Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
File: VZcyBKNpaAWG3if5RvyBZlYyqoM.mft (raw, json)
Hash identifier: HZqhXwHVFLM62T2KBptDap3uxOMCAeJPZAWPLGbZpH0=
Subject key identifier: 55:47:B5:C7:08:A4:28:D5:64:37:63:03:EF:06:CF:D1:0B:1E:52:85
Authority key identifier: 55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
Certificate issuer: /CN=55973204a369680586de27f946fc81665632aa83
Certificate serial: 019D39AF49D760B48A837D99EDC082857CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
Manifest number: 03B0
Signing time: Sun 29 Mar 2026 13:01:22 +0000
Manifest this update: Sun 29 Mar 2026 13:01:22 +0000
Manifest next update: Mon 30 Mar 2026 13:01:22 +0000
Files and hashes: 1: VZcyBKNpaAWG3if5RvyBZlYyqoM.crl (hash: Da0JpDKL2lV5w0Enk6mXBwLFDS9i2eF9lBd805yCMNE=)
2: p7xlQ5fQEJFr9otgIpR7QV4leo8.roa (hash: pzJT1nif0fL8arEey872KnfNwYpzD/Gw+qoudSccqg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:49:d7:60:b4:8a:83:7d:99:ed:c0:82:85:7c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55973204a369680586de27f946fc81665632aa83
Validity
Not Before: Mar 29 13:01:22 2026 GMT
Not After : Mar 30 13:01:22 2026 GMT
Subject: CN=5547b5c708a428d564376303ef06cfd10b1e5285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:03:ab:70:e8:64:4c:15:ce:d8:53:e4:8f:47:
17:4d:7d:d1:7a:22:ba:8f:bb:5b:90:c2:37:98:5f:
0c:47:b7:63:ff:06:23:f5:e2:da:6c:1e:31:3b:a5:
54:39:b7:e2:c0:e7:78:5d:c6:51:66:c8:eb:31:06:
00:90:9c:da:2d:f6:57:14:53:8e:25:95:70:da:6c:
f8:fb:ae:11:a7:44:27:d8:ce:6e:6a:0f:83:2e:f9:
13:41:bb:d6:69:55:b1:78:e2:a7:e4:8d:d9:b4:8c:
4a:e7:70:bd:bf:0d:5a:44:2c:7f:e6:a5:6b:ea:83:
45:19:c1:10:73:09:c4:05:89:bd:0e:d1:41:57:95:
d2:a3:84:d0:87:bc:ed:3e:5a:b3:72:c0:12:26:e1:
36:7d:30:77:52:a4:95:5d:52:16:a9:e1:74:e0:49:
af:e3:3e:b8:9f:f1:7f:0e:18:e2:77:c8:cf:aa:c6:
07:b2:54:34:b7:fd:cd:a7:28:39:70:70:e1:f2:5f:
7c:e5:f2:8e:7b:c0:93:44:de:29:7d:69:54:54:da:
99:87:23:54:a0:b7:5c:57:6c:d1:36:fc:aa:9c:a1:
e6:8b:0f:4f:17:a6:7e:24:5f:36:14:57:b9:df:ce:
c0:85:bf:e4:b6:44:ff:5e:ba:77:6c:14:0e:83:69:
e5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:47:B5:C7:08:A4:28:D5:64:37:63:03:EF:06:CF:D1:0B:1E:52:85
X509v3 Authority Key Identifier:
keyid:55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:b3:f9:cf:1e:51:cd:3d:04:09:fd:c6:02:be:5a:2f:31:07:
8b:dc:fe:0f:49:e7:bd:24:f1:09:fe:c9:26:83:14:9b:68:22:
8b:42:7c:fb:1d:70:39:28:1f:bb:35:fe:7c:55:13:4b:2a:29:
c0:08:82:64:33:5b:0c:2a:08:7c:58:a0:3f:76:14:b0:b3:4e:
62:b2:fc:85:5f:3e:1c:c4:13:3d:19:34:4d:08:13:56:bb:df:
9f:a6:fb:d1:3e:05:55:e5:dc:54:1a:21:e5:77:e3:16:31:27:
cf:76:57:db:62:5f:05:90:b2:e5:1e:cc:26:64:f7:e8:9a:9a:
36:be:f8:f7:8f:c3:11:8e:11:45:bf:7f:5b:06:fa:a8:6e:30:
63:61:ec:24:48:ab:06:4c:ac:69:c1:cc:e1:13:4c:67:b8:bd:
15:37:51:7c:10:8a:d0:01:65:2a:88:84:7b:bd:39:ea:7b:1c:
ee:5a:a9:21:2d:a5:69:49:59:33:3e:37:db:b9:9f:a0:6e:63:
df:01:73:6d:1b:75:10:bf:7e:a4:df:76:b6:cb:c6:80:72:2e:
03:a1:e7:e3:16:72:5d:3f:39:30:2e:97:be:f7:5c:2a:23:dc:
74:99:1c:f9:ab:ec:ea:6c:bd:ce:fd:a6:03:f8:4d:f1:8c:f1:
13:72:c9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:06 2026 by rpki-client