Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
File: VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft (raw, json)
Hash identifier: cFs9TBkt+ugink5ivRK1pOSc5Y5vVWVBJ+eSXeHNuUU=
Subject key identifier: B0:AE:02:B5:5F:0F:1A:C5:2D:BA:ED:F8:12:36:9F:05:D5:68:84:00
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 01A00326BC007F8DD91BE044432C38725181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
Manifest number: 1588
Signing time: Sat 15 Aug 2026 02:01:05 +0000
Manifest this update: Sat 15 Aug 2026 02:01:05 +0000
Manifest next update: Sun 16 Aug 2026 02:01:05 +0000
Files and hashes: 1: T6MezzPBlD-bbmhzKmNPFwNmIv8.roa (hash: jsp4P2nEZMpmduMvRYgQ1VyIcfvVAi62rpnHCVogH+g=)
2: VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl (hash: +LgPWpq6J5s7gm7LjNE04lI0HFSWNuBvSMMj+/VxbhE=)
3: mcJa5BsloYm8JusCxlLHO776lHs.roa (hash: HbfY+iVV1KBbAx/qXvr16mnDJ38KJqAs31bIwxnI0SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:bc:00:7f:8d:d9:1b:e0:44:43:2c:38:72:51:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Aug 15 02:01:05 2026 GMT
Not After : Aug 16 02:01:05 2026 GMT
Subject: CN=b0ae02b55f0f1ac52dbaedf812369f05d5688400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:c1:4a:10:ba:ef:1b:fb:76:1c:f3:80:f5:
35:ef:ec:00:b4:d4:f3:8f:39:72:4e:88:5d:a0:31:
72:9d:66:82:72:39:0c:1f:12:db:a6:b7:1c:33:04:
aa:32:ba:97:59:a5:89:7b:03:7a:1d:44:5a:5d:c9:
48:72:56:1f:52:66:2b:1a:dd:97:eb:ee:69:e6:8b:
8d:a3:95:1d:99:f9:6f:38:e8:9c:62:a6:a4:05:d7:
b3:cb:e7:08:c9:43:c8:04:7b:5d:d1:b5:a4:c6:8d:
5c:8a:ad:5e:14:78:91:a1:d2:3c:45:f5:44:2b:05:
6d:e4:2f:81:66:53:ab:57:74:52:f7:52:20:3e:c1:
39:75:e0:5b:19:74:a0:c4:1e:cd:0d:75:7c:31:7e:
63:27:b9:1a:6b:e6:b7:bb:18:bf:ae:65:4a:da:c8:
b8:19:45:35:62:8b:5d:d5:96:20:33:2a:d0:79:4f:
98:27:80:cd:71:01:b1:f2:8d:56:ac:4f:23:21:5b:
da:f3:e4:4f:5c:fa:27:28:87:50:bc:7d:33:7e:01:
9f:19:f8:d8:19:6e:58:c7:3b:80:d4:82:e9:6c:8e:
c6:92:9a:c3:4a:32:91:4e:22:6c:e5:cc:54:37:77:
1e:25:2b:81:9e:e0:c1:cb:7b:b9:aa:06:f6:f2:6c:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AE:02:B5:5F:0F:1A:C5:2D:BA:ED:F8:12:36:9F:05:D5:68:84:00
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ef:b4:c2:ff:04:20:62:f8:84:a3:7c:7d:f0:e8:af:e4:dc:
cd:51:3c:8d:54:a9:4d:63:2b:60:4c:d8:cb:5e:3b:8a:da:fe:
9f:37:8c:74:9a:9c:0c:d1:84:b9:51:4b:8d:65:bd:1b:aa:36:
4f:ad:67:4c:b8:ee:26:ea:73:80:e5:c0:c0:40:ee:d9:1f:2c:
6b:36:a6:d1:4b:1f:d5:a7:88:a3:75:d9:27:7b:75:c6:e1:0a:
9d:4f:13:6e:18:12:38:8a:24:0a:e5:e7:3a:6b:fc:48:ce:9f:
98:16:36:62:ab:6f:c4:51:44:b5:78:dd:29:f9:e2:66:1f:57:
68:71:df:2f:0c:6f:1f:a3:0c:3f:eb:85:0b:4d:6c:62:70:9a:
e5:de:f3:53:46:e6:47:92:c5:a6:ca:a3:f0:51:c7:ca:35:73:
09:47:a0:36:d6:7e:82:e8:ff:9d:7a:95:25:d1:e5:da:3b:c7:
16:ef:ac:88:c6:f7:31:b4:1e:d5:59:36:c3:39:e5:1e:a0:7b:
0a:67:19:e4:b3:28:94:bb:4d:1f:0c:76:8b:cc:34:31:b0:6a:
db:8d:d9:0a:59:41:f8:86:ce:ab:00:ec:33:fb:5a:fd:0c:16:
4b:e7:fb:f1:cc:d8:8c:6a:a4:99:bb:64:12:95:64:db:ba:3a:
dc:9d:2c:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADJrwAf43ZG+BEQyw4clGBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OThhZTVkNWYxMjgyNWE4NGU2YzQwMWMwMTNjYTVlNWRj
ZDllYzkwHhcNMjYwODE1MDIwMTA1WhcNMjYwODE2MDIwMTA1WjAzMTEwLwYDVQQD
EyhiMGFlMDJiNTVmMGYxYWM1MmRiYWVkZjgxMjM2OWYwNWQ1Njg4NDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJXBShC67xv7dhzzgPU17+wAtNTz
jzlyTohdoDFynWaCcjkMHxLbprccMwSqMrqXWaWJewN6HURaXclIclYfUmYrGt2X
6+5p5ouNo5UdmflvOOicYqakBdezy+cIyUPIBHtd0bWkxo1ciq1eFHiRodI8RfVE
KwVt5C+BZlOrV3RS91IgPsE5deBbGXSgxB7NDXV8MX5jJ7kaa+a3uxi/rmVK2si4
GUU1Yotd1ZYgMyrQeU+YJ4DNcQGx8o1WrE8jIVva8+RPXPonKIdQvH0zfgGfGfjY
GW5YxzuA1ILpbI7GkprDSjKRTiJs5cxUN3ceJSuBnuDBy3u5qgb28myZvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCuArVfDxrFLbrt+BI2nwXVaIQAMB8GA1UdIwQY
MBaAFFWYrl1fEoJahObEAcATyl5dzZ7JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xZjYwNzMtODdiMi00YmIzLWFjYjct
NWMzZGI5OGJmODY0LzEvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xZjYwNzMtODdiMi00YmIzLWFjYjctNWMzZGI5OGJmODY0
LzEvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL++0wv8E
IGL4hKN8ffDor+TczVE8jVSpTWMrYEzYy147itr+nzeMdJqcDNGEuVFLjWW9G6o2
T61nTLjuJupzgOXAwEDu2R8sazam0Usf1aeIo3XZJ3t1xuEKnU8TbhgSOIokCuXn
Omv8SM6fmBY2YqtvxFFEtXjdKfniZh9XaHHfLwxvH6MMP+uFC01sYnCa5d7zU0bm
R5LFpsqj8FHHyjVzCUegNtZ+guj/nXqVJdHl2jvHFu+siMb3MbQe1Vk2wznlHqB7
CmcZ5LMolLtNHwx2i8w0MbBq243ZCllB+IbOqwDsM/ta/QwWS+f78czYjGqkmbtk
EpVk27o63J0sQg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:34:48 2026 by rpki-client