f6:8f:e3:db:86:4a:c8:3c:83:
f9:b4:74:f7:a1:e5:11:d1:cd:dc:05:47:3c:80:1f:94:00:cd:
9e:e9:41:f0:92:6e:af:1c:d9:9d:83:18:5f:ad:73:ee:bf:5e:
d9:08:57:80:a2:6c:28:ee:52:2d:4f:f2:16:8f:c4:e5:87:d6:
67:2d:68:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:42 2026 by rpki-client