Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
File: VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft (raw, json)
Hash identifier: 0Bm7bleuubDuKb3dAoIgEk7k0U8EIAtGej1AjoA35Lc=
Subject key identifier: FC:99:75:B7:36:EA:70:79:0E:DF:12:2A:1C:22:3E:2F:FD:60:1B:FA
Authority key identifier: 57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
Certificate issuer: /CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Certificate serial: 019D37524705C2BC9714AA6EF51C19A586DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
Manifest number: 0793
Signing time: Sun 29 Mar 2026 02:00:32 +0000
Manifest this update: Sun 29 Mar 2026 02:00:32 +0000
Manifest next update: Mon 30 Mar 2026 02:00:32 +0000
Files and hashes: 1: TdRoRuguftg1_CqdWk5Gt48Zm3Y.roa (hash: pIKJO4UhdvjyOo9X0IBFTTqjiFZEhP9y8W9dyCKa0M8=)
2: VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl (hash: hhU2XUdLFqngMJCFMCd9z2lqX+8dcFa9w7YNkLn7Tbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:47:05:c2:bc:97:14:aa:6e:f5:1c:19:a5:86:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Validity
Not Before: Mar 29 02:00:32 2026 GMT
Not After : Mar 30 02:00:32 2026 GMT
Subject: CN=fc9975b736ea70790edf122a1c223e2ffd601bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:70:73:ab:27:4b:0d:4a:ef:26:e1:c5:9a:
d1:b4:2c:f5:c6:f6:e5:2f:55:9a:f0:f1:ad:46:89:
dd:9c:5f:0b:b0:25:69:a0:49:c8:4d:12:a1:e0:94:
c6:41:ad:04:0d:86:27:a1:81:ec:13:11:fe:59:ce:
6a:36:d6:6b:bb:0d:fc:6a:18:8d:eb:14:dc:21:97:
cf:ff:30:78:ca:6e:fb:56:e5:38:9b:25:80:bb:67:
99:e1:68:a3:c8:79:05:2b:da:dd:4d:13:b0:8c:71:
a3:35:3b:20:2d:ed:bb:e5:c4:37:f2:76:13:3f:1b:
19:2a:c3:77:7c:d9:7f:4e:ef:c4:81:bd:f3:e3:25:
0e:25:2e:c9:cb:7e:a0:8d:fa:ad:73:3f:79:f6:8c:
6d:99:fb:00:54:13:03:fb:dd:d1:d1:dc:d6:72:d8:
8c:db:e5:d5:b2:4f:8c:a1:67:8f:af:30:c5:c2:54:
e2:57:75:3d:ff:ed:b0:d2:19:d1:dc:ed:f5:84:6e:
f3:ee:96:1a:09:a4:79:42:a7:10:c1:54:91:bf:c6:
06:9b:9c:99:4d:86:f4:60:3e:4a:71:f1:56:4c:a5:
50:16:d3:3e:01:04:46:38:da:b2:bf:57:b0:d8:99:
61:34:da:28:da:1c:99:2e:77:da:10:84:3b:77:2f:
a5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:99:75:B7:36:EA:70:79:0E:DF:12:2A:1C:22:3E:2F:FD:60:1B:FA
X509v3 Authority Key Identifier:
keyid:57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b7:ef:57:61:fb:1f:f5:47:b0:7d:2c:57:b2:6f:c1:6c:09:
99:9f:04:83:41:27:ea:e0:1f:7a:ba:c2:cc:15:4b:92:03:3b:
87:36:fa:87:7a:0a:6d:ef:38:e8:21:16:f5:d3:ea:08:5a:22:
f9:f3:67:05:aa:66:2e:0b:41:28:2f:34:e0:0d:fe:78:3c:23:
27:b8:1a:0b:53:4e:0f:a7:42:33:08:8a:ec:dd:50:5f:9e:4e:
19:7b:ac:ab:8c:0a:3c:ce:be:96:83:ae:ae:73:be:77:fe:62:
af:e6:b8:c6:68:7f:cb:d3:5e:0f:ed:86:3d:80:28:da:5e:b7:
7e:eb:d0:07:70:6e:17:6e:a9:dc:a4:f2:16:eb:88:88:35:18:
ee:bc:9c:7b:a8:77:16:9f:3b:fb:55:f3:c0:93:fb:9f:da:cf:
63:50:ae:73:b8:a7:b4:e8:aa:12:6f:58:0f:be:36:17:c5:18:
19:97:f3:25:25:5a:3e:3a:97:66:35:43:a0:e8:7a:93:e7:ef:
99:66:86:8c:36:2f:03:5b:2c:30:e9:9b:80:9a:83:13:b6:d3:
d9:85:2a:68:fc:eb:ea:77:48:e4:f5:9a:a3:ef:a3:36:46:bc:
47:b1:34:7b:40:3a:3c:67:e6:f6:16:2e:e9:07:db:3d:0c:dc:
39:9b:2e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:23 2026 by rpki-client