Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
File: vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json)
Hash identifier: 3HN0xPIgyU639LcwAUSEipkplsEGU4SK+Ooz5mYXgJY=
Subject key identifier: 56:69:EB:52:0A:92:E5:43:15:F7:4B:CD:2A:3B:FC:FF:97:F8:B9:C8
Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
Certificate issuer: /CN=bd9a03521864fde571afadef01f32975983d1f62
Certificate serial: 019F96CA97ADAEBA34EB82CABD54D7F96F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
Manifest number: 04B3
Signing time: Sat 25 Jul 2026 01:01:27 +0000
Manifest this update: Sat 25 Jul 2026 01:01:27 +0000
Manifest next update: Sun 26 Jul 2026 01:01:27 +0000
Files and hashes: 1: DL1N_WLltaKiMUu8ebX9NozMvHY.asa (hash: GBlkMfbXm3G5bf+OMcuJMbHMOCV88FK9f+Gi2F4HMkU=)
2: ntc1WC3vm1k3JcSErDirE-bzwtM.roa (hash: L9yeSfoh1wmxKMxYP1W4Vm7cz9VV1GGVVoomG/BNrTg=)
3: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: S1r7WIvVM1TNKJKFx0nRGjse1zw8NbIunuqKmSJ/zh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:ca:97:ad:ae:ba:34:eb:82:ca:bd:54:d7:f9:6f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62
Validity
Not Before: Jul 25 01:01:27 2026 GMT
Not After : Jul 26 01:01:27 2026 GMT
Subject: CN=5669eb520a92e54315f74bcd2a3bfcff97f8b9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:ab:65:58:cf:f5:fa:36:18:3a:f9:13:10:
3e:9f:c1:2a:dd:85:c3:4c:67:ca:ae:53:06:57:36:
2d:57:3d:a8:fe:24:4c:48:e2:93:92:75:cd:67:ee:
78:c1:ed:d5:9c:bb:45:86:90:8e:b8:b0:23:64:c1:
d1:e5:57:01:3a:71:13:95:4a:58:87:e5:7e:45:cc:
09:c4:fb:31:b5:b5:40:98:07:ba:7d:51:68:74:6b:
6a:4a:46:d8:1b:e7:47:ff:06:35:a2:82:7d:cd:03:
ee:79:06:5a:31:68:45:1d:45:5e:41:10:3e:2c:b8:
b3:bb:d6:f1:25:34:17:35:6a:8a:76:06:3b:52:7d:
03:e9:5f:d4:17:51:aa:ab:64:57:32:37:6b:1c:c5:
3f:65:1d:e3:e1:6f:23:da:51:aa:05:cb:13:45:e0:
e5:16:8b:34:ae:12:f1:78:8c:7a:9b:d1:6d:3a:08:
24:ad:14:ba:3f:6c:1c:61:33:bd:76:b1:f7:62:1c:
05:cb:16:64:2b:db:f2:01:ca:f2:38:2e:54:3a:24:
48:34:9a:d5:c5:74:9d:8c:a2:da:27:30:0f:1a:c5:
a2:95:74:57:7c:b3:c3:7f:78:17:3a:49:fb:5d:03:
bb:ce:ee:e1:1e:0b:cb:22:1b:51:9a:9f:41:3b:9d:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:69:EB:52:0A:92:E5:43:15:F7:4B:CD:2A:3B:FC:FF:97:F8:B9:C8
X509v3 Authority Key Identifier:
keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:75:a8:04:5f:76:90:f6:cb:24:df:6a:9e:fb:95:90:90:26:
49:11:83:34:7c:af:7c:92:24:d5:ef:8e:df:ec:e4:31:9f:28:
8e:57:56:e9:6d:c2:85:f7:9f:30:b8:7a:4a:a1:12:e2:db:70:
2a:9a:65:1b:27:6c:75:7f:12:8b:4b:37:f9:15:db:1d:e8:af:
22:e7:28:21:f6:26:fa:1c:d7:8a:cd:e1:fb:7a:dc:42:5d:c9:
3c:21:85:61:af:5e:ae:a1:46:8c:fa:59:0e:8a:3a:fe:d3:74:
4e:40:fa:be:c5:99:77:cb:71:56:e3:81:7e:b0:a1:a3:65:92:
fc:9e:23:c4:79:fd:a3:07:cc:54:78:67:41:50:b8:68:c6:50:
6b:dd:63:fc:01:55:ce:e0:c8:f5:f1:0c:7b:39:c1:60:8d:5a:
0c:ea:4a:25:55:46:42:6b:50:68:40:7a:b3:19:7e:6f:4b:49:
f0:fc:1d:a8:51:75:b0:05:80:a2:24:65:73:16:1e:95:d9:d9:
01:a5:4a:e8:50:d9:7f:91:54:0c:53:f9:4f:73:d1:d5:27:c6:
19:a2:68:6e:22:d3:df:22:a5:08:50:da:e2:9f:42:e0:a2:e5:
79:79:f3:a3:55:7c:b7:4d:45:47:e1:c9:03:30:e3:e9:f5:dc:
4c:1c:2b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 10:27:58 2026 by rpki-client