Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
File: VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft (raw, json)
Hash identifier: bVomya+M/4FDkMKLNNkgkGov2z5BzmddumJfrNNdWWQ=
Subject key identifier: 34:B6:7D:23:36:58:6A:79:64:73:29:CE:1D:22:C4:8E:21:0C:22:77
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 01A1325957B70B06B11F271B2B9B271D9BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
Manifest number: 1625
Signing time: Mon 12 Oct 2026 23:01:18 +0000
Manifest this update: Mon 12 Oct 2026 23:01:18 +0000
Manifest next update: Tue 13 Oct 2026 23:01:18 +0000
Files and hashes: 1: T6MezzPBlD-bbmhzKmNPFwNmIv8.roa (hash: jsp4P2nEZMpmduMvRYgQ1VyIcfvVAi62rpnHCVogH+g=)
2: VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl (hash: YugmvN+mMgJinWdAvASy0f4VgigEnpVWYGvme01WQBg=)
3: mcJa5BsloYm8JusCxlLHO776lHs.roa (hash: HbfY+iVV1KBbAx/qXvr16mnDJ38KJqAs31bIwxnI0SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:59:57:b7:0b:06:b1:1f:27:1b:2b:9b:27:1d:9b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Oct 12 23:01:18 2026 GMT
Not After : Oct 13 23:01:18 2026 GMT
Subject: CN=34b67d2336586a79647329ce1d22c48e210c2277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:97:3d:c0:ab:10:2e:37:dd:c4:30:55:c1:
70:18:4a:fb:89:0b:f3:fb:a3:c0:90:8b:66:8c:f6:
42:b9:72:94:68:f6:82:02:c1:f6:53:38:d7:d5:d7:
d0:7f:47:51:1d:09:55:c8:c1:d0:99:05:a3:67:f3:
a7:d4:b3:0b:69:78:e7:48:6a:f2:bb:e0:2c:7d:55:
a5:a3:7a:64:54:1b:60:65:e1:29:c9:e4:81:80:b0:
77:f3:9d:87:52:dd:e4:74:d6:46:0d:08:ab:90:a3:
4f:5b:43:e3:5d:67:f5:5d:13:56:6c:bb:5e:05:d1:
ea:63:59:49:36:ca:69:b4:36:db:2c:dd:24:aa:ec:
fe:9b:53:43:09:dc:9d:a5:e1:d0:5c:60:5b:43:0c:
76:0c:d9:fe:09:1f:ba:01:23:88:b3:b7:4c:b1:71:
ed:a5:ba:03:e5:53:f9:b1:75:0f:41:82:22:bf:2e:
c8:fa:75:dc:5c:70:6c:e3:3d:55:ce:05:65:a8:45:
d8:7a:0b:51:c9:97:e9:9f:cb:72:66:21:ea:47:29:
71:4d:11:c8:c8:3c:02:6c:45:a7:ee:59:a7:d6:e3:
67:05:e6:37:43:d5:b9:18:7e:a9:26:2c:14:23:b5:
1e:b4:d4:ea:42:c7:db:ac:63:62:7d:34:0b:72:15:
e0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B6:7D:23:36:58:6A:79:64:73:29:CE:1D:22:C4:8E:21:0C:22:77
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1a:22:87:d3:0b:b5:9c:b6:a6:f8:a4:8d:ef:0c:17:cb:79:
8c:6b:42:40:e0:f9:cd:9f:96:6d:25:1b:b8:96:f2:d2:ed:da:
b7:47:ab:18:91:a8:bd:3d:be:a3:4e:db:3d:b0:fa:22:1b:3a:
e0:9d:05:3f:1e:4a:6f:ff:0c:69:94:5f:cc:b1:4f:a3:2e:16:
2f:80:9f:0b:3c:5b:23:de:9c:03:9e:c8:d7:40:c6:a1:53:01:
08:7c:4a:64:cc:1a:ed:01:b0:e2:a0:36:a0:fc:e8:94:1d:25:
74:51:59:7b:68:38:9e:ac:7d:4b:8a:8e:69:54:4b:bc:d5:c2:
c1:1e:11:49:f8:11:cd:ef:1f:b6:da:83:96:48:6a:4f:90:88:
91:f4:7b:5b:40:ef:89:c4:9c:d9:65:dc:02:02:fa:1f:6f:4d:
ce:8e:95:92:c3:9b:f8:ba:fc:98:df:8c:b6:83:18:b4:0f:71:
70:b6:c9:d3:49:ce:43:13:1f:44:18:fa:a0:1d:0b:cc:ff:9b:
fa:5e:5e:ce:f0:94:8f:29:20:ff:9b:68:c0:9f:2f:2c:86:af:
72:5e:0c:72:7c:42:72:93:92:db:70:09:93:58:2f:a5:3b:ab:
7c:cd:4f:3b:17:0a:01:8e:3e:8c:1f:20:38:e1:1c:d1:97:f3:
ab:1e:1e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:57:59 2026 by rpki-client