Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json)
Hash identifier: rL4TlnwwdqI3Y7Wjw4eTZILsbtJ/syZ9XX+daSel7po=
Subject key identifier: 89:A4:76:23:3F:D0:5A:90:F9:79:EE:A3:AE:5C:9F:C0:A5:FB:6E:4F
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial: 019F1867D47EE0AB3BF1240F8AAFC6A06529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
Manifest number: 0A96
Signing time: Tue 30 Jun 2026 12:01:25 +0000
Manifest this update: Tue 30 Jun 2026 12:01:25 +0000
Manifest next update: Wed 01 Jul 2026 12:01:25 +0000
Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: 1OJ/Sevwp4yWnnV/qeWIJUGAzBlpOO5UF/dLhUU5W2I=)
2: gng50Ziqb6xrb3gKYd3mPMqKi20.roa (hash: Qgx/fSQr4uTOuIoJO8P5gUwe6l71dGbPdS6w5iyet3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:d4:7e:e0:ab:3b:f1:24:0f:8a:af:c6:a0:65:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Validity
Not Before: Jun 30 12:01:25 2026 GMT
Not After : Jul 1 12:01:25 2026 GMT
Subject: CN=89a476233fd05a90f979eea3ae5c9fc0a5fb6e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:fc:d6:fd:57:9d:bc:2b:89:fb:b0:70:5d:
a1:1b:24:65:02:c2:8e:40:3e:dd:03:a2:b5:7b:a5:
5d:3d:24:bb:c2:7a:e1:a7:0b:bc:cf:cb:c7:21:64:
d1:49:e5:4e:60:ed:ef:6a:db:c5:8f:95:68:83:30:
ca:bc:db:a0:88:c8:2e:19:d0:f7:72:6c:7d:52:37:
50:02:4d:49:09:0a:33:e1:d9:65:09:84:c2:33:1b:
13:c3:98:05:52:7f:c3:4b:4a:b6:79:49:02:64:ab:
56:e6:e9:23:d8:8a:0f:08:a6:87:64:6d:15:04:18:
41:ee:9d:81:79:80:3d:82:f9:33:46:06:07:c7:c8:
01:43:11:25:b9:8e:44:52:57:08:b2:1b:29:55:6a:
82:11:cb:6f:4a:cc:57:e8:0c:ab:f8:c0:e6:2f:63:
2b:83:8c:66:d9:e7:a5:90:e4:ea:34:03:8f:3d:bf:
a4:a2:b2:13:5e:19:2d:d8:6f:59:4c:e2:e3:d2:b8:
38:ee:07:6d:1a:83:fd:0e:ea:46:88:fe:84:fe:b7:
34:ba:04:1b:4b:77:c6:4e:32:68:65:46:49:4d:db:
4d:6b:65:3b:2c:c5:a9:62:b3:af:9b:ae:11:56:f2:
55:a0:23:a1:1e:7a:73:cc:b3:cb:4d:5f:e9:1f:22:
f6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A4:76:23:3F:D0:5A:90:F9:79:EE:A3:AE:5C:9F:C0:A5:FB:6E:4F
X509v3 Authority Key Identifier:
keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7c:04:76:33:c6:e5:33:89:01:61:b0:18:9c:f3:1e:22:11:
ac:90:7b:e7:dd:37:93:40:19:19:e4:96:0b:c2:f0:8e:97:76:
f3:62:d4:80:31:fe:c7:27:51:23:88:1d:41:1d:35:3c:e4:e1:
df:94:25:19:d3:87:ce:96:4d:25:15:af:b1:97:93:7d:42:13:
d9:95:43:be:2f:31:57:12:4e:82:b0:42:49:3f:b2:43:4d:05:
bd:22:9e:7e:91:b5:a1:88:f4:47:8d:83:06:0f:2f:9e:b9:59:
dd:d1:6f:eb:63:e9:08:13:6e:36:02:6d:c2:88:e8:5e:4d:85:
34:26:f0:7e:6f:49:b4:a2:e0:02:1a:2f:18:0a:87:a1:4f:05:
7a:47:38:e2:94:b7:4d:30:f9:a4:50:4b:85:d2:2b:61:ec:f8:
f1:a8:78:46:57:97:32:6f:b2:88:ae:e5:99:12:c8:8a:61:11:
97:48:ef:31:7e:62:0c:71:23:d5:f1:e8:b6:b3:fc:ea:85:7c:
cd:3e:5c:0b:62:da:8f:7d:29:62:ca:3f:b4:d8:0a:ac:31:e4:
49:10:83:7a:1b:d6:51:e3:33:3a:f7:da:01:19:bf:1f:42:a4:
3c:41:ea:41:89:4f:80:8c:06:6a:3b:b6:36:d1:15:78:db:e5:
29:a2:82:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:44:16 2026 by rpki-client