Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
File: VzzskGOoh0GEGQiwxSl_zbtDlTA.mft (raw, json)
Hash identifier: oKs2gMkKt/XTBDfpPBtFWQ1j67hx9QuHEeizOU+0rAA=
Subject key identifier: E1:20:DC:DB:5D:98:13:F1:B4:D6:4B:09:B9:2F:43:90:B3:73:0D:37
Authority key identifier: 57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
Certificate issuer: /CN=573cec9063a88741841908b0c5297fcdbb439530
Certificate serial: 019FA116E0A67502C9041D95CE1EC40D0076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
Manifest number: 02EF
Signing time: Mon 27 Jul 2026 01:00:58 +0000
Manifest this update: Mon 27 Jul 2026 01:00:58 +0000
Manifest next update: Tue 28 Jul 2026 01:00:58 +0000
Files and hashes: 1: VzzskGOoh0GEGQiwxSl_zbtDlTA.crl (hash: w6oJ0iClydfsrHUSqUTkFItjK2Py4ktuq9iK3ABcAtw=)
2: myi3VwIyhKHJnr4qWMXGZa7tHxI.roa (hash: b4s1Ux4EB6+WfVHpUE0ZJZ00qhc7lmZkSyuU6m+Npgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:e0:a6:75:02:c9:04:1d:95:ce:1e:c4:0d:00:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573cec9063a88741841908b0c5297fcdbb439530
Validity
Not Before: Jul 27 01:00:58 2026 GMT
Not After : Jul 28 01:00:58 2026 GMT
Subject: CN=e120dcdb5d9813f1b4d64b09b92f4390b3730d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:30:a9:f7:0d:c3:1c:c2:f4:0b:1f:a0:fe:20:
4e:0f:6d:34:b2:f0:3d:53:ae:c2:64:dc:f5:e0:36:
d4:17:ea:6a:bd:63:18:8c:08:f9:e4:72:6b:df:b1:
6f:bf:0a:e9:e1:f1:a5:33:54:8e:92:17:90:e7:af:
6d:ee:d9:0c:b1:b1:c6:8d:15:5c:a8:70:2b:ee:ab:
50:59:28:da:65:ca:1c:39:23:49:4b:fa:ac:24:0d:
d4:4f:bc:7a:f2:b5:29:43:53:86:10:0e:fa:80:e4:
d9:32:5b:81:72:de:a4:bd:ea:29:d3:f4:e6:8d:24:
49:5b:2b:17:b2:fc:a0:2f:76:9d:5b:db:bd:27:b0:
d6:89:6e:12:ec:ef:f1:16:a9:a5:6f:4f:3b:72:32:
cf:b7:aa:dd:60:cc:0d:e8:35:31:44:b3:25:62:4b:
dd:30:6e:31:b3:0a:3b:4b:c2:4c:d5:c9:b1:08:f7:
b3:32:20:30:57:ff:7c:8e:1d:e7:0c:a7:c8:55:bb:
08:9a:7d:5b:f8:2f:3c:c3:57:9e:4e:ea:57:a3:6c:
41:b2:3b:32:a1:a8:cd:a6:90:3c:f4:ea:d2:9f:69:
5b:c2:49:50:1e:d7:85:cb:8b:95:c3:51:23:2a:30:
ee:70:64:f4:f1:31:ef:81:a4:13:97:9d:b1:2c:07:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:20:DC:DB:5D:98:13:F1:B4:D6:4B:09:B9:2F:43:90:B3:73:0D:37
X509v3 Authority Key Identifier:
keyid:57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2c:00:2c:76:73:7a:76:0f:90:89:00:1f:72:74:a8:ab:cd:
8e:70:15:87:b8:22:10:0e:a2:af:99:e7:08:34:aa:8a:be:ea:
17:aa:ee:a3:ad:54:53:ff:39:ce:87:93:d4:b6:38:75:31:f6:
06:6d:f5:67:33:52:6b:d9:3e:1b:38:8b:ad:70:7d:46:fc:6a:
a5:e4:02:d0:9f:b5:71:ec:49:e5:bf:95:3e:54:a6:c4:53:08:
05:cf:b4:f1:2a:05:ce:82:8d:90:29:33:ce:4c:8f:5b:6b:e7:
0b:3b:95:ff:88:8d:9e:0d:47:3e:8b:74:4f:86:f2:df:10:8b:
38:9c:fd:3d:5a:05:12:6b:4c:dd:7d:fb:03:0b:ea:cc:06:53:
d4:50:52:64:7c:40:3d:0e:11:8b:4e:16:62:18:5d:28:ab:2e:
9e:99:43:48:a1:de:81:0f:21:0e:b9:03:1f:ba:b9:29:25:c6:
ba:b4:cd:c4:d1:c9:f5:68:c9:eb:ae:67:0a:e9:49:09:96:36:
5e:91:8f:b2:1c:0e:cc:fd:39:2f:f5:9d:17:85:06:7d:30:c2:
ef:b0:65:75:32:3f:c1:07:be:a1:8b:1d:f1:63:d7:0e:66:19:
db:56:b3:c1:2b:c1:3a:d2:56:6c:ed:ee:77:51:96:4f:9b:5d:
12:f3:f2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:08 2026 by rpki-client