Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json)
Hash identifier: g2IDL8Cpqr1YQvag8uXULxE/IYBoJuu6JaVOy1rZvbw=
Subject key identifier: 65:5B:A9:40:C7:9F:41:39:84:1A:CE:C1:1C:E4:7C:16:77:86:87:E9
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial: 019D39781DF0F47934DEFBE1B2F7549FB9E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
Manifest number: 099E
Signing time: Sun 29 Mar 2026 12:01:06 +0000
Manifest this update: Sun 29 Mar 2026 12:01:06 +0000
Manifest next update: Mon 30 Mar 2026 12:01:06 +0000
Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: sjx2PuXkXAKIOwZMzaYk3aGpcunqbGcgBm1jIhSewVg=)
2: gng50Ziqb6xrb3gKYd3mPMqKi20.roa (hash: Qgx/fSQr4uTOuIoJO8P5gUwe6l71dGbPdS6w5iyet3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:1d:f0:f4:79:34:de:fb:e1:b2:f7:54:9f:b9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Validity
Not Before: Mar 29 12:01:06 2026 GMT
Not After : Mar 30 12:01:06 2026 GMT
Subject: CN=655ba940c79f4139841acec11ce47c16778687e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:06:ea:12:49:7e:03:cd:78:44:98:d1:24:df:
b1:06:fa:c4:f1:d1:e3:59:f2:60:a2:43:dc:00:2b:
8a:55:22:4c:9d:13:be:da:c9:35:e1:2c:70:88:03:
da:f0:54:35:de:40:a5:7d:27:db:87:ad:2e:99:c6:
a1:0d:ff:27:f2:36:25:d0:41:7b:8a:b2:1a:f1:ca:
73:98:b0:2a:02:ff:6c:ed:d2:62:29:61:1c:00:82:
b5:bb:b3:6f:e8:c3:c9:e8:2f:42:9f:10:5b:47:5b:
ae:c1:ba:16:37:8d:5c:89:6e:b0:de:9c:ca:f3:75:
2f:8b:a3:6f:1e:66:52:e0:a8:6c:7d:ef:ee:7f:3e:
55:79:ae:aa:0d:6f:a4:9c:f4:67:aa:6a:1a:d6:8e:
59:29:58:6a:1e:be:26:72:9b:00:32:5e:dd:0c:d5:
22:61:0d:df:f1:2e:8e:50:0e:2d:18:27:73:3d:62:
8a:86:14:49:0f:50:e5:61:9c:52:3d:9c:46:df:e7:
63:1d:eb:e4:63:cb:4d:bc:6d:2b:59:2a:08:9e:80:
3a:5f:78:4a:68:51:62:0c:3e:b2:06:db:19:36:45:
6d:65:5b:81:c1:28:97:93:1c:51:be:67:16:6e:11:
8a:b1:cb:08:7e:cd:bc:57:bb:fb:ae:9f:e6:7b:c8:
e2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5B:A9:40:C7:9F:41:39:84:1A:CE:C1:1C:E4:7C:16:77:86:87:E9
X509v3 Authority Key Identifier:
keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0f:ef:31:4a:68:a4:a0:8e:2e:c1:27:93:36:02:57:8b:23:
28:3c:40:a4:80:fc:7b:62:b9:5d:d0:f5:49:a1:38:bb:11:b4:
30:4f:07:d1:c6:df:66:e3:85:00:75:5a:a2:6a:5c:94:33:bb:
a2:8b:e6:73:9c:e3:e3:d0:2b:0f:db:af:8b:f2:7f:42:19:c5:
49:53:cd:8b:fd:e1:2f:88:b2:d3:7c:08:9f:2d:8e:d6:cf:f0:
4c:c4:70:06:43:b7:d6:c2:bc:ff:ec:87:9f:5e:fe:17:4a:63:
67:25:fc:b5:15:20:08:44:c0:e7:7c:7a:54:7b:33:39:39:41:
8c:3e:72:01:9f:25:f7:5a:3c:78:2b:49:f2:94:d0:fb:2b:0f:
4f:46:4b:c3:fe:c8:89:96:37:67:e9:9d:17:b9:15:b3:e7:bd:
0e:7d:03:df:3b:d7:0d:d9:3b:56:d6:42:06:3f:0e:52:d8:c3:
d8:56:26:8d:7a:76:87:1d:87:b1:81:09:e9:e7:6e:2d:91:a2:
5d:df:c4:2f:08:48:59:ff:b8:8e:f1:16:76:a5:3a:3e:6f:50:
3b:fb:6a:75:10:98:6c:40:0d:10:b8:1f:f2:79:83:da:47:0c:
33:5b:8b:35:11:b8:bb:84:00:d1:a9:a0:91:ee:5a:cd:34:71:
3b:a1:b1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:40 2026 by rpki-client