Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.mft
File: VZWbC9oKD1kfloQIU58zGBC7JTQ.mft (raw, json)
Hash identifier: OuSEkjmie2fcNY55AYPhqxPF/JGwF0ucFsXP/yNkUVM=
Subject key identifier: 42:E6:41:6F:0C:92:58:4E:E7:8D:06:87:A0:D4:FD:2D:8B:B2:41:C0
Authority key identifier: 55:95:9B:0B:DA:0A:0F:59:1F:96:84:08:53:9F:33:18:10:BB:25:34
Certificate issuer: /CN=55959b0bda0a0f591f968408539f331810bb2534
Certificate serial: 01A17FCF8D718E2217D50C043D7E7B819F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZWbC9oKD1kfloQIU58zGBC7JTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.mft
Manifest number: 0A95
Signing time: Wed 28 Oct 2026 00:01:10 +0000
Manifest this update: Wed 28 Oct 2026 00:01:10 +0000
Manifest next update: Thu 29 Oct 2026 00:01:10 +0000
Files and hashes: 1: VZWbC9oKD1kfloQIU58zGBC7JTQ.crl (hash: 1qPJPpWtxGZTcdgtrld7+4e/6vXk5j7SpRHaFHyM5gY=)
2: j47FN1b9Qh66nUBnpby1lJe9CYU.roa (hash: sZWGSAo/74IVtkMhs6kmHJc9kEJANjXcYOtxcE90TYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZWbC9oKD1kfloQIU58zGBC7JTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:8d:71:8e:22:17:d5:0c:04:3d:7e:7b:81:9f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55959b0bda0a0f591f968408539f331810bb2534
Validity
Not Before: Oct 28 00:01:10 2026 GMT
Not After : Oct 29 00:01:10 2026 GMT
Subject: CN=42e6416f0c92584ee78d0687a0d4fd2d8bb241c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:0a:8b:70:8f:40:2f:f5:43:78:a5:4a:13:
79:33:3f:ea:45:50:12:ea:5d:96:f2:a2:c6:19:be:
1d:34:3b:f4:65:e5:86:f7:70:c9:29:7d:7e:b1:08:
0e:d6:16:23:1c:e1:d3:c7:83:e4:a6:85:80:37:ec:
03:13:e7:3e:30:41:6d:12:1f:53:e7:68:b8:2e:de:
2f:3f:c8:8e:d9:1e:95:10:13:eb:87:cf:9c:1f:c6:
8d:1c:35:59:51:ae:05:c6:77:1f:e5:11:90:d0:6b:
90:34:e1:ea:d1:fd:7c:b1:b6:95:54:4e:1f:62:52:
1e:bd:60:76:e7:06:df:8c:63:c4:5d:32:56:d4:4b:
da:1c:07:63:92:ae:1c:51:1a:ee:7b:df:1d:80:49:
4d:45:42:aa:07:f2:d2:43:1b:d1:01:d2:89:8d:ac:
16:6b:5f:01:c4:eb:d7:d2:16:97:bf:2f:e8:56:9c:
cc:af:4e:24:b8:23:c6:de:d5:1c:19:3f:e7:71:9f:
0e:a8:95:13:91:1a:e2:7f:18:5e:fb:78:ba:77:ef:
0a:49:cd:76:86:e4:73:5a:11:9a:5e:41:43:c3:d9:
d7:c5:c5:0e:f0:fa:01:d1:88:61:a3:aa:2d:2e:2a:
7c:34:74:41:4a:b8:3d:e0:86:2c:00:49:d7:76:08:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E6:41:6F:0C:92:58:4E:E7:8D:06:87:A0:D4:FD:2D:8B:B2:41:C0
X509v3 Authority Key Identifier:
keyid:55:95:9B:0B:DA:0A:0F:59:1F:96:84:08:53:9F:33:18:10:BB:25:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZWbC9oKD1kfloQIU58zGBC7JTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4c:0f:ed:60:5d:a6:90:1e:b7:5a:33:15:80:b7:da:74:47:
e8:e7:df:7a:a2:b8:47:cd:2e:e6:9e:0c:22:8b:a0:3b:1f:bc:
c7:b1:a1:ea:22:e4:1c:2c:92:e4:c9:e4:e1:e4:3c:0f:d0:0d:
66:98:31:d8:75:3c:75:03:1b:ce:b7:61:5d:15:e4:9c:7b:a5:
da:20:db:e9:cd:bc:99:f1:3c:3b:4c:c2:36:4a:13:e6:de:7a:
6f:bb:58:42:22:77:f2:0a:ed:0d:be:42:b6:48:33:4b:59:b4:
1d:c6:43:a7:e5:52:cc:6e:12:a8:f1:cf:ce:d2:8c:64:8b:89:
65:f6:5b:12:3f:e5:d0:6a:fd:8f:34:97:51:40:6f:c0:85:02:
85:dd:1d:ce:28:41:bb:24:a6:ae:d4:34:de:06:2e:0c:74:8e:
5a:4a:86:57:40:84:a1:8e:3a:a5:9d:3c:62:32:10:16:f9:4c:
ef:5e:61:5d:f8:ec:c7:21:35:5b:c7:f1:48:98:9f:16:11:db:
2c:6b:54:ae:45:e1:3c:e0:f2:4b:27:21:97:79:f5:b4:06:c2:
56:ef:9c:1a:a4:1a:9c:37:7f:65:d6:3b:33:53:78:2c:81:22:
4b:e3:e4:61:aa:31:73:80:d7:41:c2:ea:63:fd:4f:d1:16:8f:
65:31:2d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:28:38 2026 by rpki-client