Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
File: VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft (raw, json)
Hash identifier: Ms8ot0TLJbOzDiyQ29LsUezKfbidKjg/2hh1Qg7AAgc=
Subject key identifier: BD:71:41:BC:23:A3:8F:1D:99:B3:49:AE:E8:AB:E1:23:2F:0D:D0:F0
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 019D389C2FAA5F1A168DD0DDA6E2E02363C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
Manifest number: 1412
Signing time: Sun 29 Mar 2026 08:00:52 +0000
Manifest this update: Sun 29 Mar 2026 08:00:52 +0000
Manifest next update: Mon 30 Mar 2026 08:00:52 +0000
Files and hashes: 1: CZLgI1TrOoXIuuR8mtRn5Oxdnrc.roa (hash: aPXgiMnEH0aukIEV+u/T5KK1iHMqS2/X9emnoyzGOAM=)
2: SLZtN31ceYrOky3sUddoMo-Zyd0.asa (hash: Mg1W7yj5mjt/I157Chfa/2ODdFHcKS2JBnmxs2U+y/4=)
3: VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl (hash: uVBN47afDUG5kMaqdomEvB/fzVR/r3Rl3OKosFLShLM=)
4: YhZ9fwff9w4xgatIGpRL14zM3PM.roa (hash: iA9BHQGCf6MQBqEfoa7a5mJjbUujB8oZXq8R3pndWb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2f:aa:5f:1a:16:8d:d0:dd:a6:e2:e0:23:63:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Mar 29 08:00:52 2026 GMT
Not After : Mar 30 08:00:52 2026 GMT
Subject: CN=bd7141bc23a38f1d99b349aee8abe1232f0dd0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:09:15:3f:00:f2:3d:e5:4d:67:cb:a3:5b:49:
99:7e:86:81:24:82:e5:e0:a7:39:c2:33:8d:10:c4:
11:c9:6a:08:d1:4c:5a:8a:54:38:57:50:57:2d:9d:
9f:e2:70:60:41:c3:3a:ab:43:5d:87:b7:83:62:57:
02:be:4d:91:67:eb:68:93:62:69:1d:e3:0f:0b:25:
18:94:1f:70:0a:af:81:fb:e8:d9:95:ba:1a:19:2b:
4a:b2:d2:71:b9:c3:c8:aa:75:6a:fb:87:25:41:cc:
54:69:52:c4:57:38:38:aa:cd:a3:ad:10:10:35:f9:
85:12:d2:53:b2:60:9b:c9:66:e0:b3:55:2c:55:d0:
fe:ba:19:6e:73:19:48:3b:55:07:b3:05:fe:ad:5d:
49:85:ff:a7:f3:a2:b2:a5:55:d7:f1:f5:e7:b3:a8:
1f:c2:36:7c:d3:8c:51:72:d6:86:9c:c7:f4:4c:00:
8a:02:a7:99:a6:1e:fa:cb:bf:69:21:cc:86:4b:de:
f5:2b:3d:8c:47:1d:8b:bb:95:e9:31:e9:f2:e6:38:
0b:c7:d1:68:9e:9b:f2:00:1f:9c:54:ce:2b:eb:aa:
6d:17:3e:33:b3:00:a3:81:ce:68:c1:9f:0a:57:4a:
ee:ca:8f:80:33:12:67:9a:fb:71:3e:ea:e7:a5:77:
f8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:71:41:BC:23:A3:8F:1D:99:B3:49:AE:E8:AB:E1:23:2F:0D:D0:F0
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:63:6b:85:a7:8e:13:01:4d:3f:50:93:5e:e1:86:f1:27:c2:
61:39:63:c5:3d:01:83:b7:34:dd:d2:55:ac:be:61:2c:53:e8:
30:5a:c0:63:94:f9:3b:bb:79:26:9d:b9:84:8b:f3:0f:ed:81:
ff:cd:28:98:30:b5:60:f6:4d:f8:1a:ed:a0:b0:36:24:f6:86:
8f:ad:4c:f7:cb:de:5e:81:09:c8:98:1b:2e:b0:8e:b9:bd:d7:
07:c0:f5:58:74:f4:d0:6d:d1:60:32:b5:4c:d4:09:8d:fe:c0:
b3:c7:f4:94:12:f0:f2:1e:d1:ab:9b:31:16:06:a0:65:87:4c:
92:0f:5a:ea:11:89:27:df:22:2f:ec:2e:69:ea:ea:6b:d7:a4:
0d:38:d5:91:9b:91:92:8a:6b:ee:b4:61:92:d6:c7:2b:71:ff:
36:29:9c:68:57:50:e7:8c:a8:37:dc:07:3a:31:dd:a2:d7:17:
09:be:ad:f7:72:91:0b:a3:6e:46:db:1c:7d:6b:48:2e:2e:85:
1b:88:4b:73:bb:c7:a7:9c:52:bb:24:b9:02:1f:d7:d8:dd:12:
2c:75:60:fe:d5:fd:b9:a3:16:d8:99:4c:dd:7d:a1:5e:c6:84:
7f:a9:f7:c6:f7:34:ba:d1:3f:5f:2b:15:ca:e4:d5:a1:42:dc:
59:08:87:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:13 2026 by rpki-client