Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
File: VzzskGOoh0GEGQiwxSl_zbtDlTA.mft (raw, json)
Hash identifier: l4E8BkiGUFC92mNQqCTCOtm9Z9qKMaXO9SN9tnjP6Zk=
Subject key identifier: 5B:4A:FC:53:BF:52:60:3E:65:49:02:F5:CF:BF:1F:F5:E9:25:2D:CC
Authority key identifier: 57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
Certificate issuer: /CN=573cec9063a88741841908b0c5297fcdbb439530
Certificate serial: 019D37528A9A441EE86A113ECFCB952C762C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
Manifest number: 01AB
Signing time: Sun 29 Mar 2026 02:00:49 +0000
Manifest this update: Sun 29 Mar 2026 02:00:49 +0000
Manifest next update: Mon 30 Mar 2026 02:00:49 +0000
Files and hashes: 1: VzzskGOoh0GEGQiwxSl_zbtDlTA.crl (hash: wEB5q5UgvBfJl9Cnj5p7jivwlOYLSYYJtpt5Vd0hqjA=)
2: ZLc3hqqFoBFC9frMdPPPbRsPPRU.roa (hash: pd4K3nJ6Nw5wAHsdgLg8h3X1zrFnNuvfNOPXjKOzRnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:8a:9a:44:1e:e8:6a:11:3e:cf:cb:95:2c:76:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573cec9063a88741841908b0c5297fcdbb439530
Validity
Not Before: Mar 29 02:00:49 2026 GMT
Not After : Mar 30 02:00:49 2026 GMT
Subject: CN=5b4afc53bf52603e654902f5cfbf1ff5e9252dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a0:a1:bf:b9:bf:e6:b4:e3:2a:fb:74:d1:be:
39:74:67:6f:12:9e:fc:d3:c5:c1:9b:f4:fb:c8:90:
b5:68:0c:63:23:f4:44:9d:15:69:22:97:cf:a9:fc:
89:77:f3:c6:79:d3:e3:b7:d7:b5:b7:15:23:8d:5b:
e8:3d:16:20:b4:2f:c2:74:38:43:7a:4e:d1:2d:20:
8e:57:23:4b:75:ff:ff:a3:cf:4c:d3:b9:20:8b:a5:
9d:e7:45:8c:2d:a8:a2:4b:2c:12:59:67:30:68:67:
f8:d1:2c:eb:54:15:cc:91:d3:89:6b:81:19:b8:f3:
96:bb:70:89:63:64:94:a7:7b:1c:83:ae:02:37:6c:
c5:dd:2d:31:d2:36:d1:e0:bc:5a:8e:5d:df:93:10:
a7:a4:d9:6c:8f:c3:23:37:4b:dc:6c:ec:ef:a4:1d:
32:1b:db:83:22:85:33:ff:56:8f:01:80:64:d8:50:
e7:53:be:06:98:e2:b0:97:0a:f2:6b:b5:3a:de:4d:
f8:24:77:30:cb:48:f2:6f:0e:8f:a4:f6:cb:d1:45:
d3:21:81:66:9b:24:9d:be:8e:59:17:9f:50:2a:ab:
de:20:c4:77:88:bb:fe:96:e8:05:21:bf:e7:ca:5f:
6e:c1:43:5b:d8:55:7b:5b:3f:59:13:c8:cf:14:84:
41:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4A:FC:53:BF:52:60:3E:65:49:02:F5:CF:BF:1F:F5:E9:25:2D:CC
X509v3 Authority Key Identifier:
keyid:57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:27:19:af:1e:db:ad:9d:30:c2:fb:6d:5c:05:85:f2:36:01:
2b:aa:45:b4:94:25:8f:3e:29:52:1e:40:69:9a:3a:11:5e:18:
bd:58:89:c7:74:9c:e3:92:c7:37:71:69:9e:50:0b:94:02:54:
11:04:1c:bd:6b:fd:c5:a2:6e:f5:b6:bf:be:f7:90:18:41:ce:
9f:ef:0a:07:29:52:9e:04:e6:f5:64:c1:31:4c:49:85:4c:9f:
1a:ca:94:5c:9b:0f:35:a7:ae:96:d4:39:ef:b9:b6:20:39:47:
e8:63:1e:72:59:68:54:27:2b:33:c8:bf:53:b1:ea:64:4c:7a:
c0:8b:fd:4e:ff:2f:3f:39:69:48:13:64:98:47:b8:00:e7:20:
a3:03:f8:29:bd:0b:bf:de:f5:fc:ca:a4:b3:50:fc:78:dc:cb:
fe:c2:eb:f7:4e:87:90:d8:b1:37:d8:13:41:fd:a5:56:35:85:
e0:d8:80:4b:3a:82:e8:07:17:41:da:b6:bf:8f:70:4b:fc:77:
92:57:26:c3:28:a7:05:4b:6c:78:dc:62:b7:9b:6b:fd:a3:93:
7e:5b:c3:06:f5:c5:8c:4a:54:8d:0e:2e:da:a7:42:dc:b5:1d:
e4:62:43:af:43:22:17:bf:ed:ba:79:da:27:34:ae:97:9f:cc:
1b:8c:fa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:05 2026 by rpki-client